last executing test programs:

12.167549937s ago: executing program 3 (id=2967):
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000580)='[:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0x1}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff00000001", 0xc)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x19, 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0xe, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x80400000})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2)
fsetxattr$security_ima(r3, &(0x7f0000000200), &(0x7f0000000440)=@v2={0x5, 0x3, 0x12, 0x7f, 0xab, "f659b8f877023409b029befb647a3c3bbc4c7ca3d269c52d269fd766ed01381b37bcc846e2a32279d76f17ed5c9a6c7c01ce8ab97dbd6985cffb8bebcea6963dd18f94c72d720f3effc1b988fd700cab2d9179a2bb0f642a7935139a569e0273c3b57c7640fbced6165a64ce0af70ad3f873ef36bee7bbe53d9d104d588d3e4506b022ce9aa80f704cea198dec151b212716385acd3eb35d765e3994882f1cf48a6b802b6c1052aefe0560"}, 0xb4, 0x1)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, 0x0)

9.963133187s ago: executing program 4 (id=2969):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2000000010, 0x9]}})
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000090a010400000000000000000a00000608000f4000005f90715e1e6b301c00020900020073797a310000000008000a400000000238000000020a010100000000000000000a0000000900010073797a30000000000900010073797a30000000000900010073797a31"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40000040, @mcast2, 0x8}, 0x1c)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

9.620512453s ago: executing program 3 (id=2972):
socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5357aed3b467007b, 0x8031, 0xffffffffffffffff, 0x28f43000)
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = open$dir(0x0, 0x0, 0xc4)
mkdirat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x62)
syz_usb_connect(0x5, 0xe4, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0)
sendmsg$nl_route(r0, 0x0, 0x20000114)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0))
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x8810)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x8, 0x100000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000500)={0x8, 0x20000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
setresuid(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$I2C(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x8)
fchdir(r5)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents64(r6, &(0x7f0000000180)=""/82, 0x52)
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x7811, &(0x7f00001df000/0x4000)=nil, 0x2)

9.395617116s ago: executing program 4 (id=2973):
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f00000003c0))
socketpair$unix(0x1, 0x42bac0ca02255156, 0x0, &(0x7f0000000340))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda7, 0x25dfdbfa, {0x13}}, 0x14}}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'wlan0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x1, 0x1}]}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000000000180c280"], 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x0)
r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0xa, @pix={0x5, 0x1ec0000, 0x34565348, 0x5, 0x9, 0xddc8, 0x0, 0x2, 0x0, 0x6, 0x2, 0x3}})
syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000300)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x1}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x31)

8.171328622s ago: executing program 4 (id=2975):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x2, 0x0, 0xfd8e, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x2, 0x0, 0xfd8e, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) (async)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)

7.908950692s ago: executing program 4 (id=2976):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0) (async)
syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff00070503"], 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup2(0xffffffffffffffff, r2) (async)
set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) (async)
r3 = syz_open_procfs(0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0)

6.653443152s ago: executing program 4 (id=2978):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00')
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e7000000000000000400200018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x41, &(0x7f0000000180)=""/65, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={r0, 0x20, &(0x7f00000014c0)={&(0x7f0000000400)=""/4096, 0x1000, 0x0, &(0x7f0000001400)=""/178, 0xb2}}, 0x10)

6.495878894s ago: executing program 4 (id=2979):
unshare(0x64000600)
unshare(0x48000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000049c0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000004ac0)=0xe8)
r2 = getgid()
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000004b00)={0xab, 0xfff, {}, {<r3=>0xffffffffffffffff}, 0x7, 0xffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004b40)={0x0, 0x0, <r4=>0x0}, &(0x7f0000004b80)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000004bc0)='./file0\x00', &(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x400)
getresgid(&(0x7f0000004c80)=<r6=>0x0, &(0x7f0000004cc0), &(0x7f0000004d00))
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f000000a280)={0x2020, 0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x1001a, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x7, {0x3, 0x1, 0x3, 0x4000000000000, 0x9, 0xfffffffe, {0x0, 0x4, 0x8, 0x200, 0x2, 0xffffffff80000001, 0x2, 0x0, 0x4, 0xc000, 0x0, r9, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004d40)={0x0, 0x0, <r10=>0x0}, &(0x7f0000004d80)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005080)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000005180)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000051c0)={0x0, 0x0, <r12=>0x0}, &(0x7f0000005200)=0xc)
r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r13, &(0x7f0000002100)={0x2020, 0x0, <r14=>0x0, <r15=>0x0, <r16=>0x0}, 0x2020)
syz_fuse_handle_req(r13, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40a, 0x6, 0x20000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r15, r16, 0x3d5, 0x20000005}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r13, &(0x7f0000000180)={0x50, 0x0, r14, {0x7, 0x26, 0x5, 0xffffffff80210000, 0x0, 0xfffc, 0x5, 0x7, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
syz_fuse_handle_req(r13, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r15, 0x0, 0x1, 0x8}}, {0x0, 0x6}}}, 0x0, 0x0})
stat(&(0x7f0000005340)='./file0\x00', &(0x7f0000005380)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000100)="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", 0x2000, &(0x7f0000005540)={&(0x7f0000002100)={0x50, 0x0, 0xd6, {0x7, 0x2d, 0x0, 0x12000080, 0x8, 0x8001, 0x3, 0x80000001, 0x0, 0x0, 0x20, 0x5}}, &(0x7f0000002180)={0x18, 0x0, 0x4, {0x1000}}, &(0x7f00000021c0)={0x18, 0x0, 0x1b342654, {0x898}}, &(0x7f0000002200)={0x18, 0x0, 0x6, {0x8}}, &(0x7f0000002240)={0x18, 0xfffffffffffffffe, 0x7a, {0x1}}, &(0x7f0000002580)={0x28, 0xffffffffffffffda, 0x400, {{0x2, 0x0, 0x2}}}, &(0x7f00000025c0)={0x60, 0x0, 0xf24, {{0x40, 0x2, 0x9, 0x0, 0x3, 0xcd7, 0x5, 0x1}}}, &(0x7f0000002640)={0x18, 0x0, 0xa, {0x4}}, &(0x7f0000004140)=ANY=[@ANYBLOB="8dbae7a7a9e86760924c2b3461150000002f00000002001b00000000006675736500be21"], &(0x7f00000026c0)={0x20, 0x0, 0x40, {0x0, 0x1}}, &(0x7f0000002780)={0x78, 0x0, 0x400, {0x2, 0xf, 0x0, {0x4, 0x61, 0x7, 0x380000000000000, 0x5, 0xffffffffffffff87, 0x9, 0x28c7, 0x401, 0x2000, 0x5, 0x0, 0x0, 0x39, 0x80000001}}}, &(0x7f0000004880)={0x90, 0xffffffffffffffda, 0x8, {0x6, 0x3, 0x0, 0xfffffffffffffffb, 0x2, 0x7, {0x6, 0x5, 0xfff, 0x8, 0x800, 0x14d, 0xff, 0x8, 0x59ed, 0x8000, 0x2, 0x0, 0x0, 0xffff, 0x9}}}, &(0x7f0000004940)={0x48, 0x0, 0x9, [{0x0, 0x200, 0x0, 0x3}, {0x3, 0xd3ea, 0x8, 0x3, 'rootmode'}]}, &(0x7f0000004dc0)={0x288, 0xfffffffffffffffe, 0x2, [{{0x5, 0x1, 0xffffffffffffff1a, 0x101, 0x6, 0x3, {0x6, 0x6, 0x57, 0x10, 0xffffffffffffffff, 0x9, 0x7, 0x48f5088d, 0x4, 0x2000, 0x9, r1, r2, 0x3ff, 0x3ff}}, {0x4, 0xfffffffffffffff8, 0x6, 0x1, 'L$}%]&'}}, {{0x5, 0x3, 0x4206, 0x7, 0x5, 0x96b, {0x4, 0x7fffffff, 0x8, 0x0, 0x5, 0x8000000000000001, 0x400, 0x8, 0x7, 0xa000, 0x0, r3, r4, 0x9}}, {0x5, 0x3ff, 0x7, 0x6, 'user_id'}}, {{0x6, 0x2, 0x3, 0x38000, 0x2d, 0x1c, {0x1, 0x8, 0x9, 0x9ec, 0x1, 0x7fffffff, 0x7fff, 0x9, 0x2, 0x1000, 0x4, r5, r6, 0x8, 0x76a8}}, {0x5, 0xfffffffffffffffc, 0x5, 0x7, 'fuse\x00'}}, {{0x0, 0x3, 0x3, 0x4, 0x3d, 0x2, {0x6, 0x7fffffff, 0x94f, 0xe, 0x4, 0x200, 0x9, 0xfffffffb, 0x2, 0x4000, 0xa, r9, r10, 0x8000, 0x4b}}, {0x1, 0x8, 0x0, 0x7}}]}, &(0x7f0000005240)={0xa0, 0xffffffffffffffda, 0x6, {{0x6, 0x5, 0x7, 0x7, 0x8, 0x3, {0x3, 0x401, 0xffffffffffffffff, 0x4, 0x6, 0x5ef, 0x4, 0x6, 0x8001, 0x8000, 0x2f1, r11, r12, 0x2, 0xb}}}}, &(0x7f0000005300)={0x20, 0xfffffffffffffffe, 0xa, {0x800, 0x0, 0x0, 0x4}}, &(0x7f0000005400)={0x130, 0xfffffffffffffff5, 0x1, {0x0, 0xb1c3, 0x0, '\x00', {0x2000, 0x8001, 0x5, 0x3, r15, r17, 0x4000, '\x00', 0x9, 0x2, 0x1, 0x3ff, {0x5, 0x4}, {0xf, 0xc}, {0x7, 0x2}, {0x3, 0x8}, 0xfffffff1, 0x6, 0x9, 0xff}}}})
socket(0x15, 0x5, 0x5)
r18 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r18}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000))

6.288896167s ago: executing program 0 (id=2980):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000e8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f78c5660f75795a0fc7290f35656466e32b0f013ea26f66b80500000066b9e90000000f01c164f30f1efe650f790cdc9b4c65"}], 0x1, 0x59, 0x0, 0x30)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.208199271s ago: executing program 3 (id=2981):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x7800, 0x701, 0x107, 0xff, {{0x5, 0x4, 0x2, 0x13, 0x14, 0x265, 0x3, 0x8, 0x4, 0x0, @empty, @empty}}}})

5.965057285s ago: executing program 0 (id=2982):
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffff}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xffffffffffffff5b, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x5}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

5.78299811s ago: executing program 0 (id=2984):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
mbind(&(0x7f000034a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x1, 0x0)
get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x1, 0x3})
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = getpid()
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
faccessat2(r4, &(0x7f0000000180)='./file0\x00', 0x80, 0x1200)
r5 = syz_pidfd_open(r2, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x8000, 0x17d700)
write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000060", @ANYRES64=r6], 0xb2)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4d, 0x9de8, 0x8, 0x6a, 0xc, 0xb, 0x3, 0x0, 0x10, 0x4, [0x1, 0x5, 0xffffffff, 0xfffffffe, 0x1, 0x5, 0x6, 0x1], [0x6, 0x5e89, 0x7, 0x3d, 0x4, 0x3, 0xd]}})
sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c)
r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r10 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r11)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r12, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0)
write(r9, &(0x7f0000000500)="ffffffffffff02000000000188ca50c0003c0000000002000001000000010000020000000000", 0x26)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r8, 0x0)

5.453204737s ago: executing program 1 (id=2968):
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffff}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xffffffffffffff5b, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x5}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

5.264326648s ago: executing program 0 (id=2985):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x1c, 0x18, 0x229, 0x100, 0x0, {0xa}, [@generic="ad0980f1c5"]}, 0x1c}}, 0x4000)
r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/anycast6\x00')
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x0, 0x0, r7})
read$FUSE(r3, &(0x7f00000095c0)={0x2020}, 0x2020)
preadv(r3, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r9, 0x0, 0x0, 0x0, <r10=>0x0, 0x1})
ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r10, r9, <r11=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r8, 0x3b8b, &(0x7f0000000480)={0x10, 0x1, r11})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r8, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r11})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r6, 0x3b8d, &(0x7f0000000180)={0x20, r11, &(0x7f0000000040)=[{0x0, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x1}], 0xdeadbeef, 0x8, 0x5})
syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.247121234s ago: executing program 1 (id=2986):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$sock(r3, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="5f150f107ac3e05b42b4425cd3c8b40437ea0213fe93ef7b865e907684d2faa297c7ccc1adac82421e8f8951b2277448e812f3f56164a3d6f7b80a24d275f6", 0x3f}, {&(0x7f00000006c0)}], 0x3, &(0x7f0000000800)}, 0x40000)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
mount$fuse(0x0, 0x0, 0x0, 0x1810800, &(0x7f0000002140)=ANY=[])
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x5, 0x8, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x64, 0x0, 0x5, 0x29, 0x0, @loopback, @loopback}}}})
ioctl(r6, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002")
ioctl(r6, 0x8914, &(0x7f0000000080)='veth0:0')
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9})
r7 = socket(0xa, 0x3, 0x3a)
getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)

4.97675923s ago: executing program 2 (id=2987):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x88082, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x6, 0xa, 0xd, @generic=0xff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000de050000cd51caa6655870acf0a2cb44"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x7800, 0x701, 0x107, 0xff, {{0x5, 0x4, 0x2, 0x13, 0x14, 0x265, 0x3, 0x8, 0x4, 0x0, @multicast2, @empty}}}})
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)

4.667578331s ago: executing program 2 (id=2989):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0xd, &(0x7f0000000380)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}])
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.666131855s ago: executing program 3 (id=2990):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212"], 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
shutdown(r1, 0x1)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013", @ANYRESHEX=r2], 0x50}, 0x1, 0x7}, 0x404c180)

3.503792319s ago: executing program 2 (id=2991):
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003"]}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

3.324725202s ago: executing program 1 (id=2992):
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) (async)
r2 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x2)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0xffffffff, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) (async)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x2160)
set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
ftruncate(0xffffffffffffffff, 0xc17a) (async)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000700)=""/232, 0xe8}, &(0x7f0000000800), 0x10}}], 0x30}, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x862b01) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5411, 0x0)

3.056303176s ago: executing program 0 (id=2993):
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffff}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xffffffffffffff5b, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x5}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

2.927570683s ago: executing program 0 (id=2994):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000580)='[:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) (async)
close(r2)
r3 = gettid() (async)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac2(r4, &(0x7f0000002a00)={0x14, 0x0, 0x0}, &(0x7f0000002c80)={0x44, &(0x7f0000002a40)={0x0, 0x14, 0x4, "9ee802cb"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)={0x20, 0x83, 0x1, "e7"}, &(0x7f0000002c00)={0x20, 0x84, 0x1, "a0"}, 0x0}) (async, rerun: 64)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0) (async, rerun: 64)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) (async, rerun: 32)
socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x1fffe}, {0xc, 0x10}, {0xb, 0x36f647d90b79c053}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xa, 0xb}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r8, &(0x7f00000005c0)="000000e7", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async)
socket$inet_sctp(0x2, 0x1, 0x84)

2.832349276s ago: executing program 2 (id=2995):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59"})
lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0)
r4 = creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10)
socket$nl_route(0x10, 0x3, 0x0)
wait4(0x0, 0x0, 0x20000000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = semget(0x1, 0x4, 0x39c)
semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100004002cbd7000fddbdf250500000008009200", @ANYRES32, @ANYBLOB="0c000d95e57f755f", @ANYRES32, @ANYBLOB="04006180"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r6, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

1.861882597s ago: executing program 2 (id=2996):
r0 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e155038aad51c1ee170"])
keyctl$clear(0x7, 0xfffffffffffffffb)

1.762151833s ago: executing program 1 (id=2997):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
r1 = userfaultfd(0x801)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x150, 0x0, r2}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb86, 0x800, 0x7, 0x32c, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x200, 0x3, 0x157, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x2a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xb9}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r7, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
mmap$xdp(&(0x7f00002e0000/0x1000)=nil, 0x1000, 0x0, 0x10, r10, 0x80000000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1.498121663s ago: executing program 3 (id=2998):
r0 = userfaultfd(0x801)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", 0xffffffffffffffff, <r4=>0xffffffffffffffff})
close_range(r1, r2, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
unshare(0x2a020400)
unshare(0x20000)

1.398551607s ago: executing program 3 (id=2999):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r2 = io_uring_setup(0x70c4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101408d0e08060001000000010902270001010080fa0904000003e0010100070581024000000705020240000007058303100001"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="0d0e19000000000000000000ecff09ff00ffa3e2c66f2f07e85bda8700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000a000000040000000500000000000000", @ANYRES32], 0x48)
mmap(&(0x7f0000d76000/0x2000)=nil, 0x2000, 0x2000003, 0x8031, r0, 0x32d02000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020)

986.129759ms ago: executing program 1 (id=3000):
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2151, 0xc000, 0xffffffff, 0xcb})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)

158.201154ms ago: executing program 1 (id=3001):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r1, 0x8008b705, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0)

0s ago: executing program 2 (id=3002):
listen(0xffffffffffffffff, 0xa50)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x1)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4001, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4e04c0, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000580)='./cgroup.cpu/cgroup.procs\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000006200)=[{{&(0x7f0000000100)=@ax25={{0x3, @null}, [@remote, @default, @default, @rose, @null, @bcast, @rose, @default]}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/20, 0x14}], 0x1, &(0x7f00000005c0)=""/169, 0xa9}, 0x3}, {{&(0x7f0000000680)=@caif, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000e00)}, {&(0x7f0000005ac0)=""/157, 0x9d}, {&(0x7f0000000900)=""/236, 0xec}], 0x4, &(0x7f0000000a40)=""/132, 0x84}, 0x2e}, {{&(0x7f0000000b00)=@ax25={{0x3, @bcast}, [@null, @remote, @remote, @default, @default, @netrom, @rose]}, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000800)=""/147, 0x93}, 0x1ff}, {{&(0x7f0000000d80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e00)=""/6, 0x6}, {&(0x7f0000000e40)=""/239, 0xef}, {&(0x7f0000000f40)=""/65, 0x41}], 0x3, &(0x7f0000001000)=""/185, 0xb9}, 0x1}, {{&(0x7f00000035c0)=@alg, 0x80, &(0x7f0000001480)=[{&(0x7f0000001100)=""/22, 0x16}, {&(0x7f0000001180)=""/3, 0x3}, {&(0x7f00000011c0)=""/163, 0xa3}, {&(0x7f0000001280)=""/70, 0x46}, {&(0x7f0000001300)=""/128, 0x80}, {&(0x7f0000001380)=""/17, 0x11}, {&(0x7f00000013c0)=""/190, 0xbe}], 0x7, &(0x7f0000000b80)=""/197, 0xc5}, 0x3}, {{&(0x7f0000001600)=@caif=@util, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000540)=""/16, 0x10}, {&(0x7f00000016c0)}, {&(0x7f0000001700)=""/203, 0xcb}, {&(0x7f0000001800)=""/125, 0x7d}, {&(0x7f0000001880)=""/174, 0xae}, {&(0x7f0000001940)=""/35, 0x23}, {&(0x7f0000001500)=""/136, 0x88}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/213, 0xd5}], 0x9, &(0x7f0000002c00)=""/128, 0x80}, 0xffff9b8e}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/208, 0xd0}, {&(0x7f0000001980)=""/158, 0x9e}, {&(0x7f0000002e80)=""/99, 0x63}, {&(0x7f0000002f00)=""/129, 0x81}, {&(0x7f00000010c0)=""/27, 0x1b}, {&(0x7f0000003000)=""/198, 0xc6}, {&(0x7f0000003100)=""/235, 0xeb}], 0x7}, 0x9}, {{&(0x7f0000003280)=@qipcrtr, 0x80, &(0x7f0000003740)=[{&(0x7f0000003300)=""/214, 0xd6}, {&(0x7f0000000d40)=""/38, 0x26}, {&(0x7f0000003440)=""/176, 0xb0}, {&(0x7f0000003500)=""/149, 0x95}, {&(0x7f0000000c80)=""/178, 0xb2}, {&(0x7f0000003640)=""/155, 0x9b}], 0x6, &(0x7f00000037c0)=""/132, 0x84}, 0x6}, {{&(0x7f0000003880)=@ax25={{0x3, @rose}, [@netrom, @default, @rose, @default, @default, @default, @rose]}, 0x80, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000003900)=""/202, 0xca}, {&(0x7f0000001680)=""/44, 0x2c}, {&(0x7f0000005d00)=""/139, 0x8b}, {&(0x7f0000005dc0)=""/165, 0xa5}, {&(0x7f0000005e80)=""/19, 0x13}], 0x5, &(0x7f0000005f40)=""/3, 0x3}, 0x6}, {{&(0x7f0000005f80)=@generic, 0x80, &(0x7f0000006100)=[{&(0x7f0000006000)=""/241, 0xf1}], 0x1, &(0x7f0000003a00)=""/200, 0xc8}, 0x9}], 0xb, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x408102, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x2, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x8)
execveat$binfmt(r1, r2, &(0x7f00000003c0)={[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='(:\x00']}, &(0x7f0000000500)={[&(0x7f0000000400)='z}\'\\-\x00', &(0x7f0000000440)='\\\\\x00', &(0x7f0000000480)='/dev/snd/midiC#D#\x00', &(0x7f00000004c0)='^:,\x00']}, 0x1000)

kernel console output (not intermixed with test programs):

equeue, screwing up backlog
[  627.322915][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.349229][T15306] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  627.775096][   T31] audit: type=1326 audit(1790926220.054:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15736 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3f99e159 code=0x7ffc0000
[  627.775330][   T31] audit: type=1326 audit(1790926220.054:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15736 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3f99e159 code=0x7ffc0000
[  627.781061][   T31] audit: type=1326 audit(1790926220.064:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15736 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff3f99e159 code=0x7ffc0000
[  627.795759][   T31] audit: type=1326 audit(1790926220.064:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15736 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3f99e159 code=0x7ffc0000
[  627.826456][   T31] audit: type=1326 audit(1790926220.084:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15736 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3f99e159 code=0x7ffc0000
[  628.039370][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  628.039599][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  628.040000][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.325512][T15306] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[  628.415520][ T5802] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  628.446665][T13139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.475962][T15306] usb 3-1: Invalid ep0 maxpacket: 64
[  628.565535][ T5802] usb 2-1: Using ep0 maxpacket: 8
[  628.566311][ T5802] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  628.567342][ T5802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  628.567367][ T5802] usb 2-1: config 0 has no interfaces?
[  628.569428][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.569443][ T5802] usb 2-1: Product: syz
[  628.569451][ T5802] usb 2-1: Manufacturer: syz
[  628.569459][ T5802] usb 2-1: SerialNumber: syz
[  628.605569][T15306] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  628.638481][ T5802] usb 2-1: config 0 descriptor??
[  628.757524][T15306] usb 3-1: Invalid ep0 maxpacket: 64
[  628.760087][T15306] usb usb3-port1: attempt power cycle
[  629.135536][T15306] usb 3-1: new low-speed USB device number 41 using dummy_hcd
[  629.159942][T15306] usb 3-1: Invalid ep0 maxpacket: 64
[  629.285630][T15306] usb 3-1: new low-speed USB device number 42 using dummy_hcd
[  629.306229][T15306] usb 3-1: Invalid ep0 maxpacket: 64
[  629.306459][T15306] usb usb3-port1: unable to enumerate USB device
[  629.556023][ T1275] net_ratelimit: 1 callbacks suppressed
[  629.556046][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.556222][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.028111][T15763] C: renamed from veth1_to_team (while UP)
[  630.030991][T15763] netlink: 'syz.4.2731': attribute type 3 has an invalid length.
[  630.031005][T15763] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2731'.
[  630.031014][T15763] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  630.397260][T15767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.397550][T15767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.400629][T15767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.402640][T15767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.422755][T15767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.423092][T15767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.460276][T15767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.460599][T15767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.666149][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.666358][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.764155][T15777] loop0: detected capacity change from 0 to 6
[  630.780103][T15777] Dev loop0: unable to read RDB block 6
[  630.780146][T15777]  loop0: unable to read partition table
[  630.780329][T15777] loop0: partition table beyond EOD, truncated
[  630.780347][T15777] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  630.964338][T15781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  631.221605][ T7357] usb 2-1: USB disconnect, device number 53
[  631.608948][   T31] kauditd_printk_skb: 13 callbacks suppressed
[  631.608962][   T31] audit: type=1326 audit(1790926223.894:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.609895][   T31] audit: type=1326 audit(1790926223.894:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.610559][   T31] audit: type=1326 audit(1790926223.894:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.610876][   T31] audit: type=1326 audit(1790926223.894:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.612043][   T31] audit: type=1326 audit(1790926223.894:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.612813][   T31] audit: type=1326 audit(1790926223.894:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.612936][   T31] audit: type=1326 audit(1790926223.894:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.613101][   T31] audit: type=1326 audit(1790926223.894:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.614787][   T31] audit: type=1326 audit(1790926223.894:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.615154][   T31] audit: type=1326 audit(1790926223.894:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.1.2742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  631.674818][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'.
[  631.674845][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'.
[  631.674863][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'.
[  631.826143][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.826393][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.925542][ T7343] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  632.075616][ T7343] usb 3-1: Using ep0 maxpacket: 8
[  632.076208][ T7343] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  632.077464][ T7343] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  632.077516][ T7343] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  632.077543][ T7343] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  632.077569][ T7343] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  632.077592][ T7343] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  632.077605][ T7343] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  632.077628][ T7343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.299740][T15796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.300089][T15796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.305095][ T7343] usb 3-1: GET_CAPABILITIES returned 0
[  632.305132][ T7343] usbtmc 3-1:16.0: can't read capabilities
[  632.559803][ T7357] usb 3-1: USB disconnect, device number 43
[  632.936016][T13139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.936246][T13139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.975600][ T7343] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  633.137749][ T7343] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  633.141257][ T7343] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  633.141285][ T7343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  633.145248][ T7343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.145273][ T7343] usb 2-1: Product: syz
[  633.145288][ T7343] usb 2-1: Manufacturer: syz
[  633.145303][ T7343] usb 2-1: SerialNumber: syz
[  633.200181][ T7343] usb 2-1: config 0 descriptor??
[  633.217127][ T7343] gspca_main: sunplus-2.14.0 probing 055f:c630
[  633.565499][ T7342] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  633.605646][T15306] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  633.712700][T15821] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  633.726023][ T7342] usb 5-1: Using ep0 maxpacket: 8
[  633.729086][ T7342] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  633.731791][ T7342] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  633.731815][ T7342] usb 5-1: config 0 has no interfaces?
[  633.769017][ T7342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.769048][ T7342] usb 5-1: Product: syz
[  633.769063][ T7342] usb 5-1: Manufacturer: syz
[  633.769078][ T7342] usb 5-1: SerialNumber: syz
[  633.788188][T15306] usb 3-1: Using ep0 maxpacket: 32
[  633.789443][T15306] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  633.795286][T15306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  633.795317][T15306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  633.795444][T15306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.846829][ T7342] usb 5-1: config 0 descriptor??
[  633.853721][T15306] usb 3-1: config 0 descriptor??
[  633.889525][T15824] netlink: 'syz.0.2752': attribute type 2 has an invalid length.
[  634.125686][ T5802] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  634.276922][ T5802] usb 1-1: not running at top speed; connect to a high speed hub
[  634.276960][ T5802] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  634.278338][ T5802] usb 1-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config
[  634.278364][ T5802] usb 1-1: config 65 has 2 interfaces, different from the descriptor's value: 3
[  634.280740][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.280765][ T5802] usb 1-1: Product: syz
[  634.280780][ T5802] usb 1-1: Manufacturer: syz
[  634.280795][ T5802] usb 1-1: SerialNumber: syz
[  634.348122][ T5802] usb 1-1: 0:2 : does not exist
[  634.348208][ T5802] usb 1-1: unit 130 not found!
[  634.366606][T15825] tipc: New replicast peer: 255.255.255.255
[  634.367291][T15825] tipc: Enabled bearer <udp:syz2>, priority 10
[  634.565972][ T7343] gspca_sunplus: reg_r err -110
[  634.566049][ T7343] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  634.567843][ T5802] usb 1-1: USB disconnect, device number 32
[  634.632193][ T9855] udevd[9855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  634.653550][    C1] net_ratelimit: 4 callbacks suppressed
[  634.653570][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  634.785991][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  634.925813][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  635.066148][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  635.130732][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2754'.
[  635.189881][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.190116][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.212524][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  635.256339][T15834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2755'.
[  635.345682][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  635.485904][ T5802] tipc: Node number set to 2130706433
[  635.625880][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  635.851159][ T7343] usb 2-1: USB disconnect, device number 54
[  635.895759][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  635.934015][T15838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  635.935315][T15837] tipc: Resetting bearer <eth:syzkaller0>
[  636.017233][T15837] tipc: Disabling bearer <eth:syzkaller0>
[  636.298468][T15306] usbhid 3-1:0.0: can't add hid device: -71
[  636.298567][T15306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  636.314309][T15306] usb 3-1: USB disconnect, device number 44
[  636.371960][ T7343] usb 5-1: USB disconnect, device number 69
[  636.381753][ T5802] usb 2-1: new low-speed USB device number 55 using dummy_hcd
[  636.410243][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2759'.
[  636.538036][ T5802] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  636.542006][ T5802] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30
[  636.542033][ T5802] usb 2-1: config 0 interface 0 altsetting 8 has an endpoint descriptor with address 0x47, changing to 0x7
[  636.542048][ T5802] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x7 has an invalid bInterval 115, changing to 4
[  636.542070][ T5802] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x7 has invalid maxpacket 14694, setting to 0
[  636.542083][ T5802] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  636.542097][ T5802] usb 2-1: config 0 interface 0 has no altsetting 0
[  636.542117][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.544580][ T5802] usb 2-1: config 0 descriptor??
[  636.635155][ T5802] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  636.796361][ T7343] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  636.796918][ T7342] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  636.945596][ T7342] usb 3-1: Using ep0 maxpacket: 16
[  636.946239][ T7343] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  636.946483][ T7342] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  636.947382][ T7342] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  636.947406][ T7342] usb 3-1: config 0 has no interface number 0
[  636.947441][ T7342] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  636.947455][ T7342] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  636.948887][ T7342] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  636.948912][ T7342] usb 3-1: Product: syz
[  636.948926][ T7342] usb 3-1: SerialNumber: syz
[  636.949722][ T7343] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  636.949737][ T7343] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  636.953919][ T7343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.953953][ T7343] usb 5-1: Product: syz
[  636.953968][ T7343] usb 5-1: Manufacturer: syz
[  636.953983][ T7343] usb 5-1: SerialNumber: syz
[  636.963871][ T7342] usb 3-1: config 0 descriptor??
[  636.974639][ T7342] cm109 3-1:0.8: invalid payload size 0, expected 4
[  637.004225][ T7342] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input44
[  637.189136][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  637.191005][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  637.191201][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  637.191472][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  637.191717][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  637.191821][ T7342] usb 3-1: USB disconnect, device number 45
[  637.191919][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  637.191937][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  637.219430][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.224990][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.267760][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.268231][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.295056][ T7342] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  637.297519][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.298027][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.339374][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.339951][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.344729][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.345141][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.404442][ T7343] usb 5-1: Limiting number of CPorts to U8_MAX
[  637.431743][    C0] usb 5-1: check_urb_status: overflow actual length is 128
[  637.431825][    C0] usb 5-1: arpc in-urb error -75 (dropped)
[  637.860369][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'.
[  637.995818][ T7343] usb 5-1: failed to send ARPC request 1: -110
[  637.995928][ T7343] usb 5-1: failed to execute ARPC: -110
[  637.995946][ T7343] usb 5-1: failed to set connected state for cport 0: -110
[  637.995960][ T7343] greybus greybus1: 0/0:0: failed to set connected state: -110
[  637.999530][ T7343] usb 5-1: failed to send ARPC request 3: -32
[  637.999756][ T7343] usb 5-1: failed to execute ARPC: -32
[  637.999773][ T7343] usb 5-1: failed to clear cport 0: -32
[  637.999790][ T7343] greybus greybus1: 0/0:0: failed to clear host cport: -32
[  638.024788][ T7343] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110
[  638.795527][ T5802] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  638.945559][ T5802] usb 3-1: Using ep0 maxpacket: 32
[  638.947763][ T5802] usb 3-1: unable to get BOS descriptor or descriptor too short
[  638.947813][ T5802] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  638.948714][ T5802] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  638.948738][ T5802] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  638.948795][ T5802] usb 3-1: config 14 has no interface number 0
[  638.948813][ T5802] usb 3-1: config 14 has no interface number 1
[  638.948858][ T5802] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  638.948872][ T5802] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  638.948885][ T5802] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  638.948900][ T5802] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  638.948915][ T5802] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  638.948928][ T5802] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  638.948942][ T5802] usb 3-1: config 14 interface 57 has no altsetting 0
[  638.948952][ T5802] usb 3-1: config 14 interface 228 has no altsetting 0
[  638.950796][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.950821][ T5802] usb 3-1: Product: syz
[  638.950837][ T5802] usb 3-1: Manufacturer: syz
[  638.950851][ T5802] usb 3-1: SerialNumber: syz
[  639.147933][ T7343] usb 2-1: USB disconnect, device number 55
[  639.178627][ T7357] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  639.326181][ T7357] usb 1-1: Using ep0 maxpacket: 8
[  639.326894][ T7357] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  639.328057][ T7357] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.328082][ T7357] usb 1-1: config 0 has no interfaces?
[  639.330528][ T7357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.330552][ T7357] usb 1-1: Product: syz
[  639.330567][ T7357] usb 1-1: Manufacturer: syz
[  639.330582][ T7357] usb 1-1: SerialNumber: syz
[  639.334643][ T7357] usb 1-1: config 0 descriptor??
[  639.401995][ T5802] legousbtower 3-1:14.57: interrupt endpoints not found
[  639.458472][ T7343] usb 5-1: USB disconnect, device number 70
[  639.605456][T15881] xt_hashlimit: max too large, truncated to 1048576
[  639.615223][ T5802] legousbtower 3-1:14.228: get version request failed: -71
[  639.615477][ T5802] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71
[  639.651394][ T5802] usb 3-1: USB disconnect, device number 46
[  639.696497][   T13] net_ratelimit: 11 callbacks suppressed
[  639.696512][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.696653][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.119499][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.121869][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.297597][T15907] vlan0: entered promiscuous mode
[  640.297614][T15907] bond0: entered promiscuous mode
[  640.297622][T15907] bond_slave_0: entered promiscuous mode
[  640.297783][T15907] bond_slave_1: entered promiscuous mode
[  640.585925][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  640.596138][ T7343] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  640.694579][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'.
[  640.754045][T15913] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2777'.
[  640.770897][T15913] bridge0: port 3(vlan2) entered disabled state
[  640.778404][ T7343] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  640.779529][ T7343] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  640.779553][ T7343] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  640.779573][ T7343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  640.779615][ T7343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  640.779684][ T7343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  640.781301][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  640.781324][ T7343] usb 3-1: Product: syz
[  640.781338][ T7343] usb 3-1: Manufacturer: syz
[  640.807382][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.807616][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.853390][ T7343] cdc_wdm 3-1:1.0: skipping garbage
[  640.853411][ T7343] cdc_wdm 3-1:1.0: skipping garbage
[  640.876477][ T7343] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  640.876501][ T7343] cdc_wdm 3-1:1.0: Unknown control protocol
[  640.962455][T15918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  641.344791][    C0] cdc_wdm 3-1:1.0: Unexpected error -71
[  641.346039][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  641.346117][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  641.346393][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  641.346413][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  641.346665][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  641.346685][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  641.346910][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  641.346929][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  641.347144][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  641.347162][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  641.347246][ T7343] usb 3-1: USB disconnect, device number 47
[  641.347363][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  641.347381][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  641.347397][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  641.625728][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  641.873628][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2784'.
[  641.892334][ T7355] usb 1-1: USB disconnect, device number 33
[  641.926257][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.926478][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.515696][ T7355] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  642.645987][ T7355] usb 1-1: device descriptor read/64, error -71
[  642.665951][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  642.885563][ T7355] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  643.018042][ T7355] usb 1-1: device descriptor read/64, error -71
[  643.035751][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.125800][ T7355] usb usb1-port1: attempt power cycle
[  643.238856][T15977] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  643.335538][ T5802] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  643.465559][ T7355] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  643.485542][ T5802] usb 2-1: Using ep0 maxpacket: 8
[  643.486373][ T7355] usb 1-1: device descriptor read/8, error -71
[  643.486454][ T5802] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  643.487511][ T5802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  643.487535][ T5802] usb 2-1: config 0 has no interfaces?
[  643.489636][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.489660][ T5802] usb 2-1: Product: syz
[  643.489674][ T5802] usb 2-1: Manufacturer: syz
[  643.489718][ T5802] usb 2-1: SerialNumber: syz
[  643.559942][ T5802] usb 2-1: config 0 descriptor??
[  643.725706][ T7355] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  643.747471][ T7355] usb 1-1: device descriptor read/8, error -71
[  643.856109][ T7355] usb usb1-port1: unable to enumerate USB device
[  644.232069][T15995] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2801'.
[  644.232084][T15995] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2801'.
[  644.232092][T15995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2801'.
[  644.745908][    C1] net_ratelimit: 5 callbacks suppressed
[  644.745933][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  645.297311][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.297530][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.452285][T16010] syzkaller0: entered promiscuous mode
[  645.452310][T16010] syzkaller0: entered allmulticast mode
[  645.705531][ T7355] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  645.707024][ T7343] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  645.755580][ T7342] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  645.785699][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  645.855524][ T7355] usb 1-1: Using ep0 maxpacket: 8
[  645.855856][ T7343] usb 5-1: device descriptor read/64, error -71
[  645.856289][ T7355] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=e9.c3
[  645.856314][ T7355] usb 1-1: too many configurations: 129, using maximum allowed: 8
[  645.867025][ T7355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.867053][ T7355] usb 1-1: Product: syz
[  645.867068][ T7355] usb 1-1: Manufacturer: syz
[  645.867082][ T7355] usb 1-1: SerialNumber: syz
[  645.919124][ T7342] usb 3-1: unable to get BOS descriptor or descriptor too short
[  645.919177][ T7342] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[  645.920517][ T7342] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32
[  645.920548][ T7342] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  645.922790][ T7342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.922806][ T7342] usb 3-1: Product: syz
[  645.922814][ T7342] usb 3-1: Manufacturer: syz
[  645.922822][ T7342] usb 3-1: SerialNumber: syz
[  645.975963][T16015] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  646.084003][ T7355] gspca_main: 0734:043b too many config
[  646.090717][ T7355] usb 1-1: USB disconnect, device number 38
[  646.121995][T15306] usb 2-1: USB disconnect, device number 56
[  646.134469][ T7343] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  646.266013][T16020] fuse: Bad value for 'user_id'
[  646.266029][T16020] fuse: Bad value for 'user_id'
[  646.288225][ T7343] usb 5-1: device descriptor read/64, error -71
[  646.399553][ T7343] usb usb5-port1: attempt power cycle
[  646.420441][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.420704][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.626262][T16028] syzkaller0: entered promiscuous mode
[  646.626286][T16028] syzkaller0: entered allmulticast mode
[  646.734964][T16031] use of bytesused == 0 is deprecated and will be removed in the future,
[  646.734981][T16031] use the actual size instead.
[  646.751542][ T7343] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  646.776906][ T7343] usb 5-1: device descriptor read/8, error -71
[  646.825809][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  647.016232][ T7343] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  647.036375][ T7343] usb 5-1: device descriptor read/8, error -71
[  647.071195][ T7342] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  647.071250][ T7342] usb 3-1: MIDIStreaming interface descriptor not found
[  647.151075][ T7342] usb 3-1: USB disconnect, device number 48
[  647.163818][ T7343] usb usb5-port1: unable to enumerate USB device
[  647.212195][T16035] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  647.267273][ T9814] udevd[9814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  647.516257][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.539876][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.571494][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.598587][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.788274][ T7342] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  647.865683][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  647.941751][ T7342] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  647.961942][ T7342] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  647.990606][ T7342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  647.990625][ T7342] usb 3-1: Product: syz
[  647.990633][ T7342] usb 3-1: Manufacturer: syz
[  647.990641][ T7342] usb 3-1: SerialNumber: syz
[  648.835526][T15306] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  648.845528][ T7355] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  648.988318][T15306] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  648.991422][T15306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.996126][ T7355] usb 2-1: Using ep0 maxpacket: 8
[  648.996845][ T7355] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  649.023905][ T7355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  649.023944][ T7355] usb 2-1: config 0 has no interfaces?
[  649.040759][ T7355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.040786][ T7355] usb 2-1: Product: syz
[  649.040801][ T7355] usb 2-1: Manufacturer: syz
[  649.040815][ T7355] usb 2-1: SerialNumber: syz
[  649.045543][ T7355] usb 2-1: config 0 descriptor??
[  649.086205][T15306] usb 5-1: config 0 descriptor??
[  649.504371][T15306] usbhid 5-1:0.0: can't add hid device: -71
[  649.504507][T15306] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  649.523877][T15306] usb 5-1: USB disconnect, device number 75
[  649.820379][T16069] ucma_write: process 1627 (syz.3.2824) changed security contexts after opening file descriptor, this is not allowed.
[  649.945694][    C1] net_ratelimit: 5 callbacks suppressed
[  649.945715][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  650.538073][T16083] loop0: detected capacity change from 0 to 6
[  650.580336][T16083] Dev loop0: unable to read RDB block 6
[  650.580382][T16083]  loop0: unable to read partition table
[  650.580626][T16083] loop0: partition table beyond EOD, truncated
[  650.580697][T16083] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  650.633975][ T7342] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  650.652981][ T7342] usb 3-1: USB disconnect, device number 49
[  650.681064][ T7342] usblp0: removed
[  650.835764][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.836062][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.985995][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  650.995178][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'.
[  651.405527][ T7355] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  651.555535][ T7355] usb 3-1: Using ep0 maxpacket: 8
[  651.556577][ T7355] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  651.558620][ T7355] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  651.558645][ T7355] usb 3-1: config 0 has no interface number 0
[  651.558687][ T7355] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  651.558724][ T7355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.562557][ T7355] usb 3-1: config 0 descriptor??
[  651.575870][ T7355] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  651.663256][ T7357] usb 2-1: USB disconnect, device number 57
[  651.936147][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.936363][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.939077][ T7357] usb 3-1: USB disconnect, device number 50
[  652.025672][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  652.617791][T16122] loop0: detected capacity change from 0 to 6
[  652.636769][T16120] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  652.701118][T16122] Dev loop0: unable to read RDB block 6
[  652.701161][T16122]  loop0: unable to read partition table
[  652.701350][T16122] loop0: partition table beyond EOD, truncated
[  652.701383][T16122] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  652.919177][T16124] syzkaller0: left promiscuous mode
[  652.919192][T16124] syzkaller0: left allmulticast mode
[  652.922191][T16124] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  653.007367][ T7342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.048845][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.134979][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'.
[  653.266502][ T5802] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  653.435500][ T5802] usb 3-1: Using ep0 maxpacket: 32
[  653.438215][ T5802] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[  653.439247][ T5802] usb 3-1: config 123 interface 0 has no altsetting 0
[  653.450323][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  653.452141][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.452165][ T5802] usb 3-1: Product: syz
[  653.452178][ T5802] usb 3-1: Manufacturer: syz
[  653.452193][ T5802] usb 3-1: SerialNumber: syz
[  653.467269][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  653.468339][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  653.471371][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  653.472252][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  653.743885][ T5802] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[  653.799915][ T5802] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  653.800351][ T5802] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[  653.800401][ T5802] usb 3-1: media controller created
[  653.860354][ T5802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  653.917033][ T9659] syz_tun (unregistering): left allmulticast mode
[  653.919827][ T5802] set interface failed
[  653.920387][ T5802] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  653.920414][ T5802] error writing reg: 0xff, val: 0x00
[  654.042590][T16152] netlink: 'syz.4.2848': attribute type 10 has an invalid length.
[  654.136073][ T5802] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  654.172687][ T5802] usb 3-1: USB disconnect, device number 51
[  654.496125][T13137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  654.881701][T13137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  654.896307][T15306] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  655.001790][T13137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.056313][T15306] usb 3-1: Using ep0 maxpacket: 32
[  655.057093][T15306] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  655.058407][T15306] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.058437][T15306] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  655.058464][T15306] usb 3-1: config 0 interface 0 has no altsetting 0
[  655.058496][T15306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.061366][T15306] usb 3-1: config 0 descriptor??
[  655.145902][    C1] net_ratelimit: 6 callbacks suppressed
[  655.145917][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  655.253971][T13137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.286485][T13139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.286702][T13139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.410581][T16142] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.410695][T16142] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.410840][T16142] bridge_slave_0: entered allmulticast mode
[  655.417457][T16142] bridge_slave_0: entered promiscuous mode
[  655.423870][T16142] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.424005][T16142] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.425021][T16142] bridge_slave_1: entered allmulticast mode
[  655.432290][T16142] bridge_slave_1: entered promiscuous mode
[  655.477083][T16159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.479306][T16159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.507041][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507078][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507105][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507131][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507158][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507184][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507210][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507237][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507262][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.507297][T15306] elo 0003:04E7:0009.001F: unknown main item tag 0x0
[  655.513093][T15306] elo 0003:04E7:0009.001F: hidraw0: USB HID vd.8f Device [HID 04e7:0009] on usb-dummy_hcd.2-1/input0
[  655.539705][T16142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  655.551670][T16142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.625582][ T5618] Bluetooth: hci5: command tx timeout
[  655.689188][T15306] usb 3-1: USB disconnect, device number 52
[  655.814245][T16142] team0: Port device team_slave_0 added
[  655.842912][T16142] team0: Port device team_slave_1 added
[  655.924593][T13137] bridge0: port 1(batadv0) entered disabled state
[  655.937406][T13137] dvmrp6: left allmulticast mode
[  656.168721][T13137] batman_adv: batadv0: Removing interface: gretap1
[  656.185864][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  656.368796][T16168] xt_CT: No such helper "snmp_trap"
[  656.400076][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.400317][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.485014][T13137] bond1 (unregistering): Released all slaves
[  656.510213][T13137] bond0 (unregistering): Released all slaves
[  656.549470][T13137] bond2 (unregistering): Released all slaves
[  656.572363][T16142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.572381][T16142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.572403][T16142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.646265][T16142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.646283][T16142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.646309][T16142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.785062][T16176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  656.905331][T16174] tipc: Resetting bearer <eth:syzkaller0>
[  656.990267][T16174] tipc: Disabling bearer <eth:syzkaller0>
[  657.083124][T16142] hsr_slave_0: entered promiscuous mode
[  657.089075][T16142] hsr_slave_1: entered promiscuous mode
[  657.089845][T16142] debugfs: 'hsr0' already exists in 'hsr'
[  657.089865][T16142] Cannot create hsr debugfs directory
[  657.090035][T13137] ovs-system: left promiscuous mode
[  657.225826][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  657.427384][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'.
[  657.434921][T13137] tipc: Disabling bearer <udp:syz2>
[  657.435184][T13137] tipc: Disabling bearer <udp:syz0>
[  657.435352][T13137] tipc: Left network mode
[  657.510771][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.511022][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.659336][T16204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.663576][T16204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.664564][T16204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.674882][T16204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.680840][T16204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.690108][T16204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.703220][T16204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.703634][T16204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.708915][ T5618] Bluetooth: hci5: command tx timeout
[  657.711754][T16204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.712816][T16204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.905498][T15306] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  657.921102][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2859'.
[  657.957324][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  658.065991][T15306] usb 5-1: Using ep0 maxpacket: 8
[  658.067923][T15306] usb 5-1: New USB device found, idVendor=12d1, idProduct=9cf2, bcdDevice=b7.b0
[  658.069033][T15306] usb 5-1: config 7 has an invalid interface number: 219 but max is 1
[  658.069059][T15306] usb 5-1: config 7 has an invalid interface number: 173 but max is 1
[  658.069079][T15306] usb 5-1: config 7 has no interface number 0
[  658.069096][T15306] usb 5-1: config 7 has no interface number 1
[  658.069139][T15306] usb 5-1: config 7 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  658.069160][T15306] usb 5-1: config 7 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  658.069193][T15306] usb 5-1: config 7 interface 173 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  658.069218][T15306] usb 5-1: config 7 interface 173 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64
[  658.069244][T15306] usb 5-1: config 7 interface 173 altsetting 9 has a duplicate endpoint with address 0xC, skipping
[  658.069266][T15306] usb 5-1: config 7 interface 173 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  658.069291][T15306] usb 5-1: config 7 interface 173 altsetting 9 endpoint 0xF has an invalid bInterval 248, changing to 11
[  658.069317][T15306] usb 5-1: config 7 interface 173 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[  658.069341][T15306] usb 5-1: config 7 interface 173 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  658.069363][T15306] usb 5-1: config 7 interface 173 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[  658.069396][T15306] usb 5-1: config 7 interface 173 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[  658.069417][T15306] usb 5-1: config 7 interface 173 altsetting 9 endpoint 0x88 has invalid maxpacket 1024, setting to 64
[  658.069442][T15306] usb 5-1: config 7 interface 173 altsetting 9 has a duplicate endpoint with address 0xB, skipping
[  658.069493][T15306] usb 5-1: config 7 interface 219 has no altsetting 0
[  658.069511][T15306] usb 5-1: config 7 interface 173 has no altsetting 0
[  658.074092][T15306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.074118][T15306] usb 5-1: Product: х
[  658.074132][T15306] usb 5-1: Manufacturer: 颌肪۞蚛㦁걲ﴏ⭞觽ⳫИ錋꼅⏛鄿纶⊗歉뜗頪▊ﮣ혳쟢쇡ﳬ়䋢쏂騜ᘆ綼祫붗⍛㑢ￚ關侈瑝ꢈ度䳎檪㥄冨芽ﲄሕ攠
[  658.074153][T15306] usb 5-1: SerialNumber: syz
[  658.120478][ T7344] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  658.266667][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  658.320597][ T7355] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  658.322135][T16207] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  658.377746][ T7344] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  658.379082][ T7344] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  658.379113][ T7344] usb 2-1: config 0 interface 0 has no altsetting 0
[  658.379169][ T7344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.434487][ T7344] usb 2-1: config 0 descriptor??
[  658.485699][ T7355] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  658.493881][ T7355] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.493909][ T7355] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  658.493968][ T7355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.500083][ T7355] usb 3-1: config 0 descriptor??
[  658.503476][ T7355] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  658.503520][ T7355] dvb-usb: bulk message failed: -22 (3/0)
[  658.513125][ T7355] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  658.514876][ T7355] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  658.514925][ T7355] usb 3-1: media controller created
[  658.520134][ T7355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  658.538063][ T7355] dvb-usb: bulk message failed: -22 (6/0)
[  658.541093][ T7355] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  658.548658][ T7355] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45
[  658.556325][ T7355] dvb-usb: schedule remote query interval to 150 msecs.
[  658.556349][ T7355] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  658.627288][T15306] option 5-1:7.219: GSM modem (1-port) converter detected
[  658.713076][T15306] usb 5-1: USB disconnect, device number 76
[  658.715692][ T7355] dvb-usb: bulk message failed: -22 (1/0)
[  658.715722][ T7355] dvb-usb: error while querying for an remote control event.
[  658.741912][T15306] option 5-1:7.219: device disconnected
[  658.875558][ T7355] dvb-usb: bulk message failed: -22 (1/0)
[  658.875591][ T7355] dvb-usb: error while querying for an remote control event.
[  658.962405][T13137] hsr_slave_0: left promiscuous mode
[  658.963963][T13137] hsr_slave_1: left promiscuous mode
[  659.035740][ T7355] dvb-usb: bulk message failed: -22 (1/0)
[  659.035791][ T7355] dvb-usb: error while querying for an remote control event.
[  659.195756][ T7355] dvb-usb: bulk message failed: -22 (1/0)
[  659.195794][ T7355] dvb-usb: error while querying for an remote control event.
[  659.360567][ T7355] dvb-usb: bulk message failed: -22 (1/0)
[  659.360603][ T7355] dvb-usb: error while querying for an remote control event.
[  659.387726][T15306] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  659.526229][ T7355] dvb-usb: bulk message failed: -22 (1/0)
[  659.526259][ T7355] dvb-usb: error while querying for an remote control event.
[  659.536221][T15306] usb 5-1: Using ep0 maxpacket: 8
[  659.542559][T15306] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  659.556369][T16228] syzkaller0: entered promiscuous mode
[  659.556392][T16228] syzkaller0: entered allmulticast mode
[  659.556458][T15306] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  659.556478][T15306] usb 5-1: config 0 has no interfaces?
[  659.601391][T15306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.601420][T15306] usb 5-1: Product: syz
[  659.601460][T15306] usb 5-1: Manufacturer: syz
[  659.601475][T15306] usb 5-1: SerialNumber: syz
[  659.620030][T15306] usb 5-1: config 0 descriptor??
[  659.631502][T16235] batman_adv: batadv0: Adding interface: gretap0
[  659.631521][T16235] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.633747][T16235] batman_adv: batadv0: Interface activated: gretap0
[  659.675125][ T7344] usb 2-1: string descriptor 0 read error: -71
[  659.682703][ T7344] uclogic 0003:5543:004D.0020: failed retrieving string descriptor #200: -71
[  659.682776][ T7344] uclogic 0003:5543:004D.0020: failed retrieving pen parameters: -71
[  659.682793][ T7344] uclogic 0003:5543:004D.0020: failed probing pen v2 parameters: -71
[  659.682843][ T7344] uclogic 0003:5543:004D.0020: failed probing parameters: -71
[  659.682950][ T7344] uclogic 0003:5543:004D.0020: probe with driver uclogic failed with error -71
[  659.732598][ T7344] usb 2-1: USB disconnect, device number 58
[  659.733373][ T7355] dvb-usb: bulk message failed: -22 (1/0)
[  659.733397][ T7355] dvb-usb: error while querying for an remote control event.
[  659.786621][ T5618] Bluetooth: hci5: command tx timeout
[  659.797637][ T7355] usb 3-1: USB disconnect, device number 53
[  659.888919][ T7355] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  660.345893][    C1] net_ratelimit: 5 callbacks suppressed
[  660.345919][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  660.511223][T13137] IPVS: stop unused estimator thread 0...
[  660.528643][T16261] FAULT_INJECTION: forcing a failure.
[  660.528643][T16261] name failslab, interval 1, probability 0, space 0, times 0
[  660.528707][T16261] CPU: 0 UID: 0 PID: 16261 Comm: syz.2.2865 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.528735][T16261] Tainted: [L]=SOFTLOCKUP
[  660.528744][T16261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  660.528756][T16261] Call Trace:
[  660.528767][T16261]  <TASK>
[  660.528776][T16261]  dump_stack_lvl+0xe8/0x150
[  660.528815][T16261]  should_fail_ex+0x410/0x560
[  660.528848][T16261]  should_failslab+0xa8/0x100
[  660.528879][T16261]  __kmalloc_noprof+0xfe/0x720
[  660.528902][T16261]  ? tomoyo_encode+0x2ad/0x570
[  660.528991][T16261]  ? tomoyo_encode+0x2ad/0x570
[  660.529022][T16261]  tomoyo_encode+0x2ad/0x570
[  660.529055][T16261]  tomoyo_realpath_from_path+0x5fa/0x640
[  660.529090][T16261]  ? tomoyo_path_number_perm+0x219/0x5f0
[  660.529112][T16261]  tomoyo_path_number_perm+0x246/0x5f0
[  660.529134][T16261]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  660.529163][T16261]  ? __lock_acquire+0x747/0x2de0
[  660.529197][T16261]  ? hook_file_ioctl+0x1f2/0x600
[  660.529237][T16261]  ? __fget_files+0x2a/0x420
[  660.529265][T16261]  ? __fget_files+0x2a/0x420
[  660.529288][T16261]  ? __fget_files+0x3a2/0x420
[  660.529312][T16261]  ? __fget_files+0x2a/0x420
[  660.529361][T16261]  security_file_ioctl+0xc3/0x2a0
[  660.529389][T16261]  __se_sys_ioctl+0x47/0x170
[  660.529415][T16261]  do_syscall_64+0x166/0x520
[  660.529446][T16261]  ? trace_irq_disable+0x3b/0x140
[  660.529469][T16261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.529489][T16261]  ? clear_bhb_loop+0x70/0xc0
[  660.529514][T16261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.529535][T16261] RIP: 0033:0x7f85cf39e159
[  660.529554][T16261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.529572][T16261] RSP: 002b:00007f85d01ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  660.529595][T16261] RAX: ffffffffffffffda RBX: 00007f85cf625fa0 RCX: 00007f85cf39e159
[  660.529611][T16261] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  660.529624][T16261] RBP: 00007f85d01ea090 R08: 0000000000000000 R09: 0000000000000000
[  660.529637][T16261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.529650][T16261] R13: 00007f85cf626038 R14: 00007f85cf625fa0 R15: 00007f85cf74fa48
[  660.529682][T16261]  </TASK>
[  660.529802][T16261] ERROR: Out of memory at tomoyo_realpath_from_path.
[  660.531166][T16261] input: syz1 as /devices/virtual/input/input46
[  660.541366][T16254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  660.566221][T16252] tipc: Resetting bearer <eth:syzkaller0>
[  660.793675][T16252] tipc: Disabling bearer <eth:syzkaller0>
[  660.860616][T13144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.860819][T13144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.270232][T16142] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  661.357989][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  661.364947][T16142] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  661.386055][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  661.496165][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  661.511968][T16142] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  661.567913][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  661.571642][T16142] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  661.612613][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  661.635739][ T7357] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  661.767188][ T7357] usb 3-1: device descriptor read/64, error -71
[  661.799856][T16142] 8021q: adding VLAN 0 to HW filter on device bond0
[  661.843788][T16142] 8021q: adding VLAN 0 to HW filter on device team0
[  661.866277][ T5618] Bluetooth: hci5: command tx timeout
[  661.956950][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.957197][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.969728][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.969843][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  662.005554][ T7357] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  662.032433][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.032494][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.136259][ T7357] usb 3-1: device descriptor read/64, error -71
[  662.247247][ T7357] usb usb3-port1: attempt power cycle
[  662.321164][ T7355] usb 5-1: USB disconnect, device number 77
[  662.425709][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  662.590166][T16142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.606833][ T7357] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  662.630782][ T7357] usb 3-1: device descriptor read/8, error -71
[  662.866127][ T7357] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  662.893547][ T7357] usb 3-1: device descriptor read/8, error -71
[  662.953696][T16312] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in;
[  662.953696][T16312]    program syz.3.2872 not setting count and/or reply_len properly
[  662.999874][ T7357] usb usb3-port1: unable to enumerate USB device
[  663.003855][T16142] veth0_vlan: entered promiscuous mode
[  663.073294][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.073527][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.098283][ T7342] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  663.110271][T16142] veth1_vlan: entered promiscuous mode
[  663.228330][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.246149][ T7342] usb 5-1: Using ep0 maxpacket: 8
[  663.249498][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.249941][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.251047][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.251450][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.294459][T16323] fuse: Invalid uid '00000000000000000003'
[  663.295154][T16326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.304270][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.304663][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.308515][T16326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.311005][T16327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.311647][T16327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.344253][T16142] veth0_macvtap: entered promiscuous mode
[  663.394000][ T7342] usb 5-1: unable to get BOS descriptor or descriptor too short
[  663.394047][ T7342] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  663.394078][ T7342] usb 5-1: no configurations
[  663.394089][ T7342] usb 5-1: can't read configurations, error -22
[  663.430220][T16142] veth1_macvtap: entered promiscuous mode
[  663.535067][T16142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  663.583067][T16142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  663.712722][T13137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  663.713115][T13137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  663.713155][T13137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  663.713191][T13137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.983728][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  663.983751][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.032880][T13142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.032903][T13142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.910533][T16357] FAULT_INJECTION: forcing a failure.
[  664.910533][T16357] name failslab, interval 1, probability 0, space 0, times 0
[  664.910569][T16357] CPU: 0 UID: 0 PID: 16357 Comm: syz.0.2882 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  664.910597][T16357] Tainted: [L]=SOFTLOCKUP
[  664.910604][T16357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  664.910615][T16357] Call Trace:
[  664.910623][T16357]  <TASK>
[  664.910631][T16357]  dump_stack_lvl+0xe8/0x150
[  664.910663][T16357]  should_fail_ex+0x410/0x560
[  664.910687][T16357]  should_failslab+0xa8/0x100
[  664.910712][T16357]  __kmalloc_noprof+0xfe/0x720
[  664.910733][T16357]  ? __kmalloc_noprof+0x1ab/0x720
[  664.910751][T16357]  ? input_ff_create+0xa9/0x370
[  664.910777][T16357]  ? input_ff_create+0xa9/0x370
[  664.910808][T16357]  input_ff_create+0xa9/0x370
[  664.910838][T16357]  uinput_create_device+0x3a8/0x690
[  664.910936][T16357]  uinput_ioctl_handler+0x433/0x15a0
[  664.910967][T16357]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[  664.911003][T16357]  ? __fget_files+0x2a/0x420
[  664.911031][T16357]  ? __fget_files+0x3a2/0x420
[  664.911060][T16357]  ? bpf_lsm_file_ioctl+0x9/0x20
[  664.911090][T16357]  ? __pfx_uinput_ioctl+0x10/0x10
[  664.911115][T16357]  __se_sys_ioctl+0xfc/0x170
[  664.911139][T16357]  do_syscall_64+0x166/0x520
[  664.911166][T16357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.911186][T16357]  ? clear_bhb_loop+0x70/0xc0
[  664.911209][T16357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.911230][T16357] RIP: 0033:0x7fd89cf9e159
[  664.911249][T16357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.911267][T16357] RSP: 002b:00007fd89df44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  664.911289][T16357] RAX: ffffffffffffffda RBX: 00007fd89d225fa0 RCX: 00007fd89cf9e159
[  664.911312][T16357] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  664.911325][T16357] RBP: 00007fd89df44090 R08: 0000000000000000 R09: 0000000000000000
[  664.911338][T16357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.911351][T16357] R13: 00007fd89d226038 R14: 00007fd89d225fa0 R15: 00007fd89d34fa48
[  664.911383][T16357]  </TASK>
[  665.545886][    C1] net_ratelimit: 9 callbacks suppressed
[  665.545907][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  665.557224][   T31] kauditd_printk_skb: 21 callbacks suppressed
[  665.557244][   T31] audit: type=1326 audit(1790926257.834:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  665.557291][   T31] audit: type=1326 audit(1790926257.834:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  665.557329][   T31] audit: type=1326 audit(1790926257.834:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  665.557367][   T31] audit: type=1326 audit(1790926257.834:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb23fd9dec2 code=0x7ffc0000
[  665.557405][   T31] audit: type=1326 audit(1790926257.834:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb23fd9df57 code=0x7ffc0000
[  665.557443][   T31] audit: type=1326 audit(1790926257.844:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb23fd5ae51 code=0x7ffc0000
[  665.557483][   T31] audit: type=1326 audit(1790926257.844:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb23fd9ef49 code=0x7ffc0000
[  665.558598][   T31] audit: type=1326 audit(1790926257.844:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  665.558643][   T31] audit: type=1326 audit(1790926257.844:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  665.558679][   T31] audit: type=1326 audit(1790926257.844:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.1.2885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23fd9e159 code=0x7ffc0000
[  666.146082][ T7355] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  666.295660][ T7355] usb 2-1: Using ep0 maxpacket: 16
[  666.296918][ T7355] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  666.299062][ T7355] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  666.299086][ T7355] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  666.303153][ T7355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.303178][ T7355] usb 2-1: Product: syz
[  666.303195][ T7355] usb 2-1: Manufacturer: syz
[  666.303211][ T7355] usb 2-1: SerialNumber: syz
[  666.313737][ T7355] usb 2-1: 0:2 : does not exist
[  666.465955][ T5802] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  666.497315][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.497555][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.519362][T16366] IPVS: set_ctl: invalid protocol: 25647 47.118.104.111:29556
[  666.562133][ T7355] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  666.585699][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  666.639050][ T5802] usb 5-1: Using ep0 maxpacket: 32
[  666.659895][ T5802] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  666.664251][ T5802] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  666.664282][ T5802] usb 5-1: config 0 has no interface number 0
[  666.676230][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.676257][ T5802] usb 5-1: Product: syz
[  666.676272][ T5802] usb 5-1: Manufacturer: syz
[  666.676287][ T5802] usb 5-1: SerialNumber: syz
[  666.702638][ T5802] usb 5-1: config 0 descriptor??
[  666.755199][ T7355] usb 2-1: USB disconnect, device number 59
[  666.947502][ T9855] udevd[9855]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  667.014997][T16393] binder: 16391:16393 ioctl 4018620d 0 returned -22
[  667.062895][T16379] ip_tables: iptables: counters copy to user failed while replacing table
[  667.167514][ T5802] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  667.167748][ T5802] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  667.187163][ T5802] usb 5-1: USB disconnect, device number 80
[  667.270301][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  667.304493][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  667.316789][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  667.320111][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  667.323411][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  667.402675][ T8557] bridge0: port 3(syz_tun) entered disabled state
[  667.466345][ T8557] syz_tun (unregistering): left allmulticast mode
[  667.466372][ T8557] syz_tun (unregistering): left promiscuous mode
[  667.466464][ T8557] bridge0: port 3(syz_tun) entered disabled state
[  667.625761][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  667.658237][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.658555][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.014351][T16408] netlink: 'syz.1.2897': attribute type 3 has an invalid length.
[  668.217764][T16422] netlink: 'syz.3.2900': attribute type 1 has an invalid length.
[  668.222238][T16425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2901'.
[  668.223752][T16424] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2901'.
[  668.300808][T16422] 8021q: adding VLAN 0 to HW filter on device bond3
[  668.356806][ T7354] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  668.494245][T16422] bond3: (slave geneve3): making interface the new active one
[  668.504290][T16422] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  668.514797][ T7354] usb 5-1: device descriptor read/64, error -71
[  668.665768][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  668.745934][ T7354] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  668.765927][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.876544][ T7354] usb 5-1: device descriptor read/64, error -71
[  668.933477][T16404] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.933589][T16404] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.933714][T16404] bridge_slave_0: entered allmulticast mode
[  668.934859][T16404] bridge_slave_0: entered promiscuous mode
[  668.946076][T16404] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.946230][T16404] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.946361][T16404] bridge_slave_1: entered allmulticast mode
[  668.950961][T16404] bridge_slave_1: entered promiscuous mode
[  668.990695][ T7354] usb usb5-port1: attempt power cycle
[  668.992239][T16404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.996727][T16404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  669.040234][T16404] team0: Port device team_slave_0 added
[  669.043597][T16404] team0: Port device team_slave_1 added
[  669.110746][T16404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.110759][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.110774][T16404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.112059][T16404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.112068][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.112083][T16404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.180799][T16404] hsr_slave_0: entered promiscuous mode
[  669.183125][T16404] hsr_slave_1: entered promiscuous mode
[  669.183984][T16404] debugfs: 'hsr0' already exists in 'hsr'
[  669.184004][T16404] Cannot create hsr debugfs directory
[  669.205694][ T7344] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  669.288322][T16451] mac80211_hwsim hwsim6 syzkaller1: left promiscuous mode
[  669.288341][T16451] mac80211_hwsim hwsim6 syzkaller1: left allmulticast mode
[  669.326225][ T7354] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  669.346445][ T7354] usb 5-1: device descriptor read/8, error -71
[  669.370139][ T7344] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  669.371134][ T7344] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 61
[  669.371152][ T7344] usb 1-1: config 0 interface 0 has no altsetting 0
[  669.374585][ T7344] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  669.374600][ T7344] usb 1-1: Product: syz
[  669.374608][ T7344] usb 1-1: Manufacturer: syz
[  669.374616][ T7344] usb 1-1: SerialNumber: syz
[  669.380870][ T7344] usb 1-1: config 0 descriptor??
[  669.382756][T16446] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  669.396666][ T5618] Bluetooth: hci1: command tx timeout
[  669.406206][ T7344] usb 1-1: selecting invalid altsetting 0
[  669.555681][ T7342] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  669.585559][ T7354] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  669.606965][ T7354] usb 5-1: device descriptor read/8, error -71
[  669.707441][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.712661][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.712938][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.713120][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.713303][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.713527][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.713734][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.716016][ T7354] usb usb5-port1: unable to enumerate USB device
[  669.723856][ T7342] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  669.726053][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.726506][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.726935][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.729337][ T7342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  669.729386][ T7342] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.729409][ T7342] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  669.729432][ T7342] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  669.729472][ T7342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.735031][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.735501][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.735877][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.736309][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.751286][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.751642][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.752114][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.752456][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.776177][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.776532][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.776896][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.808997][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.809439][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.809817][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.839720][T16446] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  669.870497][ T7342] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  669.871142][ T7342] cxacru 2-1:1.0: probe with driver cxacru failed with error -22
[  669.983178][T15306] usb 1-1: USB disconnect, device number 39
[  670.239704][T13142] bridge_slave_1: left promiscuous mode
[  670.239957][T13142] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.264126][T13142] bridge_slave_0: left allmulticast mode
[  670.264153][T13142] bridge_slave_0: left promiscuous mode
[  670.264364][T13142] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.745715][    C1] net_ratelimit: 5 callbacks suppressed
[  670.745737][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  670.804918][T13142] erspan0 (unregistering): left promiscuous mode
[  670.969328][T13142] gretap0 (unregistering): left promiscuous mode
[  671.079220][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.079541][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.105592][ T7344] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  671.220173][T13142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  671.239850][T13142] bond_slave_0: left promiscuous mode
[  671.247575][T13142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  671.268161][ T7344] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  671.269905][ T7344] usb 1-1: config 0 has an invalid interface number: 74 but max is 1
[  671.269923][ T7344] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  671.269933][ T7344] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  671.269945][ T7344] usb 1-1: config 0 has no interface number 0
[  671.269971][ T7344] usb 1-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  671.269982][ T7344] usb 1-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  671.269995][ T7344] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  671.270009][ T7344] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  671.280964][T13142] bond_slave_1: left promiscuous mode
[  671.282003][ T7344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.282028][ T7344] usb 1-1: Product: syz
[  671.282044][ T7344] usb 1-1: Manufacturer: syz
[  671.282059][ T7344] usb 1-1: SerialNumber: syz
[  671.287771][T13142] bond0 (unregistering): Released all slaves
[  671.327262][ T7344] usb 1-1: config 0 descriptor??
[  671.379741][T13142] bond1 (unregistering): (slave veth3): Releasing active interface
[  671.397597][T13142] bond1 (unregistering): Released all slaves
[  671.442776][T13142] bond2 (unregistering): Released all slaves
[  671.475999][ T5618] Bluetooth: hci1: command tx timeout
[  671.483490][T13142] bond3 (unregistering): (slave veth5): Releasing active interface
[  671.490686][T13142] bond3 (unregistering): Released all slaves
[  671.566443][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  671.797134][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  671.980930][T13142] tipc: Disabling bearer <udp:syz2>
[  671.981090][T13142] tipc: Left network mode
[  672.176616][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.176906][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.270491][ T7354] usb 2-1: USB disconnect, device number 60
[  672.560554][ T7344] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected
[  672.570463][ T7344] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  672.608983][ T7344] usb 1-1: USB disconnect, device number 40
[  672.774502][ T7344] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  672.796937][ T7344] cypress_m8 1-1:0.74: device disconnected
[  672.830841][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  672.832563][ T7342] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  672.836255][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.007414][ T7342] usb 5-1: Using ep0 maxpacket: 16
[  673.008579][ T7342] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  673.013123][ T7342] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  673.013149][ T7342] usb 5-1: config 0 has no interface number 0
[  673.013191][ T7342] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  673.013217][ T7342] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  673.013257][ T7342] usb 5-1: config 0 interface 41 has no altsetting 0
[  673.025190][ T7342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.025219][ T7342] usb 5-1: Product: syz
[  673.025235][ T7342] usb 5-1: Manufacturer: syz
[  673.025250][ T7342] usb 5-1: SerialNumber: syz
[  673.030735][ T7342] usb 5-1: config 0 descriptor??
[  673.031857][T16485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  673.031990][T16485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  673.354172][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.354510][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.491049][T16499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2913'.
[  673.557189][ T5618] Bluetooth: hci1: command tx timeout
[  673.933127][T16404] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  673.948538][T16404] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  673.954540][T16511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  673.954619][T16404] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  674.017762][T16404] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  674.020215][T16510] tipc: Resetting bearer <eth:syzkaller0>
[  674.102347][T16510] tipc: Disabling bearer <eth:syzkaller0>
[  674.153088][T16404] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  674.191903][T16404] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  674.192795][T16404] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  674.216758][T16404] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  674.222246][T13142] hsr_slave_0: left promiscuous mode
[  674.234084][T13142] hsr_slave_1: left promiscuous mode
[  674.675945][ T7344] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  674.815649][ T7344] usb 2-1: device descriptor read/64, error -71
[  675.057979][ T7344] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  675.077679][T16404] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.100637][T16404] 8021q: adding VLAN 0 to HW filter on device team0
[  675.109337][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.109458][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  675.232050][ T7344] usb 2-1: device descriptor read/64, error -71
[  675.259917][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.260031][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.293473][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'.
[  675.308928][T13142] IPVS: stop unused estimator thread 0...
[  675.367164][ T7344] usb usb2-port1: attempt power cycle
[  675.437468][ T7342] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71
[  675.443795][ T7342] usb 5-1: USB disconnect, device number 85
[  675.550807][T16404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  675.636813][ T5618] Bluetooth: hci1: command tx timeout
[  675.709980][T16560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2923'.
[  675.710020][T16560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2923'.
[  675.749268][ T7344] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  675.782684][ T7344] usb 2-1: device descriptor read/8, error -71
[  675.816232][T16404] veth0_vlan: entered promiscuous mode
[  675.826079][T16404] veth1_vlan: entered promiscuous mode
[  675.870676][ T7354] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  675.918454][T16404] veth0_macvtap: entered promiscuous mode
[  675.932489][T16404] veth1_macvtap: entered promiscuous mode
[  675.945630][    C1] net_ratelimit: 7 callbacks suppressed
[  675.945648][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  675.953596][T16404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  675.983494][T16404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  676.017746][ T7344] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  676.031844][ T7354] usb 1-1: Using ep0 maxpacket: 16
[  676.034807][ T7354] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  676.040046][ T7354] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30
[  676.040097][ T7354] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126
[  676.040140][ T7354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.041697][T13144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  676.041741][T13144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.041775][T13144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.041807][T13144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  676.048280][ T7354] usb 1-1: config 0 descriptor??
[  676.050947][ T7344] usb 2-1: device descriptor read/8, error -71
[  676.167457][ T7344] usb usb2-port1: unable to enumerate USB device
[  676.226064][T13142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.226089][T13142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.314789][T13137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.314814][T13137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.634342][T16574] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  676.685045][   T31] kauditd_printk_skb: 184 callbacks suppressed
[  676.685065][   T31] audit: type=1326 audit(1790926268.964:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.4.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1ff79e159 code=0x0
[  676.796002][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.796182][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.958882][T16579] ip_tables: iptables: counters copy to user failed while replacing table
[  676.960046][T16579] ip_tables: iptables: counters copy to user failed while replacing table
[  676.985784][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  676.989534][ T7354] usbhid 1-1:0.0: can't add hid device: -71
[  676.989610][ T7354] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  676.998831][ T7354] usb 1-1: USB disconnect, device number 41
[  677.605563][ T7354] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  677.755565][ T7354] usb 1-1: Using ep0 maxpacket: 32
[  677.756294][ T7354] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  677.758756][ T7354] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  677.758786][ T7354] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  677.758801][ T7354] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  677.758815][ T7354] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  677.761006][ T7354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.761021][ T7354] usb 1-1: Product: syz
[  677.761029][ T7354] usb 1-1: Manufacturer: syz
[  677.761037][ T7354] usb 1-1: SerialNumber: syz
[  677.779237][    C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  677.817644][ T7354] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input49
[  677.907386][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.907623][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.932161][ T7344] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  677.997654][ T7354] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  677.997680][ T7354]  (id 0x00)
[  678.025751][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  678.087888][ T7344] usb 2-1: New USB device found, idVendor=0846, idProduct=4250, bcdDevice=df.04
[  678.088975][ T7344] usb 2-1: config 5 has an invalid interface number: 106 but max is 1
[  678.089004][ T7344] usb 2-1: config 5 has an invalid interface number: 4 but max is 1
[  678.089033][ T7344] usb 2-1: config 5 has no interface number 0
[  678.089050][ T7344] usb 2-1: config 5 has no interface number 1
[  678.089104][ T7344] usb 2-1: config 5 interface 106 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  678.089129][ T7344] usb 2-1: config 5 interface 106 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  678.089153][ T7344] usb 2-1: config 5 interface 106 altsetting 0 endpoint 0x5 has invalid maxpacket 2047, setting to 64
[  678.089180][ T7344] usb 2-1: config 5 interface 106 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64
[  678.089206][ T7344] usb 2-1: config 5 interface 106 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  678.089232][ T7344] usb 2-1: config 5 interface 106 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  678.089254][ T7344] usb 2-1: config 5 interface 106 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  678.089276][ T7344] usb 2-1: config 5 interface 106 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  678.089300][ T7344] usb 2-1: config 5 interface 106 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  678.089322][ T7344] usb 2-1: config 5 interface 106 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64
[  678.089348][ T7344] usb 2-1: config 5 interface 106 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  678.089370][ T7344] usb 2-1: config 5 interface 106 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[  678.089411][ T7344] usb 2-1: config 5 interface 4 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  678.089434][ T7344] usb 2-1: config 5 interface 4 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  678.089456][ T7344] usb 2-1: config 5 interface 4 altsetting 1 has a duplicate endpoint with address 0x5, skipping
[  678.089478][ T7344] usb 2-1: config 5 interface 4 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  678.089502][ T7344] usb 2-1: config 5 interface 4 altsetting 1 endpoint 0x3 has invalid maxpacket 991, setting to 64
[  678.089527][ T7344] usb 2-1: config 5 interface 4 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[  678.089550][ T7344] usb 2-1: config 5 interface 4 altsetting 1 has a duplicate endpoint with address 0xB, skipping
[  678.089572][ T7344] usb 2-1: config 5 interface 4 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  678.089593][ T7344] usb 2-1: config 5 interface 4 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[  678.089615][ T7344] usb 2-1: config 5 interface 4 has no altsetting 0
[  678.166038][ T7354] rc_core: IR keymap rc-imon-pad not found
[  678.166057][ T7354] Registered IR keymap rc-empty
[  678.166134][ T7354] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  678.166151][ T7354] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  678.193793][ T7344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.193811][ T7344] usb 2-1: Product: Х
[  678.193819][ T7344] usb 2-1: Manufacturer: 菽බ伶ꑗ頌嗐ᴔ융᎖䮐ᅷ춈慆ャ풅磶ﾗ䝱␽ά눊⟞궉꿢놸鶿븢듸藲䔚謢镵┟ꃣ¨䗶⶯鮷δ
[  678.193831][ T7344] usb 2-1: SerialNumber: syz
[  678.197375][ T7354] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0
[  678.200031][ T7354] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input50
[  678.208101][ T7354] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:42> initialized
[  678.320218][T16606] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  678.323313][T16606] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  678.653235][T16606] gre2: entered promiscuous mode
[  678.933002][T16626] bridge0: port 1(
30��{X��) entered blocking state
[  678.933180][T16626] bridge0: port 1(
30��{X��) entered disabled state
[  678.963070][T16626] 0��{X��: entered promiscuous mode
[  678.974368][T16626] bridge0: port 1(
30��{X��) entered blocking state
[  678.974464][T16626] bridge0: port 1(
30��{X��) entered forwarding state
[  679.032102][ T7344] usb 2-1: Could not find all expected endpoints
[  679.065744][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  679.097112][ T7344] usb 2-1: Could not find all expected endpoints
[  679.129225][ T7344] usb 2-1: USB disconnect, device number 65
[  679.626475][ T7355] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  679.755063][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'.
[  679.755277][T16663] bridge0: port 3(vlan2) entered blocking state
[  679.756979][T16663] bridge0: port 3(vlan2) entered listening state
[  679.781783][ T7355] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  679.798597][ T7355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.798628][ T7355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  679.798684][ T7355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.804953][ T7355] usb 3-1: config 0 descriptor??
[  679.851185][T16663] bridge0: entered promiscuous mode
[  679.851267][T16663] bridge0: entered allmulticast mode
[  679.882545][T16664] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2946'.
[  679.882571][T16664] tipc: Enabling of bearer <u�:sy> rejected, media not registered
[  679.965573][ T7354] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  680.091416][T16666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  680.103000][T16665] tipc: Resetting bearer <eth:syzkaller0>
[  680.103895][ T7354] usb 2-1: device descriptor read/64, error -71
[  680.199626][T16665] tipc: Disabling bearer <eth:syzkaller0>
[  680.232996][ T7355] hid_parser_main: 14 callbacks suppressed
[  680.233014][ T7355] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0
[  680.233098][ T7355] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0
[  680.283138][ T7355] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0021/input/input51
[  680.316953][T16601] imon:send_packet: task interrupted
[  680.317075][T16601] imon:send_packet: packet tx failed (-512)
[  680.323100][T16601] imon:vfd_write: send packet #0 failed
[  680.343939][ T7354] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  680.430019][T16648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2943'.
[  680.430035][T16648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2943'.
[  680.471173][T16669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2943'.
[  680.471189][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2943'.
[  680.485563][ T7354] usb 2-1: device descriptor read/64, error -71
[  680.553918][T16648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.561837][ T7357] usb 1-1: USB disconnect, device number 42
[  680.564443][T16648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.578716][ T7355] cm6533_jd 0003:0D8C:0022.0021: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  680.595826][ T7354] usb usb2-port1: attempt power cycle
[  680.801281][T16676] bridge0: port 3(veth0) entered blocking state
[  680.801466][T16676] bridge0: port 3(veth0) entered disabled state
[  680.801643][T16676] veth0: entered allmulticast mode
[  680.829283][T16676] veth0: entered promiscuous mode
[  680.830508][T16676] bridge0: port 3(veth0) entered blocking state
[  680.830624][T16676] bridge0: port 3(veth0) entered forwarding state
[  680.936657][ T7354] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  680.962099][ T7354] usb 2-1: device descriptor read/8, error -71
[  681.092464][T16683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2951'.
[  681.154190][    C1] net_ratelimit: 5 callbacks suppressed
[  681.154212][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  681.196293][ T7354] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  681.217709][ T7354] usb 2-1: device descriptor read/8, error -71
[  681.245138][T16686] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2952'.
[  681.248102][T16686] bridge0: port 3(veth0) entered disabled state
[  681.248395][T16686] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.252206][T16686] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.295767][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.295930][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.325883][ T7354] usb usb2-port1: unable to enumerate USB device
[  681.521979][T16692] syzkaller0: entered promiscuous mode
[  681.521999][T16692] syzkaller0: entered allmulticast mode
[  681.537180][ T7354] usb 3-1: reset high-speed USB device number 58 using dummy_hcd
[  682.185639][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  682.195619][ T7344] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  682.311104][ T7355] usb 3-1: USB disconnect, device number 58
[  682.355688][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.385528][ T7344] usb 5-1: Using ep0 maxpacket: 16
[  682.388581][ T7344] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  682.392807][ T7344] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  682.392836][ T7344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  682.397043][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.397378][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.454727][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.473201][ T7344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.473228][ T7344] usb 5-1: Product: syz
[  682.473243][ T7344] usb 5-1: Manufacturer: syz
[  682.473257][ T7344] usb 5-1: SerialNumber: syz
[  682.499231][ T7344] usb 5-1: config 0 descriptor??
[  682.534131][ T7344] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  682.534167][ T7344] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  683.187145][ T7344] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  683.225750][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  683.263043][ T7342] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  683.420074][ T7342] usb 3-1: Using ep0 maxpacket: 8
[  683.423533][ T7342] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  683.425158][ T7342] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.425184][ T7342] usb 3-1: config 0 has no interfaces?
[  683.458836][ T7342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.458865][ T7342] usb 3-1: Product: syz
[  683.458879][ T7342] usb 3-1: Manufacturer: syz
[  683.458894][ T7342] usb 3-1: SerialNumber: syz
[  683.474709][ T7342] usb 3-1: config 0 descriptor??
[  683.529722][T13139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.091537][T16725] netlink: 1700 bytes leftover after parsing attributes in process `syz.1.2962'.
[  684.091571][T16725] netlink: 1700 bytes leftover after parsing attributes in process `syz.1.2962'.
[  684.266578][ T7344] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  684.266966][ T7344] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  684.266984][ T7344] em28xx 5-1:0.0: No AC97 audio processor
[  685.617166][ T7344] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  685.768623][ T7344] usb 2-1: Using ep0 maxpacket: 8
[  685.769417][ T7344] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  685.814959][ T7344] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  685.814986][ T7344] usb 2-1: config 179 has no interface number 0
[  685.815012][ T7344] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  685.815026][ T7344] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  685.815040][ T7344] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  685.815054][ T7344] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  685.815068][ T7344] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  685.815092][ T7344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.912005][T16737] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  686.345691][    C1] net_ratelimit: 7 callbacks suppressed
[  686.345713][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  686.357721][ T7357] usb 2-1: USB disconnect, device number 70
[  686.361630][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  687.028984][T10333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.029288][T10333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.124071][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  687.140500][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  687.142911][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  687.159669][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  687.194843][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  687.398996][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  688.206335][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.206708][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.299036][T16742] syzkaller0: entered promiscuous mode
[  688.299111][T16742] syzkaller0: entered allmulticast mode
[  688.373778][ T7355] usb 5-1: USB disconnect, device number 86
[  688.377191][ T7355] em28xx 5-1:0.0: Disconnecting em28xx
[  688.425747][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  688.536960][ T7355] em28xx: Freeing device
[  688.572654][T16752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2969'.
[  688.660326][ T7354] usb 3-1: USB disconnect, device number 59
[  689.085517][ T7354] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  689.089079][T16770] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  689.219375][T16748] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.219550][T16748] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.219667][T16748] bridge_slave_0: entered allmulticast mode
[  689.221450][T16748] bridge_slave_0: entered promiscuous mode
[  689.225785][T16748] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.225930][T16748] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.226321][T16748] bridge_slave_1: entered allmulticast mode
[  689.227962][T16748] bridge_slave_1: entered promiscuous mode
[  689.236527][ T7354] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  689.237626][ T7354] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  689.237649][ T7354] usb 3-1: config 0 has no interface number 0
[  689.237688][ T7354] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  689.239807][ T7354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.239830][ T7354] usb 3-1: Product: syz
[  689.239845][ T7354] usb 3-1: Manufacturer: syz
[  689.239859][ T7354] usb 3-1: SerialNumber: syz
[  689.242890][ T7354] usb 3-1: config 0 descriptor??
[  689.252868][ T7354] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  689.270883][T16776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  689.290532][T16748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.294660][T16748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  689.316748][ T5613] Bluetooth: hci4: command tx timeout
[  689.386491][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.386770][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.465618][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  689.468291][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  689.471151][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  689.471209][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  689.547029][T16748] team0: Port device team_slave_0 added
[  689.556547][T16748] team0: Port device team_slave_1 added
[  689.617414][T16748] batman_adv: batadv0: Adding interface: batadv_slave_0
[  689.617434][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.617458][T16748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  689.620112][T16748] batman_adv: batadv0: Adding interface: batadv_slave_1
[  689.620128][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.620180][T16748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  689.680327][T16748] hsr_slave_0: entered promiscuous mode
[  689.681865][T16748] hsr_slave_1: entered promiscuous mode
[  689.682753][T16748] debugfs: 'hsr0' already exists in 'hsr'
[  689.682856][T16748] Cannot create hsr debugfs directory
[  689.725331][ T7354] usb 3-1: USB disconnect, device number 60
[  689.865706][ T7343] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  690.031221][T16748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.031259][T16748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.066157][ T7343] usb 1-1: Using ep0 maxpacket: 16
[  690.068376][ T7343] usb 1-1: unable to get BOS descriptor or descriptor too short
[  690.068420][ T7343] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  690.069401][ T7343] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024
[  690.069430][ T7343] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  690.069455][ T7343] usb 1-1: config 1 interface 0 has no altsetting 0
[  690.133057][ T7343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.133085][ T7343] usb 1-1: Product: syz
[  690.133101][ T7343] usb 1-1: Manufacturer: syz
[  690.133116][ T7343] usb 1-1: SerialNumber: syz
[  690.160131][T16780] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  690.466519][T16748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.466556][T16748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.656824][T16748] bond0: (slave netdevsim1): Releasing backup interface
[  690.659121][T16748] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  690.662955][T16748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  690.663023][T16748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.775697][ T7355] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  690.927826][ T7355] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  690.931351][ T7355] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.931400][ T7355] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  690.931424][ T7355] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  690.931464][ T7355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.942571][ T7355] ttusb_dec_send_command: command bulk message failed: error -8
[  690.942815][ T7355] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -8
[  691.018920][ T7343] usb 1-1: USB disconnect, device number 43
[  691.104514][T16748] batman_adv: batadv0: Removing interface: vlan2
[  691.144347][ T7342] usb 5-1: USB disconnect, device number 87
[  691.334722][T16748] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  691.344859][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  691.353405][T16748] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  691.364924][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  691.372827][T16748] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  691.384589][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  691.385347][T16748] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  691.386654][ T5613] Bluetooth: hci4: command tx timeout
[  691.410285][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  691.478359][ T7354] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  691.499269][T16748] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.514755][T16748] 8021q: adding VLAN 0 to HW filter on device team0
[  691.530720][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.530781][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  691.544501][T10328] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.544620][T10328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  691.545827][    C1] net_ratelimit: 3 callbacks suppressed
[  691.545844][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  691.597159][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.597379][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.640699][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0
[  691.685002][T16748] veth0_vlan: entered promiscuous mode
[  691.703344][T16748] veth1_vlan: entered promiscuous mode
[  691.752086][T16748] veth0_macvtap: entered promiscuous mode
[  691.763133][T16748] veth1_macvtap: entered promiscuous mode
[  691.769061][T16805] ALSA: mixer_oss: invalid OSS volume 'AF_VSOCK'
[  691.792095][T16748] batman_adv: batadv0: Interface activated: batadv_slave_0
[  691.810308][T16748] batman_adv: batadv0: Interface activated: batadv_slave_1
[  691.860470][T10328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  691.862593][T13145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  691.862634][T13145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  691.862677][T13145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  692.045872][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.408304][T10333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.408328][T10333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.566335][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.566358][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.585830][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  692.706703][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.706941][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.808203][T16821] tipc: Started in network mode
[  692.808234][T16821] tipc: Node identity ee592f2527f8, cluster identity 4711
[  692.808367][T16821] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  692.845717][T16820] tipc: Resetting bearer <eth:syzkaller0>
[  692.907172][T16820] tipc: Disabling bearer <eth:syzkaller0>
[  693.340351][T16835] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  693.375755][ T7355] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  693.465805][ T5613] Bluetooth: hci4: command tx timeout
[  693.529331][ T7355] usb 1-1: unable to get BOS descriptor or descriptor too short
[  693.529380][ T7355] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  693.530635][ T7355] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  693.530658][ T7355] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  693.530695][ T7355] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  693.530716][ T7355] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  693.530736][ T7355] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  693.530750][ T7355] usb 1-1: config 1 interface 1 has no altsetting 0
[  693.544328][ T7355] usb 1-1: string descriptor 0 read error: -22
[  693.544821][ T7355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.626192][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  693.817427][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.817644][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.093968][ T7355] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  694.094001][ T7355] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  694.094020][ T7355] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  694.271811][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  694.290447][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  694.303634][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  694.304567][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  694.324367][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  694.440157][T16829] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  694.671099][ T7355] usb 1-1: 2:0: failed to get current value for ch 1 (-71)
[  694.768006][ T7355] usb 1-1: USB disconnect, device number 44
[  694.960287][ T8431] bridge0: port 3(vlan2) entered disabled state
[  694.964715][ T8431] vlan2 (unregistering): left allmulticast mode
[  694.964729][ T8431] syz_tun (unregistering): left allmulticast mode
[  694.964741][ T8431] vlan2 (unregistering): left promiscuous mode
[  694.964748][ T8431] syz_tun (unregistering): left promiscuous mode
[  694.964789][ T8431] bridge0: port 3(vlan2) entered disabled state
[  695.547096][ T5618] Bluetooth: hci4: command tx timeout
[  695.594685][T16849] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.595603][T16849] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.595720][T16849] bridge_slave_0: entered allmulticast mode
[  695.600881][T16849] bridge_slave_0: entered promiscuous mode
[  695.607684][T16849] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.608433][T16849] bridge0: port 2(bridge_slave_1) entered disabled state
[  695.608654][T16849] bridge_slave_1: entered allmulticast mode
[  695.616218][T16849] bridge_slave_1: entered promiscuous mode
[  695.687567][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'.
[  695.737524][T16849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  695.758503][T16849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  695.786966][ T7357] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  695.811785][T16849] team0: Port device team_slave_0 added
[  695.815154][T16849] team0: Port device team_slave_1 added
[  695.931515][T16849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.931535][T16849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.931969][T16849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  695.942584][ T7357] usb 1-1: Using ep0 maxpacket: 32
[  695.947551][T16849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.947567][T16849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.947593][T16849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.971436][ T7357] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  696.035701][ T7357] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  696.035731][ T7357] usb 1-1: config 0 has no interface number 0
[  696.035774][ T7357] usb 1-1: config 0 interface 184 has no altsetting 0
[  696.070254][ T7357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.070284][ T7357] usb 1-1: Product: syz
[  696.070301][ T7357] usb 1-1: Manufacturer: syz
[  696.070316][ T7357] usb 1-1: SerialNumber: syz
[  696.085031][ T7357] usb 1-1: config 0 descriptor??
[  696.165517][T16849] hsr_slave_0: entered promiscuous mode
[  696.166439][T16849] hsr_slave_1: entered promiscuous mode
[  696.168741][T16849] debugfs: 'hsr0' already exists in 'hsr'
[  696.168762][T16849] Cannot create hsr debugfs directory
[  696.429667][ T5618] Bluetooth: hci2: command tx timeout
[  696.620170][T16849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  696.620206][T16849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.718755][ T7357] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  696.718790][ T7357] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  696.745913][    C1] net_ratelimit: 6 callbacks suppressed
[  696.745936][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  696.782099][T16849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  696.782135][T16849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.856173][ T7344] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  696.879602][T16849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  696.879638][T16849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.948926][ T7357] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[  696.948958][ T7357] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[  696.948978][ T7357] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  696.949226][ T7357] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32
[  697.021601][ T7344] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  697.027033][T16849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  697.027066][T16849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.062869][ T7344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.062899][ T7344] usb 3-1: Product: syz
[  697.062908][ T7344] usb 3-1: Manufacturer: syz
[  697.062916][ T7344] usb 3-1: SerialNumber: syz
[  697.121601][T15306] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  697.208825][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.209086][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.391605][T16849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  697.407081][T16849] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  697.408131][T16849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  697.451486][T16849] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  697.452405][T16849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  697.477968][T16849] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  697.479375][T16849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  697.503221][T16849] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  697.643453][T16849] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.670843][T16849] 8021q: adding VLAN 0 to HW filter on device team0
[  697.692369][T10328] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.692434][T10328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.722107][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.722203][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.742790][ T7357] usb 3-1: USB disconnect, device number 61
[  697.785668][    C1] IPVS: sh: UDP 255.255.255.255:0 - no destination available
[  697.934291][T16849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.120366][T16849] veth0_vlan: entered promiscuous mode
[  698.144420][T16849] veth1_vlan: entered promiscuous mode
[  698.287032][T16849] veth0_macvtap: entered promiscuous mode
[  698.310047][T16849] veth1_macvtap: entered promiscuous mode
[  698.396465][T13139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.396708][T13139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.413918][T16849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  698.436529][T15306] usb 3-1: Service connection timeout for: 256
[  698.436555][T15306] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  698.437531][T15306] ath9k_htc: Failed to initialize the device
[  698.438228][    C0] ==================================================================
[  698.438243][    C0] BUG: KASAN: slab-use-after-free in tasklet_action_common+0x103/0x490
[  698.438311][    C0] Read of size 8 at addr ffff88803610d158 by task syz.1.3001/16900
[  698.438352][    C0] 
[  698.438389][    C0] CPU: 0 UID: 0 PID: 16900 Comm: syz.1.3001 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  698.438443][    C0] Tainted: [L]=SOFTLOCKUP
[  698.438452][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  698.438467][    C0] Call Trace:
[  698.438476][    C0]  <IRQ>
[  698.438485][    C0]  dump_stack_lvl+0xe8/0x150
[  698.438516][    C0]  print_address_description+0x55/0x1e0
[  698.438546][    C0]  ? tasklet_action_common+0x103/0x490
[  698.438575][    C0]  print_report+0x58/0x70
[  698.438601][    C0]  kasan_report+0x117/0x150
[  698.438630][    C0]  ? tasklet_action_common+0x103/0x490
[  698.438663][    C0]  tasklet_action_common+0x103/0x490
[  698.438695][    C0]  handle_softirqs+0x226/0x860
[  698.438723][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  698.438753][    C0]  __irq_exit_rcu+0xcb/0x220
[  698.438780][    C0]  irq_exit_rcu+0x9/0x30
[  698.438805][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  698.438835][    C0]  </IRQ>
[  698.438844][    C0]  <TASK>
[  698.438852][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  698.438875][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  698.438899][    C0] Code: ff ff ff e8 b0 9d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 48 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 56 da
[  698.438917][    C0] RSP: 0018:ffffc900058a76b0 EFLAGS: 00000292
[  698.438936][    C0] RAX: 268ef7e220fdbb00 RBX: 0000000000000000 RCX: 0000000000000046
[  698.438954][    C0] RDX: 000000006dc0dabe RSI: ffffffff8e69f504 RDI: ffffffff8c6dad80
[  698.438970][    C0] RBP: ffff888030af0000 R08: ffffffff82416369 R09: 0000000000000000
[  698.438985][    C0] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: ffffffff8ed5c8a0
[  698.439001][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  698.439018][    C0]  ? percpu_ref_put+0x19/0x180
[  698.439050][    C0]  ? percpu_ref_put+0x19/0x180
[  698.439078][    C0]  percpu_ref_put+0x35/0x180
[  698.439105][    C0]  ? percpu_ref_put+0x19/0x180
[  698.439133][    C0]  __mem_cgroup_charge+0x56/0x80
[  698.439157][    C0]  do_pte_missing+0x175b/0x34b0
[  698.439186][    C0]  handle_mm_fault+0x1a53/0x3750
[  698.439216][    C0]  ? handle_mm_fault+0xf1/0x3750
[  698.439242][ T7357] usb 3-1: ath9k_htc: USB layer deinitialized
[  698.439245][    C0]  ? __pfx_handle_mm_fault+0x10/0x10
[  698.439275][    C0]  ? __pfx___up_read+0x10/0x10
[  698.439297][    C0]  ? lock_mm_and_find_vma+0xa7/0x340
[  698.439317][    C0]  do_user_addr_fault+0x746/0x1340
[  698.439372][    C0]  exc_page_fault+0x6a/0xc0
[  698.439399][    C0]  asm_exc_page_fault+0x26/0x30
[  698.439424][    C0] RIP: 0010:rep_stos_alternative+0x5b/0x80
[  698.439444][    C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 <48> 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 83 f9 08 73
[  698.439460][    C0] RSP: 0018:ffffc900058a7bf8 EFLAGS: 00050206
[  698.439478][    C0] RAX: 0000000000000000 RBX: 0000200100000136 RCX: 00000000ffe9d16e
[  698.439493][    C0] RDX: 000000008332a1de RSI: ffffffff8e69f504 RDI: 0000200000162fc8
[  698.439508][    C0] RBP: ffffc900058a7ea8 R08: ffffffff821ed4ef R09: 0000000000000000
[  698.439520][    C0] R10: dffffc0000000000 R11: fffff52000b14fbe R12: 0000200000000208
[  698.439534][    C0] R13: 00000000ffffff2e R14: 0000000000000001 R15: 00007ffffffff000
[  698.439549][    C0]  ? __might_fault+0xaf/0x130
[  698.439578][    C0]  evdev_ioctl_handler+0x15a3/0x1c70
[  698.439603][    C0]  ? __pfx_evdev_ioctl_handler+0x10/0x10
[  698.439628][    C0]  ? hook_file_ioctl+0x1f2/0x600
[  698.439660][    C0]  ? __fget_files+0x2a/0x420
[  698.439686][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[  698.439715][    C0]  ? __pfx_evdev_ioctl+0x10/0x10
[  698.439734][    C0]  __se_sys_ioctl+0xfc/0x170
[  698.439755][    C0]  do_syscall_64+0x166/0x520
[  698.439778][    C0]  ? trace_irq_disable+0x3b/0x140
[  698.439798][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.439816][    C0]  ? clear_bhb_loop+0x70/0xc0
[  698.439838][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.439856][    C0] RIP: 0033:0x7f63a7d9e159
[  698.439871][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.439889][    C0] RSP: 002b:00007f63a8c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  698.439907][    C0] RAX: ffffffffffffffda RBX: 00007f63a8025fa0 RCX: 00007f63a7d9e159
[  698.439922][    C0] RDX: 0000200000000300 RSI: 0000000080104592 RDI: 0000000000000003
[  698.439936][    C0] RBP: 00007f63a7e3506b R08: 0000000000000000 R09: 0000000000000000
[  698.439947][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  698.439958][    C0] R13: 00007f63a8026038 R14: 00007f63a8025fa0 R15: 00007f63a814fa48
[  698.439980][    C0]  </TASK>
[  698.439988][    C0] 
[  698.439994][    C0] Allocated by task 15306:
[  698.440029][    C0]  kasan_save_track+0x3e/0x80
[  698.440051][    C0]  __kasan_kmalloc+0x93/0xb0
[  698.440071][    C0]  __kmalloc_cache_noprof+0x321/0x600
[  698.440090][    C0]  ath9k_init_wmi+0x4f/0x2b0
[  698.440164][    C0]  ath9k_htc_probe_device+0x1e5/0x2370
[  698.440184][    C0]  ath9k_htc_hw_init+0x32/0x70
[  698.440201][    C0]  ath9k_hif_usb_firmware_cb+0x214/0x4b0
[  698.440223][    C0]  request_firmware_work_func+0xf7/0x2d0
[  698.440293][    C0]  process_scheduled_works+0xc3d/0x1630
[  698.440340][    C0]  worker_thread+0xa47/0xfb0
[  698.440364][    C0]  kthread+0x38b/0x480
[  698.440381][    C0]  ret_from_fork+0x514/0xb70
[  698.440417][    C0]  ret_from_fork_asm+0x1a/0x30
[  698.440452][    C0] 
[  698.440457][    C0] Freed by task 15306:
[  698.440467][    C0]  kasan_save_track+0x3e/0x80
[  698.440487][    C0]  kasan_save_free_info+0x40/0x50
[  698.440515][    C0]  __kasan_slab_free+0x5c/0x80
[  698.440536][    C0]  kfree+0x1c5/0x650
[  698.440563][    C0]  ath9k_htc_probe_device+0x11a9/0x2370
[  698.440583][    C0]  ath9k_htc_hw_init+0x32/0x70
[  698.440603][    C0]  ath9k_hif_usb_firmware_cb+0x214/0x4b0
[  698.440624][    C0]  request_firmware_work_func+0xf7/0x2d0
[  698.440642][    C0]  process_scheduled_works+0xc3d/0x1630
[  698.440662][    C0]  worker_thread+0xa47/0xfb0
[  698.440682][    C0]  kthread+0x38b/0x480
[  698.440697][    C0]  ret_from_fork+0x514/0xb70
[  698.440711][    C0]  ret_from_fork_asm+0x1a/0x30
[  698.440734][    C0] 
[  698.440738][    C0] The buggy address belongs to the object at ffff88803610d000
[  698.440738][    C0]  which belongs to the cache kmalloc-2k of size 2048
[  698.440762][    C0] The buggy address is located 344 bytes inside of
[  698.440762][    C0]  freed 2048-byte region [ffff88803610d000, ffff88803610d800)
[  698.440784][    C0] 
[  698.440789][    C0] The buggy address belongs to the physical page:
[  698.440833][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36108
[  698.440858][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  698.440875][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  698.440898][    C0] page_type: f5(slab)
[  698.440917][    C0] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122
[  698.440933][    C0] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  698.440952][    C0] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122
[  698.440970][    C0] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  698.440989][    C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  698.441006][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  698.441017][    C0] page dumped because: kasan: bad access detected
[  698.441037][    C0] page_owner tracks the page as allocated
[  698.441045][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7357, tgid 7357 (kworker/1:15), ts 662744125668
[  698.441077][    C0]  post_alloc_hook+0x1f9/0x250
[  698.441107][    C0]  get_page_from_freelist+0x2209/0x2280
[  698.441129][    C0]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  698.441151][    C0]  allocate_slab+0x7d/0x620
[  698.441177][    C0]  refill_objects+0x2d5/0x350
[  698.441202][    C0]  __pcs_replace_empty_main+0x2c8/0x6c0
[  698.441226][    C0]  __kmalloc_cache_noprof+0x39b/0x600
[  698.441246][    C0]  usb_alloc_dev+0x5f/0xf10
[  698.441331][    C0]  hub_event+0x20fb/0x4d30
[  698.441351][    C0]  process_scheduled_works+0xc3d/0x1630
[  698.441374][    C0]  worker_thread+0xa47/0xfb0
[  698.441395][    C0]  kthread+0x38b/0x480
[  698.441410][    C0]  ret_from_fork+0x514/0xb70
[  698.441434][    C0]  ret_from_fork_asm+0x1a/0x30
[  698.441460][    C0] page last free pid 7355 tgid 7355 ts 662743850937 stack trace:
[  698.441476][    C0]  free_pages_prepare+0x9eb/0xaf0
[  698.441503][    C0]  __free_contig_range_common+0x174/0x340
[  698.441527][    C0]  free_pages_bulk+0x48/0x120
[  698.441547][    C0]  vfree+0x231/0x490
[  698.441572][    C0]  delayed_vfree_work+0x55/0x80
[  698.441591][    C0]  process_scheduled_works+0xc3d/0x1630
[  698.441615][    C0]  worker_thread+0xa47/0xfb0
[  698.441639][    C0]  kthread+0x38b/0x480
[  698.441656][    C0]  ret_from_fork+0x514/0xb70
[  698.441674][    C0]  ret_from_fork_asm+0x1a/0x30
[  698.441701][    C0] 
[  698.441707][    C0] Memory state around the buggy address:
[  698.441719][    C0]  ffff88803610d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  698.441734][    C0]  ffff88803610d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  698.441748][    C0] >ffff88803610d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  698.441759][    C0]                                                     ^
[  698.441772][    C0]  ffff88803610d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  698.441786][    C0]  ffff88803610d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  698.441796][    C0] ==================================================================
[  698.441852][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  699.431756][    C0] CPU: 0 UID: 0 PID: 16900 Comm: syz.1.3001 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  699.442703][    C0] Tainted: [L]=SOFTLOCKUP
[  699.447025][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  699.457076][    C0] Call Trace:
[  699.460350][    C0]  <IRQ>
[  699.463180][    C0]  vpanic+0x56d/0xa60
[  699.467160][    C0]  ? rcu_is_watching+0x16/0xb0
[  699.471926][    C0]  ? __pfx_vpanic+0x10/0x10
[  699.476509][    C0]  panic+0xc5/0xd0
[  699.480228][    C0]  ? __pfx_panic+0x10/0x10
[  699.484646][    C0]  ? tasklet_action_common+0x103/0x490
[  699.490104][    C0]  ? tasklet_action_common+0x103/0x490
[  699.495561][    C0]  check_panic_on_warn+0x89/0xb0
[  699.500493][    C0]  ? tasklet_action_common+0x103/0x490
[  699.505944][    C0]  end_report+0x73/0x170
[  699.510182][    C0]  ? tasklet_action_common+0x103/0x490
[  699.515631][    C0]  kasan_report+0x128/0x150
[  699.520130][    C0]  ? tasklet_action_common+0x103/0x490
[  699.525589][    C0]  tasklet_action_common+0x103/0x490
[  699.530871][    C0]  handle_softirqs+0x226/0x860
[  699.535629][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  699.540391][    C0]  __irq_exit_rcu+0xcb/0x220
[  699.544978][    C0]  irq_exit_rcu+0x9/0x30
[  699.549217][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  699.554850][    C0]  </IRQ>
[  699.557770][    C0]  <TASK>
[  699.560709][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  699.566689][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  699.572143][    C0] Code: ff ff ff e8 b0 9d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 48 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 56 da
[  699.591742][    C0] RSP: 0018:ffffc900058a76b0 EFLAGS: 00000292
[  699.597819][    C0] RAX: 268ef7e220fdbb00 RBX: 0000000000000000 RCX: 0000000000000046
[  699.605781][    C0] RDX: 000000006dc0dabe RSI: ffffffff8e69f504 RDI: ffffffff8c6dad80
[  699.613743][    C0] RBP: ffff888030af0000 R08: ffffffff82416369 R09: 0000000000000000
[  699.621711][    C0] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: ffffffff8ed5c8a0
[  699.629672][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  699.637635][    C0]  ? percpu_ref_put+0x19/0x180
[  699.642401][    C0]  ? percpu_ref_put+0x19/0x180
[  699.647161][    C0]  percpu_ref_put+0x35/0x180
[  699.651747][    C0]  ? percpu_ref_put+0x19/0x180
[  699.656517][    C0]  __mem_cgroup_charge+0x56/0x80
[  699.661445][    C0]  do_pte_missing+0x175b/0x34b0
[  699.666293][    C0]  handle_mm_fault+0x1a53/0x3750
[  699.671228][    C0]  ? handle_mm_fault+0xf1/0x3750
[  699.676170][    C0]  ? __pfx_handle_mm_fault+0x10/0x10
[  699.681467][    C0]  ? __pfx___up_read+0x10/0x10
[  699.686236][    C0]  ? lock_mm_and_find_vma+0xa7/0x340
[  699.691520][    C0]  do_user_addr_fault+0x746/0x1340
[  699.696629][    C0]  exc_page_fault+0x6a/0xc0
[  699.701136][    C0]  asm_exc_page_fault+0x26/0x30
[  699.705981][    C0] RIP: 0010:rep_stos_alternative+0x5b/0x80
[  699.711801][    C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 <48> 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 83 f9 08 73
[  699.731426][    C0] RSP: 0018:ffffc900058a7bf8 EFLAGS: 00050206
[  699.737488][    C0] RAX: 0000000000000000 RBX: 0000200100000136 RCX: 00000000ffe9d16e
[  699.745450][    C0] RDX: 000000008332a1de RSI: ffffffff8e69f504 RDI: 0000200000162fc8
[  699.753415][    C0] RBP: ffffc900058a7ea8 R08: ffffffff821ed4ef R09: 0000000000000000
[  699.761378][    C0] R10: dffffc0000000000 R11: fffff52000b14fbe R12: 0000200000000208
[  699.769341][    C0] R13: 00000000ffffff2e R14: 0000000000000001 R15: 00007ffffffff000
[  699.777309][    C0]  ? __might_fault+0xaf/0x130
[  699.781993][    C0]  evdev_ioctl_handler+0x15a3/0x1c70
[  699.787271][    C0]  ? __pfx_evdev_ioctl_handler+0x10/0x10
[  699.792905][    C0]  ? hook_file_ioctl+0x1f2/0x600
[  699.797841][    C0]  ? __fget_files+0x2a/0x420
[  699.802424][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[  699.807355][    C0]  ? __pfx_evdev_ioctl+0x10/0x10
[  699.812280][    C0]  __se_sys_ioctl+0xfc/0x170
[  699.816864][    C0]  do_syscall_64+0x166/0x520
[  699.821450][    C0]  ? trace_irq_disable+0x3b/0x140
[  699.826461][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.832518][    C0]  ? clear_bhb_loop+0x70/0xc0
[  699.837187][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.843071][    C0] RIP: 0033:0x7f63a7d9e159
[  699.847477][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  699.867076][    C0] RSP: 002b:00007f63a8c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  699.875491][    C0] RAX: ffffffffffffffda RBX: 00007f63a8025fa0 RCX: 00007f63a7d9e159
[  699.883456][    C0] RDX: 0000200000000300 RSI: 0000000080104592 RDI: 0000000000000003
[  699.891506][    C0] RBP: 00007f63a7e3506b R08: 0000000000000000 R09: 0000000000000000
[  699.899465][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  699.907421][    C0] R13: 00007f63a8026038 R14: 00007f63a8025fa0 R15: 00007f63a814fa48
[  699.915393][    C0]  </TASK>
[  699.918834][    C0] Kernel Offset: disabled
[  699.923153][    C0] Rebooting in 86400 seconds..