last executing test programs:

11.699776155s ago: executing program 2 (id=3031):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0006000046529e0b42111533d206ff24004f0a7c1067254168"], 0xa8}}, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000a00)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000a40), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x10000000, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}})

11.546896667s ago: executing program 2 (id=3022):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x8, 0xb, 0x1})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0xb)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/mnt\x00')
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0)
r3 = creat(0x0, 0xecf86c37d53049cc)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}}, 0xb4}, 0x1, 0xffffff80}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@updpolicy={0x148, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}}, [@tmpl={0x84, 0x5, [{{@in6=@empty, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x3502, 0x0, 0x0, 0xff, 0xe2, 0x5, 0x8}, {{@in=@local, 0x4d5, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x80000000, 0x1, 0x2, 0xcb, 0x8, 0x4, 0x7fffffff}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x148}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0)
io_uring_setup(0x1195, 0x0)
io_uring_enter(r3, 0x2219, 0xae02, 0x16, 0x0, 0x58)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r6 = socket(0x840000000002, 0x3, 0xff)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1082b, 0x17e05}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x21}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0xa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="375d3ee42115d285", 0x8}, {&(0x7f00000002c0)="6847e0650cd2fdc16e8429088f0cac85c258cecdd935d23ffa249a8e23c01314816c4241e86721d2aae9bd9bc49ca2e30346b206a1fd1abec349f1f6c6f21e9730b23527444603d471aae63ab81fa6c2107d1a39f5681fa528afa91f18b83ecd016f81395247260c80202aab988f732cab99e6e9115160ef81ec4e96fdff6a82433f15caac7932", 0x87}, {&(0x7f0000000380)}], 0x4}}], 0x1, 0x4004040)

11.418363046s ago: executing program 2 (id=3024):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5e20c}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94)

11.310089471s ago: executing program 2 (id=3025):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000000c0)={0xffffffff, 0x24, 0x6, 0x8, 0x2b})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000001c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x6c, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3e, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2c0d05bc"}, @generic="eed7f8cfbe511c7ff00c2cbbdd", @nested={0x4, 0x8003}]}, 0x6c}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000000c0)={0xffffffff, 0x24, 0x6, 0x8, 0x2b}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) (async)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000001c0)) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x6c, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3e, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2c0d05bc"}, @generic="eed7f8cfbe511c7ff00c2cbbdd", @nested={0x4, 0x8003}]}, 0x6c}}, 0x0) (async)

10.454297481s ago: executing program 4 (id=3030):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000180)=0x8)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x126)
pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a000002005000500032c0858d00000160100385bc40df0001010101ba", 0x2f}], 0x1, 0x6, 0x0)
r2 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000001840), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f00000018c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
close(r6)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x240, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_emit_ethernet(0x15e, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYRES32=r0], 0x0}, 0x94)
r10 = syz_open_procfs(0x0, &(0x7f0000001cc0)='net/rpc\x00')
r11 = openat(r10, &(0x7f0000001d00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r11, &(0x7f0000001d40)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24)
close(r11)
r12 = openat(r10, &(0x7f0000001d80)='nfsd.fh/channel\x00', 0x2, 0x0)
write(r12, &(0x7f0000001dc0)='localhost 1 \\x00000001 2000000000 /\n', 0x24)
r13 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000001e00)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r13, 0x29, 0x30, &(0x7f0000001f40)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)

10.344261384s ago: executing program 2 (id=3032):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000040)={0x0, 0x5961, 0x8000, 0x0, 0x4e}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300))
r5 = syz_usb_connect$hid(0x3, 0x34, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0)

8.727473609s ago: executing program 4 (id=3040):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf251c00000008000300", @ANYRES32=r4, @ANYBLOB="689840715cac983369cbd04e4ae9f5ed4624b07849015e4012c284c0289fe43f97570cc6cb5b5f623afeeb837b6abff2160800000000000000fa4899c1225f6c0c55ac62573228bb710dd5caf0949abd66d35f2579e1ecce63288f3769c520c8816596d5fa0a8adb418cf7ff5a0e1b22720e6c7967fd824d301ddca647053d12ef78394a54e03b441a79238737164f983f02bd8e7b4cdc90af4c0586a863d922a0319392d0eae4f14d4c502f8ec8cdd5d28aba67544b0e"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
gettid()
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040))
connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000440), 0x318, 0x0)
recvmmsg(r5, &(0x7f0000000480), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0xffffffff, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0xfffffffd)
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f00000005c0)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000600)=0x10)
close(r7)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000640)='sour:e', &(0x7f0000000680)='c:::\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x802, 0x0)

8.374390892s ago: executing program 4 (id=3041):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000bc0))
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x4}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x800000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x1, 0x0, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0)
openat$rtc(0xffffff9c, &(0x7f0000000500), 0x2100, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.events\x00', 0x275a, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x2c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x5)
timer_create(0x0, &(0x7f0000000f80)={0x0, 0x21, 0x4}, &(0x7f0000000fc0))
syz_usb_control_io(r4, &(0x7f0000001000)={0x18, &(0x7f0000001040)=ANY=[@ANYBLOB="20b52c020000065f06d209f7d3f7897a70788c2e8445f7d3ffa2dcc8727e68be299865bd5906977d3c32c193fb8f741506960348bf38e985db517d909cca87a076eb56ce2d8226ac63d86f3e9d7bc44678fc6014789b9d7e2a90f62cb5bafdad1c067fc10e54c95428c6a40fe5acde92d5736efb8b8bd2bc1c966d8fd15c34a49e5043089ef31520d7998710b92816d4b79f88536043609b0acdef03aee34bfd8564447ead876c399e6368b6adb1551147a74a92"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r4, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000001100)={0x0, 0x2})
mknod$loop(&(0x7f0000001140)='./file0\x00', 0x40, 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x413cd6938a521681, &(0x7f0000001180)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000011c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x7ffd, 0x35014a40, 0x4, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001240)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000003340)='./file0\x00', 0x80101, 0x101)
r6 = syz_open_dev$dri(&(0x7f0000003380), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f00000033c0)={0x3, 0x2})

6.607476016s ago: executing program 2 (id=3054):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c3a0081e949b93897bc3b0000000000007d01ff020000003c00000000000000000001"], 0xfdef)

6.144691709s ago: executing program 1 (id=3057):
r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102320000070582"], 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x44c1)
r2 = msgget$private(0x0, 0x2)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000580)=""/4096)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000280)=0x1) (async)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000280)=0x1)
ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000002c0)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0)
r5 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x4005d}, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
shutdown(r3, 0x1) (async)
shutdown(r3, 0x1)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) (async)
r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0)
write$6lowpan_enable(r9, &(0x7f0000001cc0)='0', 0x1) (async)
write$6lowpan_enable(r9, &(0x7f0000001cc0)='0', 0x1)
syz_emit_vhci(&(0x7f0000001d00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0xe}, @l2cap_disconn_rsp={{}, {0x8, 0x1}}}}, 0x17) (async)
syz_emit_vhci(&(0x7f0000001d00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0xe}, @l2cap_disconn_rsp={{}, {0x8, 0x1}}}}, 0x17)
nanosleep(&(0x7f0000001d40)={0x0, 0x5f5e100}, 0x0) (async)
nanosleep(&(0x7f0000001d40)={0x0, 0x5f5e100}, 0x0)
r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0)
write$6lowpan_control(r10, &(0x7f0000001dc0)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
nanosleep(&(0x7f0000001e00)={0x0, 0x5f5e100}, 0x0) (async)
nanosleep(&(0x7f0000001e00)={0x0, 0x5f5e100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e40)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$unix(r11, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c001}, 0x4004)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r12)
rt_sigqueueinfo(r12, 0x36, &(0x7f0000001ec0)={0x1f, 0xc4, 0xff7ffffe}) (async)
rt_sigqueueinfo(r12, 0x36, &(0x7f0000001ec0)={0x1f, 0xc4, 0xff7ffffe})
ptrace$peeksig(0x4209, r12, &(0x7f0000001f40)={0x2000000000000, 0x1, 0x1}, &(0x7f0000001f80)=[{}])

4.543201584s ago: executing program 3 (id=3059):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_io_uring_setup(0x1a7, &(0x7f0000000040)={0x0, 0x62ac, 0x1, 0x3, 0x50}, 0x0, &(0x7f0000000140), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mprotect(&(0x7f00000af000/0x3000)=nil, 0x3000, 0x100000a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000ec0)={0x0, 0xffe, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="6400000010000304000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3.984276272s ago: executing program 3 (id=3060):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5e20c}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94)

3.871939104s ago: executing program 3 (id=3061):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000540)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000005c0), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f0000000600), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0x4, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000680)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000700)=<r3=>0x0, &(0x7f0000000740)=<r4=>0x0, &(0x7f0000000780)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000007c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000840)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000880)=<r7=>0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = dup(r8) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x52, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0) (async)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="01002cbd701004000000050000007003990797d02d91cc0777c7c186ff60ad1a04e104993bd61c28edfa4b6781b4f1ec6481a887ed7fa1a40a4bbd55359bfa229fb56a9c7554"], 0x14}}, 0x20) (async)
r13 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001200)={0x0, 0x6, 0xffffffffffffffff}) (async)
ioctl$sock_SIOCETHTOOL(r13, 0x8993, 0x0)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000000)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0xe3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000d00)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000d80)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) (async)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r15=>0x0}) (async)
r16 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r16, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)

3.749259091s ago: executing program 0 (id=3062):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001"], 0xf4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e0ff84020c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000200006"], 0x84}}, 0x0)

2.793902879s ago: executing program 1 (id=3063):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
ioprio_set$pid(0x1, 0x0, 0x6000)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@local, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x400000000000, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x5, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050)
sendto$inet6(r0, &(0x7f00000009c0)='X', 0x34000, 0xe0, &(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
ftruncate(r5, 0xffff)
copy_file_range(r5, 0x0, r5, &(0x7f0000000080)=0x1000, 0x7, 0x0)
syz_open_dev$video4linux(0x0, 0x4, 0x40000)
r6 = dup(0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1a3040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4048890)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
preadv(r7, &(0x7f0000000040), 0x0, 0x80000001, 0x3)
mkdir(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
ioctl$VIDIOC_DQEVENT(r6, 0x80805659, &(0x7f0000000300))
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
epoll_create1(0x80000)
syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2)

2.791502947s ago: executing program 0 (id=3064):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write(0xffffffffffffffff, &(0x7f0000801000)="0000000000000000ffff0000009acf00ffff00000092cf0067000010008b0000670000200089", 0x26)
r2 = socket(0x2000000000000021, 0x2, 0x2)
shutdown(r2, 0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
exit(0x20000000000005)
fchdir(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}}, {{&(0x7f00000001c0)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4080}}], 0x2, 0x400c0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x2004c801}, 0x0)
write(0xffffffffffffffff, &(0x7f0000802400)="0000200000e5", 0x6)
write(0xffffffffffffffff, &(0x7f0000803000)="cd80", 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x2, 0x0, 0x400000, &(0x7f0000800000/0x400000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000400)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4}, {0x0, 0xffffffff, 0x10, 0x0, 0x1, 0x0, 0x1, 0x81, 0x0, 0x1}, {0x0, 0xffffffff, 0x8, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x87}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0xb, 0x3, 0x1, 0x0, 0x7f, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0xfb, 0x1, 0x0, 0x1, 0x0, 0xfc}, {0xeeef0000, 0x67, 0xe, 0xb, 0x1, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x7f}, {0x2000, 0x7ff}, 0x31, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x4})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000800)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x3000, 0x2})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.594568242s ago: executing program 3 (id=3065):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000200050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

2.412050667s ago: executing program 3 (id=3066):
bind$packet(0xffffffffffffffff, &(0x7f0000005b40)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005f80)='/proc/timer_list\x00', 0x0, 0x0)
read$usbfs(r0, &(0x7f0000005fc0)=""/56, 0x38)
r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffffffffff01, 0x40000)
lseek(r1, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="38000000680001040000000000000000000000000000000006000300010000000c0002f900000000000000000c000c800600010004000000"], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newnexthop={0x34, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2}]}]}, 0x34}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000040)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000400)="8ca34bbb39c3a0933bc34d8283f4ecd5b3dcaaa2526772a4743dff55d075718289482d81395535d2be5a04afb014dee40fc607b837e99f5ce6db4fc01dcd9e047ce3d3b1cfc4eddd7b3005d72f1f2f154e4d897e2c4dc602a7080b024bddd35d06bcfe716c8f8e1a4c1209fb16930f4cee66e70cfdc3f4c9555b116210569011a3837b10c520b66d73965be91dc0b92fb4be2ef4736e8c075f70800cde6dd2e8eb6b86748426ed7ab070f6f4ce6759cf1422abf5d3588cdd35cf79cf1288b2b83a38c2997e12122b396e76b65a3e7cf4f2e7cc1eff311e67f9d89f90c60a87ab3600"/241, 0xf1)
r3 = syz_ublk_setup_io_uring(0x4326, &(0x7f00000001c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f00000002c0)=<r5=>0x0)
syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000003c0))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r6)
syz_open_dev$sndctrl(0x0, 0x20000, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xc0a41, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap$dontunmap(&(0x7f0000083000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f000065f000/0x2000)=nil)

2.027379617s ago: executing program 4 (id=3067):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000007", @ANYRESDEC, @ANYBLOB="43da2e2e"], 0x48)

1.828975965s ago: executing program 4 (id=3068):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000880)=0x7f, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000082c0100002000000000000001ffffe0000001ff02000000000000fff5000000000001ff"], 0x0)

1.742125882s ago: executing program 0 (id=3069):
r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f00000001c0)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000003c0)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x40080)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f00000004c0)='0', 0xfffffd2c)
r8 = dup(r5)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='loginuid\x00')
syz_ublk_setup_queues(r8, r4, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f3f, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x19b, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x250}}], 0x1, &(0x7f0000000840)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x6, 0x0, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000002001003800128009000100766c616e000000002800028006000100010000001c0003800c00010005000000020000000c00fe0f010000009101000008000500", @ANYRES32=r10, @ANYBLOB="ffcc0d7901393b122e4e6278962f052bcd7138d287b7f2b23db32e9f57886b115175bb8494413e617b7e3ce1444c0a0b8ad14b6d8fbb229faca86eb024e1e6883e527b9d55557709624e0966265a3aec4d22960c2936ac87e76c529abd8de82076f1e6a8f2f6488168d0623611356325af2f19d6d61c081d0b6a6425aaab4b46f387335f35e02ff9fe859b29ec8373610d4fbb79c4d4c84c708706837cc120af9dd03040de927ee7ef514a9503dfd3b1deb2788d8ff7a4d2b2bdb759e71250ce01c1a0f47cb130570de3bdbe3bafd0eacd4ca6f089c9301eb9f6619b65ee17cdf3857b4e055a2ead28313217a8bfafd16c1c8d43f8eb5d2abff53e9f014909cb0367d5159beb4f1f7ac0a4464ababffbd77acf17cbeb20584e8c9bf0828db7dbb40bad0e68521b7e2a8eea44063f53ad9b17dd9f28b10000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
syz_ublk_setup_io_uring(0x1e, &(0x7f00000001c0)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000003c0)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async)
dup(r6) (async)
write$6lowpan_enable(r7, &(0x7f00000004c0)='0', 0xfffffd2c) (async)
dup(r5) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='loginuid\x00') (async)
syz_ublk_setup_queues(r8, r4, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f3f, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x19b, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x250}}], 0x1, &(0x7f0000000840)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x6, 0x0, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000002001003800128009000100766c616e000000002800028006000100010000001c0003800c00010005000000020000000c00fe0f010000009101000008000500", @ANYRES32=r10, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async)

1.499066559s ago: executing program 1 (id=3070):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5e20c}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94)

1.342958534s ago: executing program 1 (id=3071):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="183a000008000000000000002020000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000bf98000000000000560900003fffffff8500000085000000b70000000000000095"], &(0x7f0000000980)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805}, 0x94)

372.410608ms ago: executing program 4 (id=3072):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x3]}, &(0x7f0000000240)=0x6)
connect$vsock_stream(r5, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000140), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f00000000c0)={0x20071026}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0)
write$rfkill(r10, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8)
landlock_restrict_self(0xffffffffffffffff, 0xc)
ioctl$TCFLSH(r9, 0x400455c8, 0x4)

371.355394ms ago: executing program 0 (id=3081):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5e20c}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94)

371.008352ms ago: executing program 1 (id=3073):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="40000000310009002abd70000000000004007f132c0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

266.398006ms ago: executing program 3 (id=3074):
mmap(&(0x7f0000732000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0xe6, 0x2602) (rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x23d00bf5) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd26, 0x25dfdbff, {0x2, 0x14, 0x80, 0x1, 0xc8, 0x0, 0x0, 0x0, 0x13}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x0) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="40030000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="24033300b000000008021100000108"], 0x340}}, 0x0) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64)
r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', <r8=>0x0}) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3f, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x851}, 0x20000000) (async, rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x20040084)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0xf59, 0x1, {{0x1b, 0x4, 0x0, 0x1f, 0x6c, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x5f, 0x0, 0xd, [0x9, 0xfffffffe]}, @ssrr={0x89, 0x2b, 0xfe, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @multicast1, @empty, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x19, 0x2, [{0x1, 0x6, "10d3f497"}, {0x5, 0x9, "b453a3e5a4a02d"}, {0x1, 0x4, "2984"}]}, @end, @generic={0x83, 0x4, "71ff"}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000780)={'tunl0\x00', <r13=>0x0, 0x20, 0x7, 0x10001, 0x2, {{0x9, 0x4, 0x0, 0x4, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}, {[@generic={0x82, 0xf, "3ebd4d2687b4ef304978e3b80a"}]}}}}}) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000840)={@broadcast, @dev, <r14=>0x0}, &(0x7f0000000880)=0xc) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'pim6reg0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)={0x2d8, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0xfc, 0x2, 0x0, 0x1, [{0xfffffe4e, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0xfffffffffffffedc, 0x6, r12}}}, {0x3c, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0xc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}, {{0x8, 0x1, r13}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xb, 0x5, 0xc9, 0x6}, {0x8, 0xa, 0x7f}, {0x9, 0x9, 0x5, 0x3}, {0x81, 0x8, 0x5, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4008001}, 0x4800)

210.142625ms ago: executing program 0 (id=3075):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000003a000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000066e6186bf040000080007400000040018000680140004"], 0xb4}, 0x1, 0x4000000}, 0x0)

42.945219ms ago: executing program 0 (id=3076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000bc0))
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x4}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x800000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x1, 0x0, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0)
openat$rtc(0xffffff9c, &(0x7f0000000500), 0x2100, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.events\x00', 0x275a, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x2c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x5)
timer_create(0x0, &(0x7f0000000f80)={0x0, 0x21, 0x4}, &(0x7f0000000fc0))
syz_usb_control_io(r4, &(0x7f0000001000)={0x18, &(0x7f0000001040)=ANY=[@ANYBLOB="20b52c020000065f06d209f7d3f7897a70788c2e8445f7d3ffa2dcc8727e68be299865bd5906977d3c32c193fb8f741506960348bf38e985db517d909cca87a076eb56ce2d8226ac63d86f3e9d7bc44678fc6014789b9d7e2a90f62cb5bafdad1c067fc10e54c95428c6a40fe5acde92d5736efb8b8bd2bc1c966d8fd15c34a49e5043089ef31520d7998710b92816d4b79f88536043609b0acdef03aee34bfd8564447ead876c399e6368b6adb1551147a74a92"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r4, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000001100)={0x0, 0x2})
mknod$loop(&(0x7f0000001140)='./file0\x00', 0x40, 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x413cd6938a521681, &(0x7f0000001180)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000011c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x7ffd, 0x35014a40, 0x4, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001240)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000003340)='./file0\x00', 0x80101, 0x101)
r6 = syz_open_dev$dri(&(0x7f0000003380), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f00000033c0)={0x3, 0x2})

0s ago: executing program 1 (id=3077):
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x200000, 0x0, 0x0, 0xbf, 0x0, 0x0}, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0xa318, 0x2002)
epoll_create1(0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0xf7, 0xbb, 0x6a, 0x8, 0x413c, 0x8137, 0xe382, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x6, 0x30, 0xea, "", [{{0x9, 0x4, 0x11, 0xc, 0x0, 0x24, 0xdc, 0xae, 0x6}}]}}]}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x23, 0x80000, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x1b0, 0x13, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0xb4}}}}}]}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$rds(0x15, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000140)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x2001)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100031194a608d11269b14a6c010203010902120001400209b9440300ff053d800000"], 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0})
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0})

kernel console output (not intermixed with test programs):

 RBX: 0000000000000006 RCX: 00000000f54565d0
[  500.443289][T13041] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  500.443298][T13041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  500.443308][T13041] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  500.443317][T13041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  500.443340][T13041]  </TASK>
[  500.589919][   T29] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  500.732688][T13043] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  500.735431][T13043] bond2 (unregistering): Released all slaves
[  500.837117][   T29] usb 4-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  500.838401][   T29] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  500.838453][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.880848][   T29] gspca_main: stv0680-2.14.0 probing 041e:4007
[  501.045856][   T10] usb 5-1: new full-speed USB device number 124 using dummy_hcd
[  501.155936][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'.
[  501.199499][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  501.200019][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  501.200053][   T10] usb 5-1: New USB device found: idVendor=0411, idProduct=0012, bcdDevice=90.39
[  501.204629][   T10] usb 5-1: config 249 has an invalid interface number: 203 but max is 0
[  501.204657][   T10] usb 5-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config
[  501.204683][   T10] usb 5-1: config 249 has no interface number 0
[  501.204729][   T10] usb 5-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  501.204750][   T10] usb 5-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  501.204769][   T10] usb 5-1: config 249 interface 203 has no altsetting 0
[  501.296089][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.296118][   T10] usb 5-1: Product: syz
[  501.296130][   T10] usb 5-1: Manufacturer: syz
[  501.296144][   T10] usb 5-1: SerialNumber: syz
[  501.442268][T13064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2433'.
[  501.596247][ T5734] usb 2-1: new full-speed USB device number 106 using dummy_hcd
[  501.707124][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  501.707196][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  501.759001][ T5734] usb 2-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  501.779660][ T5734] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[  501.779683][ T5734] usb 2-1: config 5 has no interface number 0
[  501.779731][ T5734] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  501.779751][ T5734] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0
[  501.779767][ T5734] usb 2-1: config 5 interface 123 has no altsetting 0
[  501.833536][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.833558][ T5734] usb 2-1: Product: syz
[  501.833570][ T5734] usb 2-1: Manufacturer: syz
[  501.833581][ T5734] usb 2-1: SerialNumber: syz
[  501.946601][   T29] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  501.947486][   T29] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  501.947511][   T29] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  502.109554][T13061] loop4: detected capacity change from 0 to 7
[  502.187665][T13061]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  502.187701][T13061] loop4: partition table partially beyond EOD, truncated
[  502.219923][  T194] usb 4-1: USB disconnect, device number 104
[  502.224159][T13061] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  503.075852][  T194] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  503.171077][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  503.171098][   T30] audit: type=1326 audit(1793301735.421:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.172958][   T30] audit: type=1326 audit(1793301735.421:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.174008][   T30] audit: type=1326 audit(1793301735.421:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.174421][   T30] audit: type=1326 audit(1793301735.421:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.186075][   T30] audit: type=1326 audit(1793301735.421:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.186220][   T30] audit: type=1326 audit(1793301735.431:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.186332][   T30] audit: type=1326 audit(1793301735.431:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.189782][   T30] audit: type=1326 audit(1793301735.431:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.189917][   T30] audit: type=1326 audit(1793301735.431:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.195266][   T30] audit: type=1326 audit(1793301735.431:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73aef1c code=0x7ffc0000
[  503.285837][  T194] usb 3-1: Using ep0 maxpacket: 8
[  503.355292][   T29] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  503.455332][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.468235][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.493840][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.504782][   T29] usb 4-1: device descriptor read/64, error -71
[  503.513437][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.527802][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.530945][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.534275][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.554718][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.592439][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.592956][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.621236][T13091] i2c i2c-0: dtv_property_process_set: SET cmd 0x746e6576 undefined
[  503.661162][  T194] usb 3-1: unable to get BOS descriptor or descriptor too short
[  503.661268][  T194] usb 3-1: New USB device found: idVendor=413c, idProduct=8137, bcdDevice=e3.82
[  503.661308][  T194] usb 3-1: too many configurations: 15, using maximum allowed: 8
[  503.662348][  T194] usb 3-1: unable to read config index 0 descriptor/start: -71
[  503.662382][  T194] usb 3-1: can't read configurations, error -71
[  503.765775][   T29] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  503.825251][   T10] rtl8150 5-1:249.203: couldn't find required endpoints
[  503.835021][   T10] rtl8150 5-1:249.203: probe with driver rtl8150 failed with error -5
[  503.856648][   T10] usb 5-1: USB disconnect, device number 124
[  503.895993][   T29] usb 4-1: device descriptor read/64, error -71
[  503.983125][T13102] futex_wake_op: syz.4.2439 tries to shift op by 32; fix this program
[  504.006221][   T29] usb usb4-port1: attempt power cycle
[  504.348272][   T29] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  504.372509][   T29] usb 4-1: device descriptor read/8, error -71
[  504.626425][   T29] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  504.647096][   T29] usb 4-1: device descriptor read/8, error -71
[  504.756270][   T29] usb usb4-port1: unable to enumerate USB device
[  504.835133][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  504.844794][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  504.854116][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  504.874980][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  504.887477][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  504.967524][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  504.983971][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  504.996049][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  505.018440][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  505.019970][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  505.162675][ T5734] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device.
[  505.189193][ T5734] usb 2-1: USB disconnect, device number 106
[  505.373051][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2447'.
[  505.486200][ T7748] tipc: Disabling bearer <eth:syz_tun>
[  505.524886][T13129] vlan2: entered promiscuous mode
[  505.600729][ T6215] bridge_slave_1: left allmulticast mode
[  505.600773][ T6215] bridge_slave_1: left promiscuous mode
[  505.602153][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.640675][ T6215] bridge_slave_0: left allmulticast mode
[  505.640704][ T6215] bridge_slave_0: left promiscuous mode
[  505.641366][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.658039][ T5734] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  505.762190][T13134] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2450'.
[  505.763465][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2450'.
[  505.805766][ T5734] usb 2-1: Using ep0 maxpacket: 32
[  505.806929][ T5734] usb 2-1: New USB device found: idVendor=04f2, idProduct=1123, bcdDevice=0.00
[  505.809255][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.809289][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.809314][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  505.809358][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.812155][ T5734] usb 2-1: config 0 descriptor??
[  506.356484][ T6215] bond0 (unregistering): (slave bridge1): Releasing backup interface
[  506.374620][ T6215] team0: Port device bridge2 removed
[  506.436103][ T5640] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  506.464649][ T6215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.465461][ T6215] tipc: Resetting bearer <eth:bond_slave_0>
[  506.489276][ T6215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  506.495089][ T6215] bond0 (unregistering): (slave team0): Releasing backup interface
[  506.508980][ T6215] bond0 (unregistering): Released all slaves
[  506.535184][ T6215] bond1 (unregistering): (slave veth3): Releasing backup interface
[  506.550682][ T6215] bond1 (unregistering): (slave dummy0): Releasing backup interface
[  506.555620][ T6215] bond1 (unregistering): Released all slaves
[  506.597375][ T5640] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  506.598489][ T5640] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  506.598542][ T5640] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  506.598567][ T5640] usb 4-1: config 0 interface 0 has no altsetting 0
[  506.620481][ T5640] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  506.620507][ T5640] usb 4-1: Product: syz
[  506.620522][ T5640] usb 4-1: Manufacturer: syz
[  506.620535][ T5640] usb 4-1: SerialNumber: syz
[  506.673450][ T5640] usb 4-1: config 0 descriptor??
[  506.673870][ T5734] input: HID 04f2:1123 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F2:1123.0025/input/input46
[  506.693491][ T5640] hub 4-1:0.0: bad descriptor, ignoring hub
[  506.693519][ T5640] hub 4-1:0.0: probe with driver hub failed with error -5
[  506.713219][ T5640] usb 4-1: selecting invalid altsetting 0
[  506.799873][ T6215] tipc: Disabling bearer <eth:bond_slave_0>
[  506.800236][ T6215] tipc: Left network mode
[  506.858962][T13152] syzkaller0: entered promiscuous mode
[  506.858990][T13152] syzkaller0: entered allmulticast mode
[  506.913891][ T5734] chicony 0003:04F2:1123.0025: input,hidraw0: USB HID v0.00 Joystick [HID 04f2:1123] on usb-dummy_hcd.1-1/input0
[  506.998455][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'.
[  507.066306][ T5637] Bluetooth: hci5: command tx timeout
[  507.070283][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.070785][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.177893][ T6108] usb 2-1: USB disconnect, device number 107
[  507.241502][  T194] usb 4-1: USB disconnect, device number 109
[  507.476549][ T5734] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  507.630415][ T5734] usb 5-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  507.631855][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  507.631918][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.653376][ T5734] usb 5-1: config 0 descriptor??
[  507.677763][ T5734] pwc: Askey VC010 type 2 USB webcam detected.
[  507.786494][  T194] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  507.870425][ T5734] pwc: send_video_command error -71
[  507.870447][ T5734] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  507.870558][ T5734] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  507.874546][ T5734] usb 5-1: USB disconnect, device number 125
[  507.917066][  T194] usb 4-1: device descriptor read/64, error -71
[  507.985891][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2461'.
[  508.056427][T13123] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.056584][T13123] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.056740][T13123] bridge_slave_0: entered allmulticast mode
[  508.060563][T13123] bridge_slave_0: entered promiscuous mode
[  508.093242][T13123] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.093371][T13123] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.093545][T13123] bridge_slave_1: entered allmulticast mode
[  508.136676][T13123] bridge_slave_1: entered promiscuous mode
[  508.176313][  T194] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  508.205256][ T6215] hsr_slave_0: left promiscuous mode
[  508.213228][ T6215] hsr_slave_1: left promiscuous mode
[  508.214253][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.221355][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.305876][  T194] usb 4-1: device descriptor read/64, error -71
[  508.352870][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'.
[  508.416234][  T194] usb usb4-port1: attempt power cycle
[  508.435827][ T5734] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  508.587282][ T5734] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  508.592132][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.602895][ T5734] usb 5-1: config 0 descriptor??
[  508.627824][ T6215] team0 (unregistering): Port device team_slave_1 removed
[  508.674252][ T6215] team0 (unregistering): Port device team_slave_0 removed
[  508.756364][  T194] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  508.785101][  T194] usb 4-1: device descriptor read/8, error -71
[  508.808799][ T5734] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  508.926910][T13123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.931602][T13123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.018832][T13123] team0: Port device team_slave_0 added
[  509.019129][  T194] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  509.045188][  T194] usb 4-1: device descriptor read/8, error -71
[  509.045559][T13123] team0: Port device team_slave_1 added
[  509.112990][ T5734] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  509.113018][ T5734] [drm] Initialized udl on minor 1
[  509.145921][ T5637] Bluetooth: hci5: command tx timeout
[  509.146508][  T194] usb usb4-port1: unable to enumerate USB device
[  509.269165][T13123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.269185][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.269211][T13123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.304002][T13123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.304056][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.304131][T13123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.372506][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'.
[  509.472207][T13123] hsr_slave_0: entered promiscuous mode
[  509.473325][T13123] hsr_slave_1: entered promiscuous mode
[  509.474196][T13123] debugfs: 'hsr0' already exists in 'hsr'
[  509.474217][T13123] Cannot create hsr debugfs directory
[  509.552804][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2468'.
[  509.555794][ T6123] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  509.647240][ T6215] IPVS: stop unused estimator thread 0...
[  509.709070][ T6123] usb 2-1: device descriptor read/64, error -71
[  509.856639][T13123] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  509.860658][T13123] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.861705][T13123] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  509.864804][T13123] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  509.866544][T13123] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  509.899054][T13123] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  509.903671][T13123] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  509.922079][T13123] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  509.945843][ T6123] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  509.975724][ T5640] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  510.051785][T13123] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.076193][ T6123] usb 2-1: device descriptor read/64, error -71
[  510.078125][T13123] 8021q: adding VLAN 0 to HW filter on device team0
[  510.084625][T11754] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.084702][T11754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.122454][T11754] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.122533][T11754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.140891][ T5640] usb 3-1: Using ep0 maxpacket: 32
[  510.147475][ T5640] usb 3-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  510.149721][ T5640] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  510.149752][ T5640] usb 3-1: config 0 has no interface number 0
[  510.149795][ T5640] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  510.165221][ T5640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.165252][ T5640] usb 3-1: Product: syz
[  510.165269][ T5640] usb 3-1: Manufacturer: syz
[  510.165285][ T5640] usb 3-1: SerialNumber: syz
[  510.192247][ T6123] usb usb2-port1: attempt power cycle
[  510.227043][ T5640] usb 3-1: config 0 descriptor??
[  510.227989][T13202] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  510.334746][T13123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.411053][T13123] veth0_vlan: entered promiscuous mode
[  510.431415][T13123] veth1_vlan: entered promiscuous mode
[  510.436143][ T5640] asix 3-1:0.188: probe with driver asix failed with error -71
[  510.475853][ T5640] usb 3-1: USB disconnect, device number 114
[  510.541928][T13123] veth0_macvtap: entered promiscuous mode
[  510.553838][T13123] veth1_macvtap: entered promiscuous mode
[  510.565743][ T6123] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  510.586616][T13123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.599456][T13123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.613458][ T6123] usb 2-1: device descriptor read/8, error -71
[  510.646627][ T8668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.646999][ T8668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.647033][ T8668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.647065][ T8668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.801506][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.801530][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.823415][ T5640] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  510.855832][ T6123] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  510.863473][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.863496][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.891954][ T6123] usb 2-1: device descriptor read/8, error -71
[  510.985863][ T5640] usb 3-1: Using ep0 maxpacket: 32
[  510.986674][ T5640] usb 3-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  510.988370][ T5640] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  510.988397][ T5640] usb 3-1: config 0 has no interface number 0
[  510.988441][ T5640] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  510.991553][ T5640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.991580][ T5640] usb 3-1: Product: syz
[  510.991604][ T5640] usb 3-1: Manufacturer: syz
[  510.991619][ T5640] usb 3-1: SerialNumber: syz
[  511.012601][ T5640] usb 3-1: config 0 descriptor??
[  511.013279][ T6123] usb usb2-port1: unable to enumerate USB device
[  511.029897][T13216] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  511.178243][T13219] usb 4-1: new full-speed USB device number 114 using dummy_hcd
[  511.226221][ T5637] Bluetooth: hci5: command tx timeout
[  511.286686][ T5640] asix 3-1:0.188: probe with driver asix failed with error -71
[  511.311139][T13219] usb 4-1: device descriptor read/64, error -71
[  511.312537][ T5640] usb 3-1: USB disconnect, device number 115
[  511.545995][T13219] usb 4-1: new full-speed USB device number 115 using dummy_hcd
[  511.676210][T13219] usb 4-1: device descriptor read/64, error -71
[  511.788783][T13219] usb usb4-port1: attempt power cycle
[  512.000632][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'.
[  512.127824][T13219] usb 4-1: new full-speed USB device number 116 using dummy_hcd
[  512.148111][T13219] usb 4-1: device descriptor read/8, error -71
[  512.386213][T13219] usb 4-1: new full-speed USB device number 117 using dummy_hcd
[  512.405800][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'.
[  512.410549][T13219] usb 4-1: device descriptor read/8, error -71
[  512.516135][T13219] usb usb4-port1: unable to enumerate USB device
[  512.626250][ T6108] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  512.777232][ T6108] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00
[  512.779654][ T6108] usb 3-1: config index 0 descriptor too short (expected 45, got 28)
[  512.779675][ T6108] usb 3-1: config 1 descriptor has 1 excess byte, ignoring
[  512.779707][ T6108] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  512.785198][ T6108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.785218][ T6108] usb 3-1: Product: syz
[  512.785229][ T6108] usb 3-1: Manufacturer: syz
[  512.785240][ T6108] usb 3-1: SerialNumber: syz
[  512.862794][ T6108] rtl8150 3-1:1.0: couldn't find required endpoints
[  512.862998][ T6108] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  512.893464][T11759] IPVS: starting estimator thread 0...
[  512.976126][T13251] IPVS: using max 37 ests per chain, 88800 per kthread
[  513.306134][ T5637] Bluetooth: hci5: command tx timeout
[  513.604930][  T194] usb 3-1: USB disconnect, device number 116
[  513.776327][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'.
[  514.059982][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'.
[  514.187715][ T5734] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  514.188179][ T5734] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  514.190089][T13260] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  514.231306][ T6108] usb 5-1: USB disconnect, device number 126
[  514.258268][T13260] bond1 (unregistering): Released all slaves
[  514.282916][ T5734] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  514.285486][ T5734] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  514.497121][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'.
[  514.528105][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'.
[  514.938450][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2494'.
[  514.940794][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'.
[  515.049328][T13295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2493'.
[  515.176982][T13306] vlan0: entered allmulticast mode
[  515.177027][T13306] veth0_vlan: entered allmulticast mode
[  515.255762][ T5640] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  515.330196][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'.
[  515.407893][ T5640] usb 2-1: unable to get BOS descriptor or descriptor too short
[  515.407946][ T5640] usb 2-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40
[  515.411538][ T5640] usb 2-1: config index 0 descriptor too short (expected 40744, got 96)
[  515.411570][ T5640] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  515.411593][ T5640] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  515.411637][ T5640] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30
[  515.411670][ T5640] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  515.411690][ T5640] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7
[  515.411711][ T5640] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024
[  515.411730][ T5640] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226
[  515.473495][ T5640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.473526][ T5640] usb 2-1: Product: syz
[  515.473543][ T5640] usb 2-1: Manufacturer: syz
[  515.473559][ T5640] usb 2-1: SerialNumber: syz
[  515.598347][ T6108] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  515.747192][ T6108] usb 3-1: Using ep0 maxpacket: 8
[  515.749371][ T6108] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  515.753633][ T6108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  515.753694][ T6108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.763945][ T6108] usb 3-1: config 0 descriptor??
[  515.806888][ T5640] usb 2-1: 1:1 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37
[  515.809036][ T5640] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1
[  515.895465][ T5640] usb 2-1: USB disconnect, device number 112
[  516.019022][ T5654] udevd[5654]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  516.042778][ T6108] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  516.196717][  T194] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  516.348419][  T194] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  516.351624][  T194] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  516.351685][  T194] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  516.351713][  T194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  516.351743][  T194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  516.351770][  T194] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  516.351814][  T194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.398381][  T194] usb 5-1: config 0 descriptor??
[  516.417900][T13324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  516.501568][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'.
[  516.848218][T13324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.851655][T13324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.292136][  T194] usbhid 5-1:0.0: can't add hid device: -71
[  517.292247][  T194] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  517.324270][  T194] usb 5-1: USB disconnect, device number 127
[  517.444227][T13346] __nla_validate_parse: 1 callbacks suppressed
[  517.444250][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'.
[  517.819761][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2522'.
[  517.853628][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2523'.
[  517.976878][T13369] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2525'.
[  518.096065][   T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  518.121788][T13375] loop5: detected capacity change from 0 to 4283
[  518.145287][T13375] loop5: detected capacity change from 4283 to 5607
[  518.245723][   T24] usb 2-1: Using ep0 maxpacket: 16
[  518.253336][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  518.253391][   T24] usb 2-1: New USB device found: idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[  518.283112][   T24] usb 2-1: config 4 has an invalid interface number: 127 but max is 0
[  518.283143][   T24] usb 2-1: config 4 has no interface number 0
[  518.283199][   T24] usb 2-1: config 4 interface 127 has no altsetting 0
[  518.315175][   T24] usb 2-1: string descriptor 0 read error: -22
[  518.315361][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.523203][ T6108] usb 3-1: USB disconnect, device number 117
[  518.534956][ T6832] buffer_io_error: 5 callbacks suppressed
[  518.534976][ T6832] Buffer I/O error on dev loop5, logical block 700, async page read
[  518.554128][   T24] usb 2-1: USB disconnect, device number 113
[  518.755200][T13391] netlink: 964 bytes leftover after parsing attributes in process `syz.2.2530'.
[  518.755221][T13391] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  518.991253][T11759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.991519][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.992054][T11759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.992241][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.368015][   T24] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  519.537035][   T24] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  519.541290][   T24] usb 3-1: config 1 has an invalid interface number: 3 but max is 0
[  519.541319][   T24] usb 3-1: config 1 has no interface number 0
[  519.582555][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.582577][   T24] usb 3-1: Product: syz
[  519.582588][   T24] usb 3-1: Manufacturer: syz
[  519.582599][   T24] usb 3-1: SerialNumber: syz
[  519.656886][   T24] usb 3-1: 3:1 : does not exist
[  519.656914][   T24] usb 3-1: 3:2 : does not exist
[  519.799719][T13410] netlink: 'syz.3.2535': attribute type 2 has an invalid length.
[  519.883633][  T194] usb 3-1: USB disconnect, device number 118
[  520.087725][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'.
[  520.267841][  T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.349947][T13425] netlink: 'syz.1.2541': attribute type 10 has an invalid length.
[  520.370297][T13425] 8021q: adding VLAN 0 to HW filter on device team0
[  520.383322][T13425] bond0: (slave team0): Enslaving as an active interface with an up link
[  520.492575][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'.
[  520.504907][ T5640] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  520.631031][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2545'.
[  520.633313][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2545'.
[  520.646054][ T5640] usb 4-1: device descriptor read/64, error -71
[  520.773680][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'.
[  520.886476][ T5640] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  520.972748][T13442] netlink: 'syz.2.2547': attribute type 11 has an invalid length.
[  521.022298][T13442] veth1_vlan: left promiscuous mode
[  521.024289][T13442] veth0_vlan: left promiscuous mode
[  521.031473][ T5640] usb 4-1: device descriptor read/64, error -71
[  521.046111][T13442] veth0_vlan: entered promiscuous mode
[  521.064709][T13442] veth1_vlan: entered promiscuous mode
[  521.081838][T13442] veth1_macvtap: left promiscuous mode
[  521.083511][T13442] veth0_macvtap: left promiscuous mode
[  521.084979][T13442] veth0_macvtap: entered promiscuous mode
[  521.106690][T13442] veth1_macvtap: entered promiscuous mode
[  521.136393][ T5640] usb usb4-port1: attempt power cycle
[  521.152732][T13442] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  521.173675][T13442] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  521.174733][T13442] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  521.466905][ T8669] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  521.466946][ T8669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.467132][ T8669] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  521.467163][ T8669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.486331][ T5640] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  521.523383][ T5640] usb 4-1: device descriptor read/8, error -71
[  521.547086][ T1463] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  521.547124][ T1463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.547164][ T1463] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  521.547356][ T1463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.765808][ T5640] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  521.787040][ T5640] usb 4-1: device descriptor read/8, error -71
[  521.896751][ T5640] usb usb4-port1: unable to enumerate USB device
[  522.242387][T13450] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  522.265426][T13450] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  522.457421][T13450] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  523.005267][T13466] loop5: detected capacity change from 0 to 7
[  523.019629][T13466] Dev loop5: unable to read RDB block 7
[  523.019669][T13466]  loop5: AHDI p1 p2 p4
[  523.019696][T13466] loop5: partition table partially beyond EOD, truncated
[  523.019939][T13466] loop5: p1 start 5439488 is beyond EOD, truncated
[  523.019964][T13466] loop5: p4 start 3288604672 is beyond EOD, truncated
[  523.147775][   T24] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  523.297582][   T24] usb 2-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  523.302060][   T24] usb 2-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid wMaxPacketSize 0
[  523.302091][   T24] usb 2-1: config 2 interface 0 has no altsetting 0
[  523.341546][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.341567][   T24] usb 2-1: Product: syz
[  523.341579][   T24] usb 2-1: Manufacturer: syz
[  523.341589][   T24] usb 2-1: SerialNumber: syz
[  523.418000][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.418644][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.420307][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.421195][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.594611][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.604635][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.626486][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout
[  523.629747][   T24] ims_pcu 2-1:2.0: Control endpoint is not INTERRUPT IN
[  523.629804][   T24] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22
[  523.661817][   T24] usb 2-1: USB disconnect, device number 114
[  524.108998][  T152] net_ratelimit: 50 callbacks suppressed
[  524.109016][  T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.109120][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.191720][T13482] tipc: Failed to obtain node identity
[  524.191756][T13482] tipc: Enabling of bearer <ib:wlan1> rejected, failed to enable media
[  524.340833][T13485] __nla_validate_parse: 3 callbacks suppressed
[  524.340850][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'.
[  524.451690][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'.
[  524.536348][   T24] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  524.685721][   T24] usb 3-1: Using ep0 maxpacket: 32
[  524.686745][   T24] usb 3-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  524.713337][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.713359][   T24] usb 3-1: Product: syz
[  524.713371][   T24] usb 3-1: Manufacturer: syz
[  524.713382][   T24] usb 3-1: SerialNumber: syz
[  524.751690][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.751934][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.773740][   T24] usb 3-1: config 0 descriptor??
[  524.805383][   T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  524.814982][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  524.814998][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  524.815088][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  524.815098][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  524.858621][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  524.859934][   T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  524.860003][   T24] usb 3-1: media controller created
[  524.956489][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  525.019623][   T24] usb 3-1: selecting invalid altsetting 3
[  525.019665][   T24] ttusb2: set interface to alts=3 failed
[  525.198104][   T24] DVB: Unable to find symbol tda10086_attach()
[  525.198118][   T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  525.199802][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  525.199826][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  525.199959][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  525.199974][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  525.200046][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  525.273740][   T24] usb 3-1: USB disconnect, device number 119
[  525.407051][   T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  525.614325][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2567'.
[  525.659876][T13504] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2568'.
[  525.706161][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout
[  525.955913][   T24] usb 4-1: new full-speed USB device number 122 using dummy_hcd
[  526.028305][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.129208][   T24] usb 4-1: New USB device found: idVendor=0763, idProduct=2008, bcdDevice=0.40
[  526.134740][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.134768][   T24] usb 4-1: Product: syz
[  526.134790][   T24] usb 4-1: Manufacturer: syz
[  526.134802][   T24] usb 4-1: SerialNumber: syz
[  526.397363][   T24] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc
[  526.399450][   T24] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  526.496172][   T24] usb 4-1: USB disconnect, device number 122
[  527.752386][ T6108] hid-generic 0008:046D:C082.0026: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz0
[  527.786753][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout
[  527.894060][T13570] fido_id[13570]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  529.286478][T13625] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  529.869724][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.869871][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.506936][  T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.507178][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.677041][T13707] CUSE: unknown device info "
"
[  530.677061][T13707] CUSE: unknown device info ""
[  530.677072][T13707] CUSE: unknown device info "@"
[  530.677082][T13707] CUSE: zero length info key specified
[  530.831557][T13718] CUSE: unknown device info "
"
[  530.831576][T13718] CUSE: unknown device info ""
[  530.831586][T13718] CUSE: unknown device info "@"
[  530.831596][T13718] CUSE: zero length info key specified
[  531.149116][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.477392][T13753] misc userio: Invalid payload size
[  531.834908][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'.
[  532.196473][ T6108] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  532.347695][ T6108] usb 4-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00
[  532.348765][ T6108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  532.348798][ T6108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  532.351773][ T6108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  532.351800][ T6108] usb 4-1: Product: syz
[  532.351816][ T6108] usb 4-1: Manufacturer: syz
[  532.408601][ T6108] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  532.566212][  T194] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  532.715793][  T194] usb 3-1: Using ep0 maxpacket: 8
[  532.726457][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.727150][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.734496][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.769182][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.773578][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.774134][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.806522][ T6108] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5
[  532.810119][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.826547][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.859353][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.864661][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.906099][T13801] i2c i2c-0: dtv_property_process_set: SET cmd 0x746e6576 undefined
[  532.924911][  T194] usb 3-1: unable to get BOS descriptor or descriptor too short
[  532.924949][  T194] usb 3-1: New USB device found: idVendor=413c, idProduct=8137, bcdDevice=e3.82
[  532.929789][  T194] usb 3-1: unable to read config index 0 descriptor/start: -71
[  532.929895][  T194] usb 3-1: can't read configurations, error -71
[  533.396546][ T5640] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[  533.558653][ T5640] usb 2-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  533.560347][ T5640] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[  533.560375][ T5640] usb 2-1: config 5 has no interface number 0
[  533.560416][ T5640] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  533.560446][ T5640] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0
[  533.560471][ T5640] usb 2-1: config 5 interface 123 has no altsetting 0
[  533.564101][ T5640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.564120][ T5640] usb 2-1: Product: syz
[  533.564131][ T5640] usb 2-1: Manufacturer: syz
[  533.564153][ T5640] usb 2-1: SerialNumber: syz
[  533.720692][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'.
[  533.859827][T13820] loop4: detected capacity change from 0 to 7
[  533.900424][T13820]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  533.900545][T13820] loop4: partition table partially beyond EOD, truncated
[  533.903855][T13820] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  533.971254][T13828] vlan2: entered promiscuous mode
[  534.126029][   T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  534.231828][T13834] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2720'.
[  534.233922][T13834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2720'.
[  534.277339][   T24] usb 3-1: New USB device found: idVendor=05ac, idProduct=12a8, bcdDevice=0.01
[  534.279524][   T24] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  534.279682][   T24] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0
[  534.283714][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.283772][   T24] usb 3-1: Product: syz
[  534.283792][   T24] usb 3-1: Manufacturer: syz
[  534.283810][   T24] usb 3-1: SerialNumber: syz
[  534.542960][   T24] ipheth 3-1:1.0: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  534.543330][   T24] ipheth 3-1:1.0: probe with driver ipheth failed with error -22
[  534.835971][ T6123] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  534.997582][ T6123] usb 5-1: Using ep0 maxpacket: 16
[  534.998314][ T6123] usb 5-1: New USB device found: idVendor=04b4, idProduct=bca1, bcdDevice=0.00
[  534.999515][ T6123] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.999571][ T6123] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  534.999591][ T6123] usb 5-1: config 0 interface 0 has no altsetting 0
[  534.999615][ T6123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.002481][ T6123] usb 5-1: config 0 descriptor??
[  535.142571][ T6108] usb 4-1: USB disconnect, device number 123
[  535.154790][ T6108] mos7840 4-1:1.0: device disconnected
[  535.343435][T13849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.469748][ T6123] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04B4:BCA1.0027/input/input48
[  535.567328][ T6123] cypress 0003:04B4:BCA1.0027: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.4-1/input0
[  535.633104][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.633317][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.265198][ T5640] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device.
[  536.279709][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.279888][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.310276][ T5640] usb 2-1: USB disconnect, device number 115
[  536.346938][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.552577][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'.
[  536.819836][T13874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2732'.
[  536.907648][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.969063][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2735'.
[  537.362976][ T5640] apple-mfi-fastcharge 3-1: USB disconnect, device number 122
[  537.540038][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2741'.
[  537.867532][ T5640] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  537.947139][ T6123] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  538.027334][ T5640] usb 3-1: New USB device found: idVendor=2040, idProduct=4200, bcdDevice=1.00
[  538.028745][ T5640] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  538.028817][ T5640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.064722][ T5640] em28xx 3-1:1.0: New device   @ 480 Mbps (2040:4200, interface 0, class 0)
[  538.064760][ T5640] em28xx 3-1:1.0: Video interface 0 found:
[  538.107196][ T6123] usb 4-1: Using ep0 maxpacket: 16
[  538.108000][ T6123] usb 4-1: New USB device found: idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  538.108076][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'.
[  538.109395][ T6123] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  538.109425][ T6123] usb 4-1: config 0 has no interface number 0
[  538.112209][ T6123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.112238][ T6123] usb 4-1: Product: syz
[  538.112288][ T6123] usb 4-1: Manufacturer: syz
[  538.112305][ T6123] usb 4-1: SerialNumber: syz
[  538.140095][ T6123] usb 4-1: config 0 descriptor??
[  538.187139][ T6123] visor 4-1:0.255: Sony Clie 3.5 converter detected
[  538.297160][ T5640] em28xx 3-1:1.0: unknown em28xx chip ID (0)
[  538.367763][T13896] netlink: 8212 bytes leftover after parsing attributes in process `syz.3.2743'.
[  538.407734][ T5640] em28xx 3-1:1.0: reading from i2c device at 0xa0 failed (error=-5)
[  538.407873][ T5640] em28xx 3-1:1.0: board has no eeprom
[  538.508791][ T5640] em28xx 3-1:1.0: Identified as Hauppauge WinTV USB 2 (card=4)
[  538.508932][ T5640] em28xx 3-1:1.0: analog set to bulk mode.
[  538.549183][   T24] em28xx 3-1:1.0: Registering V4L2 extension
[  538.564067][ T5640] usb 3-1: USB disconnect, device number 123
[  538.586057][ T5640] em28xx 3-1:1.0: Disconnecting em28xx
[  538.603216][ T6123] usb 4-1: clie_3_5_startup: get interface number failed: -71
[  538.603555][ T6123] visor 4-1:0.255: probe with driver visor failed with error -71
[  538.631405][ T6123] usb 4-1: USB disconnect, device number 124
[  539.247366][   T24] em28xx 3-1:1.0: Config register raw data: 0xffffffed
[  539.247387][   T24] em28xx 3-1:1.0: AC97 chip type couldn't be determined
[  539.247416][   T24] em28xx 3-1:1.0: No AC97 audio processor
[  539.247663][   T24] em28xx 3-1:1.0: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19]
[  539.247865][   T24] em28xx 3-1:1.0: Registering input extension
[  539.425850][   T24] rc_core: IR keymap rc-hauppauge not found
[  539.425871][   T24] Registered IR keymap rc-empty
[  539.474866][   T24] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0
[  539.525031][   T24] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input49
[  539.595718][   T24] em28xx 3-1:1.0: Input extension successfully initialized
[  539.595785][ T5640] em28xx 3-1:1.0: Closing input extension
[  539.654615][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'.
[  539.952183][ T5640] em28xx: Freeing device
[  540.020963][T13934] team0: Device ipip0 is up. Set it down before adding it as a team port
[  540.100362][T13934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.100584][T13934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.100776][T13934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.197696][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'.
[  540.199915][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'.
[  540.285938][ T5640] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[  540.441681][ T5640] usb 3-1: unable to get BOS descriptor or descriptor too short
[  540.442386][ T5640] usb 3-1: not running at top speed; connect to a high speed hub
[  540.442462][ T5640] usb 3-1: New USB device found: idVendor=0547, idProduct=7303, bcdDevice=8d.1e
[  540.444009][ T5640] usb 3-1: config 8 has an invalid interface number: 99 but max is 0
[  540.444037][ T5640] usb 3-1: config 8 has no interface number 0
[  540.459674][ T5640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.459811][ T5640] usb 3-1: Product: syz
[  540.459861][ T5640] usb 3-1: Manufacturer: syz
[  540.459968][ T5640] usb 3-1: SerialNumber: syz
[  540.719061][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'.
[  540.784309][ T5640] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  540.822698][ T5640] usb 3-1: USB disconnect, device number 124
[  540.954177][T13955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2760'.
[  540.972875][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2760'.
[  541.387463][ T8669] net_ratelimit: 49 callbacks suppressed
[  541.387487][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.387667][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.909849][T13965] syzkaller0: entered promiscuous mode
[  541.909875][T13965] syzkaller0: entered allmulticast mode
[  542.026856][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.028775][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.028942][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.399700][T13979] __nla_validate_parse: 1 callbacks suppressed
[  542.399730][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'.
[  542.677993][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'.
[  542.690169][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'.
[  542.761534][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'.
[  542.763596][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'.
[  543.014109][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'.
[  543.030804][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'.
[  543.249431][T14006] openvswitch: netlink: Duplicate key (type 16).
[  543.320879][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2770'.
[  543.422420][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'.
[  543.940419][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2787'.
[  543.995807][ T6108] usb 2-1: new full-speed USB device number 116 using dummy_hcd
[  544.031524][T14033] gtp0: entered promiscuous mode
[  544.031543][T14033] gtp0: entered allmulticast mode
[  544.126442][ T6108] usb 2-1: device descriptor read/64, error -71
[  544.365808][ T6108] usb 2-1: new full-speed USB device number 117 using dummy_hcd
[  544.386142][   T30] kauditd_printk_skb: 134 callbacks suppressed
[  544.386171][   T30] audit: type=1800 audit(1793301776.641:1243): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2782" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22
[  544.496218][ T6108] usb 2-1: device descriptor read/64, error -71
[  544.607170][ T6108] usb usb2-port1: attempt power cycle
[  544.725990][ T5640] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  544.865884][ T5640] usb 3-1: device descriptor read/64, error -71
[  544.947419][ T6108] usb 2-1: new full-speed USB device number 118 using dummy_hcd
[  544.969634][ T6108] usb 2-1: device descriptor read/8, error -71
[  545.115791][ T5640] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  545.206138][ T6108] usb 2-1: new full-speed USB device number 119 using dummy_hcd
[  545.230521][ T6108] usb 2-1: device descriptor read/8, error -71
[  545.255702][ T5640] usb 3-1: device descriptor read/64, error -71
[  545.337710][ T6108] usb usb2-port1: unable to enumerate USB device
[  545.367984][ T5640] usb usb3-port1: attempt power cycle
[  545.725902][ T5640] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  545.749153][ T5640] usb 3-1: device descriptor read/8, error -71
[  545.985779][ T5640] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  546.017141][ T5640] usb 3-1: device descriptor read/8, error -71
[  546.126263][ T5640] usb usb3-port1: unable to enumerate USB device
[  546.509961][T13853] cypress 0003:04B4:BCA1.0027: timeout initializing reports
[  546.565844][ T6108] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[  546.572340][ T5640] usb 5-1: USB disconnect, device number 2
[  546.683862][T14063] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  546.718890][ T6108] usb 4-1: not running at top speed; connect to a high speed hub
[  546.718932][ T6108] usb 4-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00
[  546.720070][ T6108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  546.720135][ T6108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.814952][T14065] loop5: detected capacity change from 0 to 7
[  546.823684][ T6108] uvcvideo 4-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  546.823959][ T6108] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770.
[  546.862239][T14065] Dev loop5: unable to read RDB block 7
[  546.862286][T14065]  loop5: unable to read partition table
[  546.862545][T14065] loop5: partition table beyond EOD, truncated
[  546.862582][T14065] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  547.066282][  T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.151508][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.151766][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.447900][ T5640] usb 4-1: USB disconnect, device number 125
[  547.507603][ T6108] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  547.598093][T14084] __nla_validate_parse: 3 callbacks suppressed
[  547.598120][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2802'.
[  547.640100][ T6108] usb 5-1: device descriptor read/64, error -71
[  547.793694][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.793900][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.875772][ T6108] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  547.924184][T14089] batadv0: entered promiscuous mode
[  547.934151][T14089] 8021q: adding VLAN 0 to HW filter on device macsec1
[  547.950307][T14089] batadv0: left promiscuous mode
[  548.008287][ T6108] usb 5-1: device descriptor read/64, error -71
[  548.079359][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2807'.
[  548.117161][ T6108] usb usb5-port1: attempt power cycle
[  548.299804][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2808'.
[  548.322122][T14102] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2808'.
[  548.455876][ T6108] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  548.479239][ T6108] usb 5-1: device descriptor read/8, error -71
[  548.534661][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'.
[  548.554310][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'.
[  548.715884][ T6108] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  548.737298][ T6108] usb 5-1: device descriptor read/8, error -71
[  548.846379][ T6108] usb usb5-port1: unable to enumerate USB device
[  549.496041][  T194] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  549.650090][  T194] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  549.651341][  T194] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  549.651364][  T194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  549.651384][  T194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  549.651404][  T194] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  549.651433][  T194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.659674][  T194] usb 4-1: config 0 descriptor??
[  549.689911][T14127] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  549.952814][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.961353][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.982555][   T30] audit: type=1326 audit(1793301782.231:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  549.982620][   T30] audit: type=1326 audit(1793301782.231:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  549.999779][   T30] audit: type=1326 audit(1793301782.241:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  549.999989][   T30] audit: type=1326 audit(1793301782.241:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  550.008138][   T30] audit: type=1326 audit(1793301782.261:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  550.008344][   T30] audit: type=1326 audit(1793301782.261:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  550.023499][   T30] audit: type=1326 audit(1793301782.271:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  550.023711][   T30] audit: type=1326 audit(1793301782.271:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  550.044142][   T30] audit: type=1326 audit(1793301782.291:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  550.050094][   T30] audit: type=1326 audit(1793301782.301:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.2.2819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc4f1c code=0x7ffc0000
[  550.226086][ T5734] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  550.256086][  T194] hid_parser_main: 5 callbacks suppressed
[  550.256105][  T194] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0
[  550.256130][  T194] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0
[  550.256150][  T194] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0
[  550.321099][  T194] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  550.376809][ T5734] usb 3-1: device descriptor read/64, error -71
[  550.443592][ T6108] usb 4-1: USB disconnect, device number 126
[  550.463618][T14140] fido_id[14140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  550.530781][T14143] batadv0: entered promiscuous mode
[  550.533404][T14143] 8021q: adding VLAN 0 to HW filter on device macsec1
[  550.534979][T14143] batadv0: left promiscuous mode
[  550.697251][T14148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.697741][T14148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.773056][T14153] loop5: detected capacity change from 0 to 7
[  550.775095][T14153] Dev loop5: unable to read RDB block 7
[  550.775118][T14153]  loop5: AHDI p1 p2 p4
[  550.775136][T14153] loop5: partition table partially beyond EOD, truncated
[  550.775298][T14153] loop5: p1 start 5439488 is beyond EOD, truncated
[  550.775321][T14153] loop5: p4 start 3288604672 is beyond EOD, truncated
[  550.935773][   T24] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  551.088709][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  551.088770][   T24] usb 2-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40
[  551.091336][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  551.091366][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  551.094882][   T24] usb 2-1: string descriptor 0 read error: -22
[  551.095050][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.163199][   T24] usb 2-1: selecting invalid altsetting 1
[  551.164045][   T24] usb 2-1: unit 3 not found!
[  551.490052][T14173] batadv0: entered promiscuous mode
[  551.494710][T14173] 8021q: adding VLAN 0 to HW filter on device macsec2
[  551.509275][T14173] batadv0: left promiscuous mode
[  551.525738][ T5734] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  551.628916][   T24] usb 2-1: cannot request logical cluster ID: 0 (err: -5)
[  551.629032][   T24] usb 2-1: invalid MIXER UNIT descriptor 6
[  551.657602][ T5734] usb 3-1: device descriptor read/64, error -71
[  551.700859][   T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -5
[  551.723539][T14183] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  551.723566][T14183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  551.731031][T14183] vhci_hcd vhci_hcd.0: Device attached
[  551.746857][T14184] usbip_core: unknown command
[  551.746870][T14184] vhci_hcd: unknown pdu 150994944
[  551.746902][T14184] usbip_core: unknown command
[  551.752014][ T8669] vhci_hcd vhci_hcd.4: stop threads
[  551.752033][ T8669] vhci_hcd vhci_hcd.4: release socket
[  551.752056][ T8669] vhci_hcd vhci_hcd.4: disconnect device
[  551.767243][ T5734] usb usb3-port1: attempt power cycle
[  552.105880][ T5734] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  552.126398][ T5734] usb 3-1: device descriptor read/8, error -71
[  552.293424][T14190] could not allocate digest TFM handle blake2b-512
[  552.365872][ T5734] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  552.387087][ T5734] usb 3-1: device descriptor read/8, error -71
[  552.497182][ T5734] usb usb3-port1: unable to enumerate USB device
[  552.710915][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'.
[  552.814595][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2839'.
[  552.895797][   T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  552.916988][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.917021][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.917363][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.047627][   T24] usb 4-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00
[  553.050186][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  553.054426][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.054445][   T24] usb 4-1: Product: syz
[  553.054456][   T24] usb 4-1: Manufacturer: syz
[  553.054467][   T24] usb 4-1: SerialNumber: syz
[  553.110123][   T24] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  553.735592][ T5734] usb 2-1: USB disconnect, device number 120
[  553.816031][   T24] gspca_mr97310a: reg read [21] error -110
[  553.816125][   T24] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -110
[  554.158535][ T5734] usb 4-1: USB disconnect, device number 127
[  554.445389][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'.
[  554.494707][T14252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  554.494738][T14252] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  554.495256][T14258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.495283][T14252] vhci_hcd vhci_hcd.0: Device attached
[  554.525836][T14258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.531247][T14253] usbip_core: unknown command
[  554.531261][T14253] vhci_hcd: unknown pdu 150994944
[  554.531274][T14253] usbip_core: unknown command
[  554.533145][T11754] vhci_hcd vhci_hcd.2: stop threads
[  554.533164][T11754] vhci_hcd vhci_hcd.2: release socket
[  554.533276][T11754] vhci_hcd vhci_hcd.2: disconnect device
[  554.826738][T11754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.826937][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.885761][ T5640] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  555.037370][ T5640] usb 2-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00
[  555.038401][ T5640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  555.040773][ T5640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.040800][ T5640] usb 2-1: Product: syz
[  555.040816][ T5640] usb 2-1: Manufacturer: syz
[  555.040831][ T5640] usb 2-1: SerialNumber: syz
[  555.091236][ T5640] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  555.405717][ T5734] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  555.475775][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  555.555738][ T5734] usb 4-1: Using ep0 maxpacket: 8
[  555.558365][ T5734] usb 4-1: unable to get BOS descriptor or descriptor too short
[  555.558495][ T5734] usb 4-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05
[  555.559590][ T5734] usb 4-1: config 4 interface 0 has no altsetting 0
[  555.561200][ T5734] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  555.561224][ T5734] usb 4-1: Manufacturer: syz
[  555.561241][ T5734] usb 4-1: SerialNumber: syz
[  555.628835][   T24] usb 5-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  555.630120][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  555.630153][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  555.630213][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  555.630242][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  555.632895][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.632921][   T24] usb 5-1: Product: syz
[  555.632975][   T24] usb 5-1: Manufacturer: syz
[  555.632993][   T24] usb 5-1: SerialNumber: syz
[  555.714302][   T24] usb 5-1: config 0 descriptor??
[  555.724940][   T24] iguanair 5-1:0.0: failed to get version
[  555.726090][   T24] iguanair 5-1:0.0: probe with driver iguanair failed with error -90
[  555.765942][ T5640] gspca_mr97310a: reg read [21] error -110
[  555.766035][ T5640] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110
[  555.807980][T14276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.809759][T14276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.813068][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  555.813082][   T30] audit: type=1326 audit(1793301788.061:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.813823][   T30] audit: type=1326 audit(1793301788.061:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.814084][   T30] audit: type=1326 audit(1793301788.061:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.814285][   T30] audit: type=1326 audit(1793301788.061:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.814521][   T30] audit: type=1326 audit(1793301788.061:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.814955][   T30] audit: type=1326 audit(1793301788.061:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.815428][   T30] audit: type=1326 audit(1793301788.061:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.824835][   T30] audit: type=1326 audit(1793301788.071:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.824888][   T30] audit: type=1326 audit(1793301788.071:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  555.824933][   T30] audit: type=1326 audit(1793301788.071:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14275 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000
[  556.132586][  T194] usb 5-1: USB disconnect, device number 7
[  556.378879][ T5640] usb 2-1: USB disconnect, device number 121
[  556.379919][ T5734] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  556.412288][ T5734] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  556.412722][ T5734] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  556.412778][ T5734] usb 4-1: media controller created
[  556.467238][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  556.522270][ T5734] zl10353_read_register: readreg error (reg=127, ret==0)
[  556.602858][ T5734] usb 4-1: USB disconnect, device number 2
[  557.064173][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'.
[  557.175892][ T5640] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  557.177592][T14306] vlan2: entered promiscuous mode
[  557.305764][ T5640] usb 2-1: device descriptor read/64, error -71
[  557.539249][T14310] hub 1-0:1.0: USB hub found
[  557.541857][T14310] hub 1-0:1.0: 1 port detected
[  557.557499][ T5640] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  557.583157][T14310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.583369][T14310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.583651][T14310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.629381][T14311] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  557.629421][T14311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  557.631134][T14311] vhci_hcd vhci_hcd.0: Device attached
[  557.650964][T14312] usbip_core: unknown command
[  557.650980][T14312] vhci_hcd: unknown pdu 150994944
[  557.650992][T14312] usbip_core: unknown command
[  557.662241][ T8667] vhci_hcd vhci_hcd.0: stop threads
[  557.662262][ T8667] vhci_hcd vhci_hcd.0: release socket
[  557.662285][ T8667] vhci_hcd vhci_hcd.0: disconnect device
[  557.692168][ T5640] usb 2-1: device descriptor read/64, error -71
[  557.716630][T14316] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2879'.
[  557.717220][T14314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.717577][T14314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.717875][T14316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2879'.
[  557.796045][ T5640] usb usb2-port1: attempt power cycle
[  558.027448][    C0] net_ratelimit: 19 callbacks suppressed
[  558.027475][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.136523][ T5640] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  558.156509][ T5640] usb 2-1: device descriptor read/8, error -71
[  558.175796][   T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  558.185516][T14332] fuse: Unknown parameter 'fa'
[  558.337932][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  558.338583][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  558.338618][   T24] usb 3-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40
[  558.339688][   T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  558.343447][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.343476][   T24] usb 3-1: Product: syz
[  558.343494][   T24] usb 3-1: Manufacturer: syz
[  558.343511][   T24] usb 3-1: SerialNumber: syz
[  558.406800][ T5640] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  558.426763][ T5640] usb 2-1: device descriptor read/8, error -71
[  558.456120][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.536200][ T5640] usb usb2-port1: unable to enumerate USB device
[  558.630717][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.632554][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.659612][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.663966][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.684523][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.695814][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.696011][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.698965][   T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  558.864237][   T24] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  558.864260][   T24] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  559.073047][   T24] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  559.073070][   T24] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  559.275244][   T24] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  559.305901][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.413245][   T24] usb 3-1: USB disconnect, device number 7
[  559.486053][  T194] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  559.524754][ T6832] udevd[6832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  559.650686][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'.
[  559.666540][  T194] usb 5-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  559.669494][  T194] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  559.669514][  T194] usb 5-1: config 5 has no interface number 0
[  559.669542][  T194] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  559.669562][  T194] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0
[  559.669578][  T194] usb 5-1: config 5 interface 123 has no altsetting 0
[  559.675372][  T194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.675391][  T194] usb 5-1: Product: syz
[  559.675402][  T194] usb 5-1: Manufacturer: syz
[  559.675413][  T194] usb 5-1: SerialNumber: syz
[  559.937243][T14337] loop4: detected capacity change from 0 to 7
[  559.971711][T14337]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  559.971745][T14337] loop4: partition table partially beyond EOD, truncated
[  559.971957][T14337] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  560.185413][T14361] hub 1-0:1.0: USB hub found
[  560.193765][T14361] hub 1-0:1.0: 1 port detected
[  560.555902][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'.
[  560.587570][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.587842][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.849932][T14372] syzkaller0: entered promiscuous mode
[  560.849959][T14372] syzkaller0: entered allmulticast mode
[  561.066080][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.235237][T14382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  561.235270][T14382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  561.252314][T14382] vhci_hcd vhci_hcd.0: Device attached
[  561.265917][T14384] usbip_core: unknown command
[  561.265933][T14384] vhci_hcd: unknown pdu 150994944
[  561.265945][T14384] usbip_core: unknown command
[  561.268450][ T8666] vhci_hcd vhci_hcd.1: stop threads
[  561.268506][ T8666] vhci_hcd vhci_hcd.1: release socket
[  561.268635][ T8666] vhci_hcd vhci_hcd.1: disconnect device
[  561.962905][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'.
[  562.102420][T14398] syzkaller1: entered promiscuous mode
[  562.102446][T14398] syzkaller1: entered allmulticast mode
[  562.367420][ T5640] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  562.504646][  T194] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[  562.516995][ T5640] usb 3-1: Using ep0 maxpacket: 8
[  562.520430][ T5640] usb 3-1: New USB device found: idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  562.530925][  T194] usb 5-1: USB disconnect, device number 8
[  562.557474][ T5640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.557506][ T5640] usb 3-1: Product: syz
[  562.557522][ T5640] usb 3-1: Manufacturer: syz
[  562.557539][ T5640] usb 3-1: SerialNumber: syz
[  562.583149][T14405] kAFS: unable to lookup cell '(G'
[  562.590238][T14405] kAFS: unable to lookup cell '(G'
[  562.603024][ T5640] usb 3-1: config 0 descriptor??
[  562.617035][ T5640] gspca_main: sq930x-2.14.0 probing 2770:930c
[  562.790473][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  562.797213][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  562.805205][ T5648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  562.820137][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  562.820910][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  563.044580][T14416] hub 1-0:1.0: USB hub found
[  563.047187][T14416] hub 1-0:1.0: 1 port detected
[  563.136030][ T5640] gspca_sq930x: reg_r 001f failed -110
[  563.136120][ T5640] sq930x 3-1:0.0: probe with driver sq930x failed with error -110
[  563.153170][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  563.153230][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  563.227558][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'.
[  563.407488][T14429] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2912'.
[  563.407513][T14429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2912'.
[  563.950254][T14413] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.950339][T14413] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.950638][T14413] bridge_slave_0: entered allmulticast mode
[  563.952287][T14413] bridge_slave_0: entered promiscuous mode
[  563.962787][T14413] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.963821][T14413] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.964188][T14413] bridge_slave_1: entered allmulticast mode
[  563.987917][T14413] bridge_slave_1: entered promiscuous mode
[  564.076365][T14413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.099957][T14413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.187958][T14413] team0: Port device team_slave_0 added
[  564.193610][T14413] team0: Port device team_slave_1 added
[  564.277552][T14413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.277574][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  564.277603][T14413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  564.278321][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'.
[  564.282254][T14413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  564.282278][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  564.282307][T14413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  564.436653][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.436820][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.437510][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.506436][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.540671][T14413] hsr_slave_0: entered promiscuous mode
[  564.541616][T14413] hsr_slave_1: entered promiscuous mode
[  564.543873][T14413] debugfs: 'hsr0' already exists in 'hsr'
[  564.543890][T14413] Cannot create hsr debugfs directory
[  564.921885][ T5648] Bluetooth: hci0: command tx timeout
[  564.937113][T14457] kAFS: unable to lookup cell '(G'
[  564.967693][T14457] kAFS: unable to lookup cell '(G'
[  564.990099][T14413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.250580][   T24] usb 3-1: USB disconnect, device number 8
[  565.278006][T14471] openvswitch: netlink: Message has -3 unknown bytes.
[  565.404711][T14413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.427734][T14474] usb usb7: usbfs: process 14474 (syz.0.2923) did not claim interface 0 before use
[  565.453830][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'.
[  565.464997][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'.
[  565.559479][T14413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.629853][T14479] hub 1-0:1.0: USB hub found
[  565.633095][T14479] hub 1-0:1.0: 1 port detected
[  565.716057][ T5640] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  565.767345][T14413] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.875812][ T5640] usb 2-1: Using ep0 maxpacket: 32
[  565.876551][ T5640] usb 2-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  565.885263][ T5640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.885291][ T5640] usb 2-1: Product: syz
[  565.885309][ T5640] usb 2-1: Manufacturer: syz
[  565.885326][ T5640] usb 2-1: SerialNumber: syz
[  565.933201][ T5640] usb 2-1: config 0 descriptor??
[  565.964384][ T5640] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  566.029337][  T995] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  566.205891][  T995] usb 1-1: Using ep0 maxpacket: 8
[  566.209624][  T995] usb 1-1: unable to get BOS descriptor or descriptor too short
[  566.209706][  T995] usb 1-1: New USB device found: idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  566.211162][  T995] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  566.211194][  T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  566.211254][  T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  566.211280][  T995] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  566.211305][  T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  566.211328][  T995] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  566.234260][  T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.234356][  T995] usb 1-1: Product: syz
[  566.234469][  T995] usb 1-1: Manufacturer: syz
[  566.234510][  T995] usb 1-1: SerialNumber: syz
[  566.272512][  T995] usb 1-1: config 0 descriptor??
[  566.284721][T14482] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  566.351755][  T995] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  566.352249][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.352481][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.384820][ T5640] gspca_stk1135: reg_w 0x0 err -71
[  566.389196][ T5640] gspca_stk1135: serial bus timeout: status=0x00
[  566.389245][ T5640] gspca_stk1135: Sensor write failed
[  566.389328][ T5640] gspca_stk1135: serial bus timeout: status=0x00
[  566.389352][ T5640] gspca_stk1135: Sensor write failed
[  566.389468][ T5640] gspca_stk1135: serial bus timeout: status=0x00
[  566.389500][ T5640] gspca_stk1135: Sensor read failed
[  566.389593][ T5640] gspca_stk1135: serial bus timeout: status=0x00
[  566.389616][ T5640] gspca_stk1135: Sensor read failed
[  566.389644][ T5640] gspca_stk1135: Detected sensor type unknown (0x0)
[  566.389718][ T5640] gspca_stk1135: serial bus timeout: status=0x00
[  566.389749][ T5640] gspca_stk1135: Sensor read failed
[  566.389839][ T5640] gspca_stk1135: serial bus timeout: status=0x00
[  566.389863][ T5640] gspca_stk1135: Sensor read failed
[  566.389947][ T5640] gspca_stk1135: serial bus timeout: status=0x00
[  566.389979][ T5640] gspca_stk1135: Sensor write failed
[  566.390064][ T5640] gspca_stk1135: serial bus timeout: status=0x00
[  566.445254][ T5640] gspca_stk1135: Sensor write failed
[  566.445501][ T5640] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[  566.526782][ T5640] usb 2-1: USB disconnect, device number 126
[  566.564132][T14413] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  566.583745][T14413] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  566.594459][T14413] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  566.616801][T14413] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  566.619692][T14413] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  566.631070][T14413] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  566.643042][T14413] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  566.663210][T14413] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  566.737067][  T995] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  566.822902][T14413] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.843171][ T5654] udevd[5654]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  566.904390][T14413] 8021q: adding VLAN 0 to HW filter on device team0
[  566.944259][T14499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2929'.
[  566.952299][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.952585][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  566.970572][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'.
[  566.986435][ T5648] Bluetooth: hci0: command tx timeout
[  566.995322][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.995434][ T8667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.059186][ T5640] usb 1-1: USB disconnect, device number 36
[  567.293110][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2931'.
[  567.497303][T14413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.596680][T14413] veth0_vlan: entered promiscuous mode
[  567.612250][T14413] veth1_vlan: entered promiscuous mode
[  567.647843][T14501] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  567.647872][T14501] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  567.650324][T14501] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  567.650346][T14501] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  567.652085][T14413] veth0_macvtap: entered promiscuous mode
[  567.693318][T14413] veth1_macvtap: entered promiscuous mode
[  567.727592][T14413] batman_adv: batadv0: Interface activated: batadv_slave_0
[  567.752827][T14413] batman_adv: batadv0: Interface activated: batadv_slave_1
[  567.784049][T14507] IPv6: Can't replace route, no match found
[  567.796858][ T8666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.797298][ T8666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.797594][ T8666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.800407][T14507] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2930'.
[  567.917563][ T8662] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.997065][ T8662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.997093][ T8662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.133256][ T8662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.133282][ T8662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.188241][T14514] kAFS: unable to lookup cell '(G'
[  568.189078][T14514] kAFS: unable to lookup cell '(G'
[  568.377457][ T6123] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[  568.528531][ T6123] usb 2-1: unable to get BOS descriptor or descriptor too short
[  568.529213][ T6123] usb 2-1: not running at top speed; connect to a high speed hub
[  568.529247][ T6123] usb 2-1: New USB device found: idVendor=05ac, idProduct=030a, bcdDevice=0.40
[  568.531440][ T6123] usb 2-1: config 1 interface 0 has no altsetting 0
[  568.539429][ T6123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.539503][ T6123] usb 2-1: Product: syz
[  568.539544][ T6123] usb 2-1: Manufacturer: syz
[  568.539586][ T6123] usb 2-1: SerialNumber: syz
[  568.831497][ T6123] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input52
[  568.868095][ T6123] usb 2-1: USB disconnect, device number 127
[  568.924729][ T6123] appletouch 2-1:1.0: input: appletouch disconnected
[  569.426815][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'.
[  569.913276][T14575] kAFS: unable to lookup cell '(G'
[  569.922035][T14575] kAFS: unable to lookup cell '(G'
[  569.995150][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'.
[  570.018951][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'.
[  570.075199][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'.
[  570.187349][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.302746][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'.
[  570.531485][T14599] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2957'.
[  570.850291][T14611] IPVS: set_ctl: invalid protocol: 51 172.20.20.38:20004
[  570.976317][ T5778] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  571.028651][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2966'.
[  571.125963][ T5778] usb 2-1: Using ep0 maxpacket: 8
[  571.126830][ T5778] usb 2-1: New USB device found: idVendor=046d, idProduct=08b5, bcdDevice=3a.11
[  571.131595][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.131621][ T5778] usb 2-1: Product: syz
[  571.131638][ T5778] usb 2-1: Manufacturer: syz
[  571.131655][ T5778] usb 2-1: SerialNumber: syz
[  571.177109][ T5778] usb 2-1: config 0 descriptor??
[  571.197591][ T5778] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  571.393527][ T5778] pwc: Failed to set LED on/off time (-71)
[  571.401697][ T5778] pwc: send_video_command error -71
[  571.401715][ T5778] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  571.401825][ T5778] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  571.435073][ T5778] usb 2-1: USB disconnect, device number 2
[  571.466051][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.629671][T14617] loop5: detected capacity change from 0 to 7
[  571.644909][T14617] Dev loop5: unable to read RDB block 7
[  571.659772][T14617]  loop5: unable to read partition table
[  571.659932][T14617] loop5: partition table beyond EOD, truncated
[  571.659960][T14617] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  571.680446][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'.
[  571.925736][ T5778] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  572.076494][ T5778] usb 2-1: New USB device found: idVendor=046d, idProduct=08b5, bcdDevice=3a.11
[  572.085164][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.085194][ T5778] usb 2-1: Product: syz
[  572.085211][ T5778] usb 2-1: Manufacturer: syz
[  572.085228][ T5778] usb 2-1: SerialNumber: syz
[  572.120787][ T1438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.120974][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.128031][T14622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.129288][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.165124][ T5778] usb 2-1: config 0 descriptor??
[  572.180121][ T5778] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  572.238847][T14627] syzkaller1: entered promiscuous mode
[  572.238874][T14627] syzkaller1: entered allmulticast mode
[  572.575888][T14622] syzkaller0: entered promiscuous mode
[  572.575918][T14622] syzkaller0: entered allmulticast mode
[  572.856976][ T5778] pwc: recv_control_msg error -71 req 02 val 2b00
[  572.857530][ T5778] pwc: recv_control_msg error -71 req 02 val 2700
[  572.858875][ T5778] pwc: recv_control_msg error -71 req 04 val 1600
[  572.859665][ T5778] pwc: recv_control_msg error -71 req 02 val 2c00
[  572.861644][ T5778] pwc: recv_control_msg error -71 req 04 val 1000
[  572.862608][ T5778] pwc: recv_control_msg error -71 req 04 val 1300
[  572.864872][ T5778] pwc: recv_control_msg error -71 req 04 val 1400
[  572.891832][ T5778] pwc: recv_control_msg error -71 req 02 val 2000
[  572.912047][ T5778] pwc: recv_control_msg error -71 req 02 val 2100
[  572.931718][ T5778] pwc: recv_control_msg error -71 req 06 val 0600
[  572.932189][ T5778] pwc: recv_control_msg error -71 req 04 val 1500
[  572.932645][ T5778] pwc: recv_control_msg error -71 req 02 val 2500
[  572.933096][ T5778] pwc: recv_control_msg error -71 req 02 val 2400
[  572.933552][ T5778] pwc: recv_control_msg error -71 req 02 val 2600
[  572.934007][ T5778] pwc: recv_control_msg error -71 req 02 val 2900
[  572.934450][ T5778] pwc: recv_control_msg error -71 req 02 val 2800
[  572.935065][ T5778] pwc: recv_control_msg error -71 req 04 val 1100
[  572.935495][ T5778] pwc: recv_control_msg error -71 req 04 val 1200
[  572.990834][ T5778] pwc: Failed to power off camera (-71)
[  573.014216][ T5778] pwc: Registered as video103.
[  573.023168][ T5778] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53
[  573.043557][ T5778] usb 2-1: USB disconnect, device number 3
[  573.093455][ T6832] udevd[6832]: setting mode of /dev/bus/usb/002/003 to 020664 failed: No such file or directory
[  573.093769][ T6832] udevd[6832]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory
[  573.843162][T14643] netlink: 83 bytes leftover after parsing attributes in process `syz.2.2974'.
[  574.014642][T14648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2975'.
[  575.722893][T14641] netlink: 'syz.1.2973': attribute type 2 has an invalid length.
[  575.946876][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.972298][T14659] __nla_validate_parse: 1 callbacks suppressed
[  575.972318][T14659] netlink: 964 bytes leftover after parsing attributes in process `syz.2.2976'.
[  575.972334][T14659] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  576.153653][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'.
[  576.182885][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2979'.
[  576.395251][T14683] netlink: 83 bytes leftover after parsing attributes in process `syz.1.2986'.
[  576.501288][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2988'.
[  576.637201][ T6123] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  576.795716][ T6123] usb 3-1: Using ep0 maxpacket: 16
[  576.798145][ T6123] usb 3-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00
[  576.800719][ T6123] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  576.800769][ T6123] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  576.800798][ T6123] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  576.800822][ T6123] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  576.800851][ T6123] usb 3-1: config 0 interface 0 has no altsetting 0
[  576.800887][ T6123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.886912][ T6123] usb 3-1: config 0 descriptor??
[  576.890187][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'.
[  576.925768][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'.
[  577.164667][T14684] netlink: 380 bytes leftover after parsing attributes in process `syz.2.2987'.
[  577.190464][ T6123] usbhid 3-1:0.0: can't add hid device: -71
[  577.190575][ T6123] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  577.220565][ T6123] usb 3-1: USB disconnect, device number 9
[  577.411190][ T8669] IPVS: starting estimator thread 0...
[  577.498440][T14719] IPVS: using max 26 ests per chain, 62400 per kthread
[  577.868812][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.868971][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.909985][T14727] fuse: Bad value for 'fd'
[  578.509302][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  578.512335][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.512562][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.748223][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'.
[  578.832899][T14740] netlink: 83 bytes leftover after parsing attributes in process `syz.0.3001'.
[  579.858052][T14768] loop5: detected capacity change from 0 to 7
[  579.862915][T14768] Dev loop5: unable to read RDB block 7
[  579.862939][T14768]  loop5: AHDI p1 p2 p4
[  579.862955][T14768] loop5: partition table partially beyond EOD, truncated
[  579.863095][T14768] loop5: p1 start 5439488 is beyond EOD, truncated
[  579.863110][T14768] loop5: p4 start 3288604672 is beyond EOD, truncated
[  580.349920][   T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  580.496769][   T24] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  580.498698][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  580.498733][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  580.499456][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  580.499489][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  580.499551][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.503498][   T24] usb 1-1: config 0 descriptor??
[  580.504465][T14773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  580.531547][T13218] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  580.537803][T14786] bridge0: port 3(veth0) entered blocking state
[  580.538863][T14786] bridge0: port 3(veth0) entered disabled state
[  580.578827][T14786] veth0: entered allmulticast mode
[  580.633717][T14786] veth0: entered promiscuous mode
[  580.644327][T14786] bridge0: port 3(veth0) entered blocking state
[  580.644457][T14786] bridge0: port 3(veth0) entered forwarding state
[  580.746371][T13218] usb 2-1: Using ep0 maxpacket: 32
[  580.747238][T13218] usb 2-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  580.749720][T13218] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[  580.749746][T13218] usb 2-1: config 0 has no interface number 0
[  580.749777][T13218] usb 2-1: too many endpoints for config 0 interface 32 altsetting 112: 101, using maximum allowed: 30
[  580.749906][T13218] usb 2-1: config 0 interface 32 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 101
[  580.749930][T13218] usb 2-1: config 0 interface 32 has no altsetting 0
[  580.753053][T13218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.753071][T13218] usb 2-1: Product: syz
[  580.753082][T13218] usb 2-1: Manufacturer: syz
[  580.753093][T13218] usb 2-1: SerialNumber: syz
[  580.782202][T13218] usb 2-1: config 0 descriptor??
[  580.962279][   T24] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  580.962311][   T24] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  580.962331][   T24] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  580.992035][ T8666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.010706][   T24] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  581.065431][T13218] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  581.065538][T13218] dvb-usb: bulk message failed: -22 (4/0)
[  581.065556][T13218] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  581.101479][T13218] dvb-usb: bulk message failed: -22 (5/0)
[  581.101503][T13218] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  581.102587][T14798] __nla_validate_parse: 1 callbacks suppressed
[  581.102605][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'.
[  581.156050][T13218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  581.156832][T13218] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  581.156895][T13218] usb 2-1: media controller created
[  581.198387][T13218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  581.216717][ T5778] usb 1-1: USB disconnect, device number 37
[  581.241648][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3020'.
[  581.255132][T14799] vlan2: entered allmulticast mode
[  581.255157][T14799] bridge5: entered allmulticast mode
[  581.270588][T13218] ttusb2: set interface to alts=3 failed
[  581.293293][T14797] fido_id[14797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  581.342167][T13218] DVB: Unable to find symbol tda10086_attach()
[  581.342186][T13218] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  581.343043][T13218] dvb-usb: bulk message failed: -22 (4/0)
[  581.343063][T13218] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  581.343188][T13218] dvb-usb: bulk message failed: -22 (5/0)
[  581.343204][T13218] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  581.343274][T13218] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  581.360252][T13218] usb 2-1: USB disconnect, device number 4
[  581.463251][T13218] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  581.602364][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'.
[  581.956282][T14822] trusted_key: encrypted_key: insufficient parameters specified
[  581.985827][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'.
[  582.269481][T14830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3025'.
[  582.445707][T13218] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  582.517201][T14830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3025'.
[  582.576195][T13218] usb 4-1: device descriptor read/64, error -71
[  582.815824][T13218] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  582.945801][T13218] usb 4-1: device descriptor read/64, error -71
[  583.066345][T13218] usb usb4-port1: attempt power cycle
[  583.085855][ T5734] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  583.216835][ T5734] usb 3-1: device descriptor read/64, error -71
[  583.386338][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'.
[  583.415702][T13218] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  583.436402][T13218] usb 4-1: device descriptor read/8, error -71
[  583.456215][ T5734] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  583.586445][ T5734] usb 3-1: device descriptor read/64, error -71
[  583.627413][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.629205][ T1438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.629355][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.686130][T13218] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  583.696131][ T5734] usb usb3-port1: attempt power cycle
[  583.712220][T13218] usb 4-1: device descriptor read/8, error -71
[  583.817925][T13218] usb usb4-port1: unable to enumerate USB device
[  583.855962][  T194] usb 1-1: new low-speed USB device number 38 using dummy_hcd
[  584.006689][  T194] usb 1-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=14.6e
[  584.009406][  T194] usb 1-1: config 8 has an invalid interface number: 137 but max is 0
[  584.009426][  T194] usb 1-1: config 8 has no interface number 0
[  584.012333][  T194] usb 1-1: string descriptor 0 read error: -22
[  584.012425][  T194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.048584][ T5734] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  584.072060][ T5734] usb 3-1: device descriptor read/8, error -71
[  584.095541][  T194] ttusb_dec_send_command: command bulk message failed: error -22
[  584.096825][  T194] ttusb-dec 1-1:8.137: probe with driver ttusb-dec failed with error -22
[  584.269173][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.269328][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.306496][ T5734] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  584.326211][ T5734] usb 3-1: device descriptor read/8, error -71
[  584.436240][ T5734] usb usb3-port1: unable to enumerate USB device
[  584.824109][T14875] input: syz0 as /devices/virtual/input/input55
[  584.958326][   T24] usb 1-1: USB disconnect, device number 38
[  585.105782][T13218] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  585.258986][T13218] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  585.263366][T13218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.287488][T13218] usb 5-1: config 0 descriptor??
[  585.491240][T13218] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  585.546090][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.596073][ T5734] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  585.701485][T13218] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  585.701513][T13218] [drm] Initialized udl on minor 1
[  585.726838][ T5734] usb 4-1: device descriptor read/64, error -71
[  585.965765][ T5734] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  586.027363][ T8669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.095867][ T5734] usb 4-1: device descriptor read/64, error -71
[  586.205965][ T5734] usb usb4-port1: attempt power cycle
[  586.547510][ T5734] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  586.576664][ T5734] usb 4-1: device descriptor read/8, error -71
[  586.815842][ T5734] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  586.840661][ T5734] usb 4-1: device descriptor read/8, error -71
[  586.946545][ T5734] usb usb4-port1: unable to enumerate USB device
[  587.242385][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  587.249256][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  587.263375][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  587.264681][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  587.265478][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  587.306013][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  587.308938][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  587.309290][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  587.316519][ T5734] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  587.325038][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  587.340828][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  587.477285][ T5734] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[  587.481185][ T5734] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64
[  587.481220][ T5734] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50
[  587.481247][ T5734] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  587.484320][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  587.484347][ T5734] usb 2-1: Product: syz
[  587.484364][ T5734] usb 2-1: Manufacturer: syz
[  587.808976][T14911] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  587.809182][T14911] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  587.869346][ T5734] dvb_ttusb_budget: ttusb_init_controller: error
[  587.869368][ T5734] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  587.975979][ T5734] DVB: Unable to find symbol cx22700_attach()
[  588.075019][ T5734] DVB: Unable to find symbol tda10046_attach()
[  588.075037][ T5734] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  588.431554][T14927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3058'.
[  588.748105][ T8665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.748266][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.796322][T14931] vlan3: entered promiscuous mode
[  588.890992][T14913] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.891157][T14913] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.891281][T14913] bridge_slave_0: entered allmulticast mode
[  588.894784][T14913] bridge_slave_0: entered promiscuous mode
[  588.916620][T14913] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.917136][T14913] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.919818][T14913] bridge_slave_1: entered allmulticast mode
[  588.950838][T14913] bridge_slave_1: entered promiscuous mode
[  589.089927][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.112108][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.172657][T14913] team0: Port device team_slave_0 added
[  589.195942][T14913] team0: Port device team_slave_1 added
[  589.280286][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  589.280300][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.280321][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  589.339743][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  589.339764][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.339799][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  589.395740][ T5637] Bluetooth: hci2: command tx timeout
[  589.478191][T14944] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3062'.
[  589.481868][T14944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3062'.
[  589.724148][T14913] hsr_slave_0: entered promiscuous mode
[  589.735428][T14913] hsr_slave_1: entered promiscuous mode
[  589.743937][T14913] debugfs: 'hsr0' already exists in 'hsr'
[  589.743956][T14913] Cannot create hsr debugfs directory
[  590.027066][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.027489][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.247344][ T5778] usb 2-1: USB disconnect, device number 5
[  590.503786][T14913] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.503827][T14913] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.653909][T14913] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.653953][T14913] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.750145][T13218] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  590.752727][T13218] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  590.787130][T14913] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.793564][T14913] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.798027][ T5640] usb 5-1: USB disconnect, device number 9
[  590.799227][T13218] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  590.834156][T13218] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  591.021833][T14913] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.021863][T14913] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.148309][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.466796][ T5637] Bluetooth: hci2: command tx timeout
[  591.955029][T14913] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  591.992553][T14913] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  592.000775][T14913] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  592.067700][T14913] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  592.069822][T14913] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  592.107770][T14913] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  592.108905][T14913] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  592.140155][T14913] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  592.416436][T14913] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.466041][T14913] 8021q: adding VLAN 0 to HW filter on device team0
[  592.486555][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.486631][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  592.525972][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.526091][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  592.832046][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.946381][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3075'.
[  593.092752][T14913] veth0_vlan: entered promiscuous mode
[  593.111142][T14998] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3074'.
[  593.111945][T14998] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3074'.
[  593.112081][T14998] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3074'.
[  593.112214][T14998] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3074'.
[  593.112404][T14998] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3074'.
[  593.112548][T14998] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3074'.
[  593.195561][T14913] veth1_vlan: entered promiscuous mode
[  593.367720][T15006] input: syz0 as /devices/virtual/input/input56
[  593.397201][T14913] veth0_macvtap: entered promiscuous mode
[  593.422728][T14913] veth1_macvtap: entered promiscuous mode
[  593.500684][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.537097][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.542230][T15002] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  593.542250][T15002] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  593.545895][    C0] ------------[ cut here ]------------
[  593.545911][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci2
[  593.546036][    C0] WARNING: kernel/workqueue.c:2437 at __queue_work+0xdfc/0x1360, CPU#0: swapper/0/0
[  593.588451][    C0] Modules linked in:
[  593.592362][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  593.602958][    C0] Tainted: [L]=SOFTLOCKUP
[  593.607283][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  593.617344][    C0] RIP: 0010:__queue_work+0xe1a/0x1360
[  593.622738][    C0] Code: 28 78 01 00 00 4c 8d 35 64 51 11 10 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 b2 f3 b0 00 49 8b 77 18 4c 89 f7 48 8b 54 24 28 <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8
[  593.642363][    C0] RSP: 0000:ffffc90000007be8 EFLAGS: 00010046
[  593.648445][    C0] RAX: 1ffff1100727794e RBX: dffffc0000000000 RCX: ffffffff8fc8efc0
[  593.656429][    C0] RDX: ffff888054585178 RSI: ffffffff8af08c20 RDI: ffffffff91a04590
[  593.664402][    C0] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff233adf7
[  593.672374][    C0] R10: dffffc0000000000 R11: ffffffff818efd60 R12: ffff8880545851c0
[  593.680352][    C0] R13: 0000000000000008 R14: ffffffff91a04590 R15: ffff8880393bca58
[  593.688327][    C0] FS:  0000000000000000(0000) GS:ffff888123620000(0000) knlGS:0000000000000000
[  593.697261][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  593.703850][    C0] CR2: 00000000f53c3edc CR3: 00000000595d6000 CR4: 00000000003526f0
[  593.711834][    C0] Call Trace:
[  593.715128][    C0]  <IRQ>
[  593.717994][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  593.723418][    C0]  call_timer_fn+0x18d/0x5f0
[  593.728023][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  593.733849][    C0]  ? call_timer_fn+0xd5/0x5f0
[  593.738543][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  593.743703][    C0]  ? do_raw_spin_unlock+0xf5/0x200
[  593.748823][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  593.754660][    C0]  __run_timer_base+0x67e/0x8b0
[  593.759538][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  593.764923][    C0]  ? lapic_next_event+0x11/0x20
[  593.769807][    C0]  ? clockevents_program_event+0x491/0x630
[  593.775654][    C0]  run_timer_softirq+0xb7/0x170
[  593.780536][    C0]  handle_softirqs+0x265/0x8d0
[  593.785396][    C0]  __irq_exit_rcu+0xc6/0x220
[  593.790031][    C0]  irq_exit_rcu+0x9/0x30
[  593.794299][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  593.799950][    C0]  </IRQ>
[  593.802916][    C0]  <TASK>
[  593.805857][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  593.811882][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  593.817750][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 a7 3a 6e 0a e8 b2 80 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  593.837455][    C0] RSP: 0000:ffffffff8fc07a40 EFLAGS: 00000202
[  593.843537][    C0] RAX: 00000000008b2419 RBX: ffff8880b823d120 RCX: 8000000000000001
[  593.851517][    C0] RDX: 0000000000000000 RSI: ffffffff8e6a2302 RDI: ffffffff8c8e8c80
[  593.859499][    C0] RBP: ffffffff8fc07a90 R08: ffffffff919d6fbf R09: 1ffffffff233adf7
[  593.867482][    C0] R10: dffffc0000000000 R11: fffffbfff233adf8 R12: ffffffff8fc8efc0
[  593.875464][    C0] R13: ffffffff8fc8efc0 R14: dffffc0000000000 R15: 1ffff11017047a24
[  593.883489][    C0]  __schedule+0x17e5/0x5820
[  593.888024][    C0]  ? ct_kernel_exit_state+0x2b/0x80
[  593.893261][    C0]  ? ct_nmi_exit+0xf1/0x1d0
[  593.897787][    C0]  ? __pfx___schedule+0x10/0x10
[  593.902711][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  593.907934][    C0]  ? tick_nohz_idle_exit+0x34f/0x470
[  593.913231][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  593.918440][    C0]  schedule_idle+0x51/0x90
[  593.922864][    C0]  do_idle+0x4ad/0x540
[  593.926943][    C0]  ? __pfx_do_idle+0x10/0x10
[  593.931546][    C0]  cpu_startup_entry+0x43/0x60
[  593.936317][    C0]  rest_init+0x378/0x3a0
[  593.940576][    C0]  ? __pfx_rest_init+0x10/0x10
[  593.945446][    C0]  ? __pfx_kernel_init+0x10/0x10
[  593.950399][    C0]  ? __pfx_acpi_hw_get_mode+0x10/0x10
[  593.955881][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  593.961212][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  593.966508][    C0]  ? acpi_enable_subsystem+0x286/0x3c0
[  593.972036][    C0]  start_kernel+0x392/0x3e0
[  593.976633][    C0]  x86_64_start_reservations+0x24/0x30
[  593.982206][    C0]  x86_64_start_kernel+0x137/0x1b0
[  593.987343][    C0]  common_startup_64+0x13e/0x157
[  593.992318][    C0]  </TASK>
[  593.995360][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  594.002647][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  594.013240][    C0] Tainted: [L]=SOFTLOCKUP
[  594.017582][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  594.027662][    C0] Call Trace:
[  594.030964][    C0]  <IRQ>
[  594.033823][    C0]  vpanic+0x26f/0x710
[  594.037851][    C0]  panic+0xc5/0xd0
[  594.041594][    C0]  ? __pfx_panic+0x10/0x10
[  594.046039][    C0]  ? common_startup_64+0x13e/0x157
[  594.051200][    C0]  __warn+0x315/0x4c0
[  594.055194][    C0]  ? __queue_work+0xdfc/0x1360
[  594.059981][    C0]  ? __queue_work+0xdfc/0x1360
[  594.064757][    C0]  __report_bug+0x276/0x570
[  594.069343][    C0]  ? __lock_acquire+0x747/0x2de0
[  594.074297][    C0]  ? __queue_work+0xdfc/0x1360
[  594.079165][    C0]  ? __pfx___report_bug+0x10/0x10
[  594.084258][    C0]  ? rest_init+0x378/0x3a0
[  594.088707][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  594.094023][    C0]  ? look_up_lock_class+0x57/0x110
[  594.099157][    C0]  ? register_lock_class+0x31/0x2e0
[  594.104377][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  594.109419][    C0]  report_bug_entry+0x19b/0x290
[  594.114287][    C0]  ? __queue_work+0xe1a/0x1360
[  594.119066][    C0]  ? __queue_work+0xe1f/0x1360
[  594.123848][    C0]  handle_bug+0xce/0x200
[  594.128104][    C0]  exc_invalid_op+0x1a/0x50
[  594.132618][    C0]  asm_exc_invalid_op+0x1a/0x20
[  594.137473][    C0] RIP: 0010:__queue_work+0xe1a/0x1360
[  594.142871][    C0] Code: 28 78 01 00 00 4c 8d 35 64 51 11 10 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 b2 f3 b0 00 49 8b 77 18 4c 89 f7 48 8b 54 24 28 <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8
[  594.162521][    C0] RSP: 0000:ffffc90000007be8 EFLAGS: 00010046
[  594.168638][    C0] RAX: 1ffff1100727794e RBX: dffffc0000000000 RCX: ffffffff8fc8efc0
[  594.176632][    C0] RDX: ffff888054585178 RSI: ffffffff8af08c20 RDI: ffffffff91a04590
[  594.184613][    C0] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff233adf7
[  594.192612][    C0] R10: dffffc0000000000 R11: ffffffff818efd60 R12: ffff8880545851c0
[  594.200605][    C0] R13: 0000000000000008 R14: ffffffff91a04590 R15: ffff8880393bca58
[  594.208630][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  594.214463][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  594.219776][    C0]  ? __queue_work+0xdcf/0x1360
[  594.224558][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  594.229941][    C0]  call_timer_fn+0x18d/0x5f0
[  594.234536][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  594.240351][    C0]  ? call_timer_fn+0xd5/0x5f0
[  594.245029][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  594.250149][    C0]  ? do_raw_spin_unlock+0xf5/0x200
[  594.255268][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  594.261088][    C0]  __run_timer_base+0x67e/0x8b0
[  594.265962][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  594.271381][    C0]  ? lapic_next_event+0x11/0x20
[  594.276252][    C0]  ? clockevents_program_event+0x491/0x630
[  594.282072][    C0]  run_timer_softirq+0xb7/0x170
[  594.286940][    C0]  handle_softirqs+0x265/0x8d0
[  594.291748][    C0]  __irq_exit_rcu+0xc6/0x220
[  594.296358][    C0]  irq_exit_rcu+0x9/0x30
[  594.300664][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  594.306320][    C0]  </IRQ>
[  594.309257][    C0]  <TASK>
[  594.312215][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  594.318219][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  594.324040][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 a7 3a 6e 0a e8 b2 80 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  594.343687][    C0] RSP: 0000:ffffffff8fc07a40 EFLAGS: 00000202
[  594.349787][    C0] RAX: 00000000008b2419 RBX: ffff8880b823d120 RCX: 8000000000000001
[  594.357786][    C0] RDX: 0000000000000000 RSI: ffffffff8e6a2302 RDI: ffffffff8c8e8c80
[  594.365765][    C0] RBP: ffffffff8fc07a90 R08: ffffffff919d6fbf R09: 1ffffffff233adf7
[  594.373760][    C0] R10: dffffc0000000000 R11: fffffbfff233adf8 R12: ffffffff8fc8efc0
[  594.381738][    C0] R13: ffffffff8fc8efc0 R14: dffffc0000000000 R15: 1ffff11017047a24
[  594.389741][    C0]  __schedule+0x17e5/0x5820
[  594.394267][    C0]  ? ct_kernel_exit_state+0x2b/0x80
[  594.399482][    C0]  ? ct_nmi_exit+0xf1/0x1d0
[  594.404003][    C0]  ? __pfx___schedule+0x10/0x10
[  594.408854][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  594.414078][    C0]  ? tick_nohz_idle_exit+0x34f/0x470
[  594.419374][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  594.424579][    C0]  schedule_idle+0x51/0x90
[  594.429015][    C0]  do_idle+0x4ad/0x540
[  594.433109][    C0]  ? __pfx_do_idle+0x10/0x10
[  594.437728][    C0]  cpu_startup_entry+0x43/0x60
[  594.442506][    C0]  rest_init+0x378/0x3a0
[  594.446787][    C0]  ? __pfx_rest_init+0x10/0x10
[  594.451594][    C0]  ? __pfx_kernel_init+0x10/0x10
[  594.456543][    C0]  ? __pfx_acpi_hw_get_mode+0x10/0x10
[  594.461922][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  594.467215][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  594.472553][    C0]  ? acpi_enable_subsystem+0x286/0x3c0
[  594.478031][    C0]  start_kernel+0x392/0x3e0
[  594.482578][    C0]  x86_64_start_reservations+0x24/0x30
[  594.488092][    C0]  x86_64_start_kernel+0x137/0x1b0
[  594.493247][    C0]  common_startup_64+0x13e/0x157
[  594.498404][    C0]  </TASK>
[  594.502090][    C0] Kernel Offset: disabled
[  594.506433][    C0] Rebooting in 86400 seconds..