dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:01 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:01 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:01 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:01 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) 04:41:01 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket(0x0, 0x3, 0x6) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2188.113077][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2188.119218][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2188.239806][ T4365] usb 4-1: USB disconnect, device number 77 04:41:02 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 32) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) (async, rerun: 32) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) 04:41:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x20, 0xb, 0x30, {0x30, 0x9, "128647181b83691462684b4a1fe6dd77a59cdc87cd131d3c5ceb1e00cb847586b53939bc07ecd42daf53380f20d9"}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:02 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2188.467917][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:02 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440)={0x5, 0x0, 0xb8000, 0x3, 0x1f}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r8, 0x19, &(0x7f0000000200), 0x0) splice(r7, &(0x7f00000003c0)=0x5, r8, &(0x7f0000000400)=0x5, 0x2, 0x8) r9 = syz_clone(0x12002100, &(0x7f0000000240)="b2c7d3c700df1b42341b71a08f4c832c18d5ea7d0f834d99a0fb6490c6af3163a93c6b023b255a13848c0460477319704c602b9e0f1198be554ecda57e7b2a43ebafb25f2bd6f6ac5113a607c28776b1e332d00d8089aed33da51f7dfcc298457c307f5875ab8a7a2c9a804fb53852255623c2a0dbb0246f771db9be457c06c961d99e56e1787674929b01820ff03afaed3c2c32d3ced7470bf419cc245e2f8f9d176b6140f3e5ccf68faf93d75eb67b9908db1e7937c4f08aa0f0a214afcad4ead22075dede540ea0d0ea95f362a4fb66852487f454d18b7128451554622cf114575d093622f925ba7f08efdbbcdf7756b2699f1a", 0xf5, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000340)="da0e19ba218652d13e098183ee9ba3103a0f52ebb4e1023a45ff11963619d9c508e0d054a9785f6e981c831c3ea8650cf233d1afd5e54480589b0d0923ddfaa81675507217feb45f79b00c7089d0668c824613e1ca79e5289c39d61967f5daf4ac22b93636b023f4c2c41b0017f6803bba16497ad01005cbf462c623") getpriority(0x0, r9) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) creat(&(0x7f00000000c0)='\x00', 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2188.682970][ T4365] usb 4-1: new high-speed USB device number 78 using dummy_hcd 04:41:02 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2188.783073][T25351] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2188.867763][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:02 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2189.053270][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2189.085162][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2189.126903][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.162048][ T4365] usb 4-1: config 0 descriptor?? [ 2189.173300][T25351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2189.275034][T25351] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2189.332113][T25351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.394590][T25351] usb 3-1: config 0 descriptor?? [ 2189.512758][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.543731][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:05 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x20, 0xb, 0x30, {0x30, 0x9, "128647181b83691462684b4a1fe6dd77a59cdc87cd131d3c5ceb1e00cb847586b53939bc07ecd42daf53380f20d9"}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:05 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x6) bind$packet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:05 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:05 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440)={0x5, 0x0, 0xb8000, 0x3, 0x1f}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) socket$pppoe(0x18, 0x1, 0x0) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r8, 0x19, &(0x7f0000000200), 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r8, 0x19, &(0x7f0000000200), 0x0) splice(r7, &(0x7f00000003c0)=0x5, r8, &(0x7f0000000400)=0x5, 0x2, 0x8) r9 = syz_clone(0x12002100, &(0x7f0000000240)="b2c7d3c700df1b42341b71a08f4c832c18d5ea7d0f834d99a0fb6490c6af3163a93c6b023b255a13848c0460477319704c602b9e0f1198be554ecda57e7b2a43ebafb25f2bd6f6ac5113a607c28776b1e332d00d8089aed33da51f7dfcc298457c307f5875ab8a7a2c9a804fb53852255623c2a0dbb0246f771db9be457c06c961d99e56e1787674929b01820ff03afaed3c2c32d3ced7470bf419cc245e2f8f9d176b6140f3e5ccf68faf93d75eb67b9908db1e7937c4f08aa0f0a214afcad4ead22075dede540ea0d0ea95f362a4fb66852487f454d18b7128451554622cf114575d093622f925ba7f08efdbbcdf7756b2699f1a", 0xf5, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000340)="da0e19ba218652d13e098183ee9ba3103a0f52ebb4e1023a45ff11963619d9c508e0d054a9785f6e981c831c3ea8650cf233d1afd5e54480589b0d0923ddfaa81675507217feb45f79b00c7089d0668c824613e1ca79e5289c39d61967f5daf4ac22b93636b023f4c2c41b0017f6803bba16497ad01005cbf462c623") getpriority(0x0, r9) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) creat(&(0x7f00000000c0)='\x00', 0x0) (async) creat(&(0x7f00000000c0)='\x00', 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:05 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2191.153095][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2191.169287][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2191.216064][ T4365] usb 4-1: USB disconnect, device number 78 04:41:05 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440)={0x5, 0x0, 0xb8000, 0x3, 0x1f}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) r7 = socket$pppoe(0x18, 0x1, 0x0) (async) r8 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r8, 0x19, &(0x7f0000000200), 0x0) splice(r7, &(0x7f00000003c0)=0x5, r8, &(0x7f0000000400)=0x5, 0x2, 0x8) r9 = syz_clone(0x12002100, &(0x7f0000000240)="b2c7d3c700df1b42341b71a08f4c832c18d5ea7d0f834d99a0fb6490c6af3163a93c6b023b255a13848c0460477319704c602b9e0f1198be554ecda57e7b2a43ebafb25f2bd6f6ac5113a607c28776b1e332d00d8089aed33da51f7dfcc298457c307f5875ab8a7a2c9a804fb53852255623c2a0dbb0246f771db9be457c06c961d99e56e1787674929b01820ff03afaed3c2c32d3ced7470bf419cc245e2f8f9d176b6140f3e5ccf68faf93d75eb67b9908db1e7937c4f08aa0f0a214afcad4ead22075dede540ea0d0ea95f362a4fb66852487f454d18b7128451554622cf114575d093622f925ba7f08efdbbcdf7756b2699f1a", 0xf5, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000340)="da0e19ba218652d13e098183ee9ba3103a0f52ebb4e1023a45ff11963619d9c508e0d054a9785f6e981c831c3ea8650cf233d1afd5e54480589b0d0923ddfaa81675507217feb45f79b00c7089d0668c824613e1ca79e5289c39d61967f5daf4ac22b93636b023f4c2c41b0017f6803bba16497ad01005cbf462c623") getpriority(0x0, r9) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) creat(&(0x7f00000000c0)='\x00', 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:05 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket(0x0, 0x3, 0x6) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:05 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2191.563482][T25351] usbhid 3-1:0.0: can't add hid device: -71 [ 2191.569756][T25351] usbhid: probe of 3-1:0.0 failed with error -71 [ 2191.592994][ T4365] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2191.613730][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2191.664127][T25351] usb 3-1: USB disconnect, device number 19 04:41:05 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x3, 0x800, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) r5 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r5, 0x19, &(0x7f0000000200), 0x0) sendmsg$nl_generic(r0, &(0x7f00000037c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003780)={&(0x7f0000000240)=ANY=[@ANYBLOB="143500002300020026bd7000fedbdf251f00000008005d00", @ANYRES32=r4, @ANYBLOB="49228b80424eea3ebe8f81b0ee6186f369f03849efcd3289954e2598cbfc09afdcc079a40a31d753ab1ed3b1d538ecd6657ad1d8ebcd8691c265883417a2d08c3a64948ee44c5a6f440b9080feb1d9eacd039bbabaf2d6abbef72c438902a0a6c645648a6f86d4e643b48166ea5ea47d554eff43b6e5b96500b08cea423848352014148a915e66729ce2f7b3df980b857393f477824171813cb6aca9c01bc1930055694f0f66d48cd9911a1ed9d1439fe1a954cdf1fc38ac0fd7efa6cdd4ccd6e67a0bd932f9fb043cbaa9c5455cdf1eb7abfbcff2e744102f9497f178e39bf3205feec89598a2f9bb6cad53de537a5815175c0bba26354424d51a9640c55b25d8c19c324add658d222f0bad8b259bb31aee5c7e4179ea3279eb928ef0730977161edb3f48a3da16f569ce2701aca67926dcaa5eef1e9e5ec55136891c9c2ea4c1c63a8b6810de6c0a946012eec137573b3e919662d7932936c9acf339532a3151d74b0acee7c1604da886fc0056f6d5d33f35b89efc6533322bf7f71e4dc6f41db9fa615dab89dc4d8883cbf788455e8a4ab39d5150ed3ea24ac46547c93c7abaef38a94ccb1fe9cfff663dc76312120e05449ddf9a7597632db633f48b331664e8a7d0beaa213fad7858fc76722a9a8abaad2a3dde937f156f5af8ad2b8846c36c1f2acef0fa0c8eb0117352d4d555c6eb7e64f7c596a244b09cdb22c5c70730b1c1cecbb261226d5cc3c48cf731d2098fc387edc72493979a28f8e1d1f8165d54b757e5544a0de8c1c17a6844cf608d861133e1335357f100d6de66dded5803dc158fabca84e512e17b146a542bd859868a82d07d461b55b14812cd9a92fe7c7d57d4e54d1551b9b87a9a55bf46932289203ad8007056af724152f90906d2964ce340e97550115105ddcc300b242c6eef91e52ee33c4c41d6bd9a6ec7147fc21fd897e9acc0314a32cbc31620b3097e55a9f39c2377dee0fb43f03f6809d9577290b424b380b94ce493a19298098865642b5db6780f22ef39639b34bfa74aae9e453f88a45030620c223a91b8b0fcd9b7e4a16b3f7236c23a5ad28e1367d6aa2f3a8ecacc5270335fce75ac6664a8b0857eb2ca045f70fa5c03909958ce174c1468f580e8cc604e41606e55c0f0afc15924a93e29647aa17fb3395e0337efc07c4ea6cb832d0fc49e53b432e036036f5fe7d0b6e10ea8ba2d77bcd9c57a0399f6b8d560360a684a615fd437684eadecd8fc984ed07f8f3d4b466a0e5e365db1fdc969deb21765bf7d9a43fe9f822caf40abd35f87d41562888ff9695eb0e5f2a87afaf60d4f47e1a2e8ac5ba51e4fbe54b63b6f7cd6f6fbf6260416415205e1c96077db5e83c48666f74347353edc188d2a2eb189e7b3e543dcb2ef598d26425fc5880940545dab72055a23791d3194613c968f76e2f27a26716904cd336aeb1261316d8b29413629782235a12575dbefcd19284064b59dea93c201e07cc99057553d5deb430de853597a02c3f358d2fa3fa6d31368e1cfa9390d99de07b31ce083f39a3936f32bb3f3050d3458fedb3ee0456c622571bf61797579fae767b4302db28217037b057ef204b40b9783925c7da69c84caa103735a40a6307fab02a32fe1ed98dd6850fec6aeafdebfc4e4c330aa9c310a0966955c0020ecf78608c4d0569de36de7f6de9cf94e94370a6c7c2b4b773d28a5f92ab4b546eda49bcd15289b8885ce8faf75917bc35dd4748e010438784bb43236c7b8f14d4d08d529fcce14a4019a39b8c20f0cbe1385fb15d445f46b468c9633680d732137f9e0516df925434fa72c2545e9888ab7d7b1c09406fe55e46a093d791ab78a3f7a7de86ca4f1cda9fab09a308c255b0a69e12dbcb50cb56c0e33474cee8e39aa0da2f71739c84a2344caedf1e3cbc649dae16b0182ef330c6ff92d85858219750a032e16cdaa12bed259d08ed626dcdea398ec32e3f7b6e287fdd8090e8b5c8223e498fb52fd8e68e418e264e1af0197df4004264d6e0b52137ee8033824b2e7cd7f40326afc2ec940cea8ba4a8fe056ef66e5f0958738ac8c28156e9a76bfc897d10024518c8182a5720658feec1e949b9173c9ae776b08140cdbf5e09fd9faba8672586ae2ea90b174b0d00bb790d079b816d5d02d9c7916fdc147bc786a6ef977a490ce3b01bb8d6e381c1568194087b73407a969a21946a2234b4a00c9ddbdb87b200ce15cd8a8f17035bd61edc81c930b139b557bb45ce0f376e37b7fe831ab41f345bf4c09c9baa64da6110856dca20333aec93e2c16bff15f5be798f9b4c5f3cd32ef7b5c4da622a5a7ba233eeae6f2fb2ff5eb76746f446350d80658a733f0427040e3faf070503284114f50daf6ded8a12511f749b3c21c717b8d094afc21871ae7a742453e31db0945580be5a9be2178d65e543b002f2230c489c8bda39713a3179f3b2891a607724f82574c2a2d7dcaee104c24a9e56099a41c9d409d34a2ab9b0f4970650aa1a48f7d99bf9f4aa3020714f599180a0cd02ba48856827de62b6e1009600ddb5e410b0da27965f4d0db46792a608698edd15c55bedb54cc5da232ee70a9f618b4c60d5d9e514cb97f58842d110bdfb929260aaef69e458fd9273f5615ed15a20383a18f04e4477f86e8b105d9a0fc23b3c0c84901362d0ffd58f119e5593b04dbe7e69f6faa7459facb87d4e5658b1f3c5d32f99ebcd25296edfd9fe5260ea0d089ace36f3ad4f0a54e25acf22d37bd3ec0bdbc5cf2d20e17a0ec4955c237a5a6e737c468eab6fea3774df3173b73c4b65e22bb630e13bf8bcc8a9531ad0b8e06480ca22c61aad67a0a59fa2639019bb593cfd1a53be526807b5957f564070dc7109b3bfcde44c48110b7ee23c7586942c657774b18ffd1b4a031d155c341d2559cb18293ef3c73126e641a9c31767c76d401d3a4737a8a465c5dc91f9c67df96d9f0f0f14f4f1e7bd40e3a037c84ebf954a0081825c4a424624314df86bbb0c4e0b6db28afb41a6006c4b96d13af5d5f7cee10887c89d84ec2ea6c9247d818381bda09d0b96b34b866fa0b5f887c864fdbb1c35d28269465dc27607cd6d6c0dc9e4bfb1531c7e6edec68b1fbc51a85834b0895141b7bc835659b2f76acd4846350c91498fff505bce0de185f14b397018d8030792dde833193f2a941bd5e196b718261a549010fef81b70109a1f26fdfde4f65496051ec46bbee54ea978a331fc7e21fac9c19bdc8a58d51a1a827237f429ea486f9ffccde69b8f93461f93472881f625cf4d6214a8bff850c56f363021a257a3f37864f162a0d9f432ed87defc6565820cfa1f855356da9edc882c8783bf58e308e84f1c916e457aa6887269089d139c7b76f67a72c7738adf791c881ef853f31aa2c9b46ce16cd1a7bef0d9e6a899089ed705ab3953b14cd19dfc5ea947198e42485c8d7ea556bb455a1304c5d394f15a9e2a6edea09386c5c8fffe6e74c42995bc1a00d2d437e9f10681d0925da0d7a5c9b02b0e76a74d073cf87452b99ca4bc60ef35daefac4719b198e7fe72df0dbee87d84eb967d70fccdd9b779e6a201e789c98fcec209c281842c2f98cc1bf9f1e51f73b6c67e0812254c9f4dd833f117eaa315db4efe213d84ecd0bb707068e3df7a3432b5ccf35a725af929544827170b461edd520303218e4faac0fbc52dbe90e015a702434d944c98d11bf97fc9305f52173ae8c620ef4d649d81377f26c755205028105071f03d1caede7001d52c7892308d8fdccfcefcae6643271192e6e1e3e09aae9b3ff90f866e19f3e2e030378b7b6105e5ab034f8769fdb8562e83342009ce62558e838419a85ec655175d94d070830ffe8be280c53e09dc274f14d7621a7d1e6b1914e6ec899f83563890334e9c49a53fdbba88c07a320356983b6fbc75a58b95a4dee21686a30ab8a180182edb57519e3aee58db939c2998051e55e8a84659d1c62429ec60e0121d6db1be7875cd69cde8c56a6b819bdf11c3e078367123ccc4ff7c770505b8ce780346dc0283636d59e8d93c1912115f6eacc737fa3e3a4d62ad22487c4d9fb7406b32cd654bc49c40fcc6378e955f4df4498adc3bec700002d0a3518558b77b7feeb6c41316fbb7a3968183744530c4a5d1228e8d3ae075d0922f052cc008aadb150b5be3469174a2ce1d80ee72c38f85ffda4fccdec23b94b2233fc70b29569b6f16c250c17813ecfc1705fd22457262d09e441f4337f69ade04ff08d4365dcf41f1ee8bcefbd9f012c805b0c322288bf50fa5de87effaf21169b6e769c15b9198d097ed3b2b0c46dafef1f6ec6a380c033fba870d7beae85403de474a0850532db13866cb8c7e33c2dca5fa7ebe80e9b32761d986ec64b6c515cddece4b3883ce24dfbe1150c013eea1155ef37887cc36e0ef000009d0ee46a6a2e382f8b351463690b7c8f0341fe4214e781509abb1325042312c1242a4631202c6cc6d833f0c242df2072b6e313065902230c927e463be210855ccb8aafe08ec8cad9978fbccec68ad5a8cf37902107eafedbbddc889b5fb618a58d4b2370ab661fa7c4348c65f3c66f7c7985c83ff87cd5842a87d62b4472288d1d885dd3923b4cb9247478f5920849cd304c659caa3655c0b47e0b623d5df267d9719f9125e63dac71518cc3c9b114f8dc595f560f120d522178a14dd00a1bb9d709ada6f189a45a2bf5f59a8102b0a1d7a76cad4c90c41163faf67f51352d3e9e78758a9b92f99f204b979f6760e133c2c40715dd63810d191c0cf2dd14563acf664e2d0b79c020e31395c5f1a8fb85fb81bcc9f82467fac80b87fac1f390e22c1fa341e1daf5827271962f0c8b80e95e02b69cd8d9462ab8f471f846a9f25d3f05dada76a95db0f413b2b3fc0b47bb326a1843a11fe9dfd0815b2f4e696d7a7ff90ab5a9ccc3fa4fc390b472b47362699d1787e995bb138608cd3a28b18d707ca690fd584e084c3b2972436d75e1e30856f1760bd78e58048287a0dd66b7512a3a6f55ef7736df6d66cfc02072c609b20553779f0d1375a5d14e31bf969e37b2287c925380c5a2bbd7690d73dc229cf7a7ca1d05c3adfb8159fedadc7635300a8488bc9edad429ee571914680e25ebdd9fa5f5e6a8c51c28df9c92fc4fdfe0e2e3dba38354ff96c633aa1571b1c706ff3d163e4c794063a0a347906d627fb93481c1f9ae6cc5ecfffbe79b802eab57c5694c6da188c5dd910da40c4ca5f94734ca54137ac4bdf9b2f4d7bff428bffe5e7ef0eb3065e1e62cb8826df90cece4c916d48371da4f7515e4e4c53bcaf971bb7d3c1e9c2a1c5eb563e994d88475988cb0ce38b3555c944777cb0f19482343538fadea007c5a9bca81655554f3d2ad6eb8377f3fd5b026e7c0504d2bb30f8788bb5c7640ed53f4bcf6012e7739175454d676feddbfb4d7aa313642f72e1217bd7a68740f2804f02a9202ad7f9c6a3f25557b5d58527dd270f94e91e32543657d6f2132f2f39b88a8fab957715a76fe5c7d31cadc2354376db4a265431148bb3a423aeab691a6210e67807a208d6a9f0face308c7f1d46c58963ec8921e035661a02f0e8a737e28e6f67a39d0ae6c4ad03af4e8009a28e62929ad0b6c2ed8bc0b3bdf3177fbd1d615bee7b5d44a638e65adabfc65f085c4fac27d7415f492e86686e0cda7d8d517819ddfa6b8cbac26905ebf1df891ad8fd04b93f620586ed39b434ca611fa801488b87011b90ba663492e6a23935d2c4eae7d3562609bae041787fbd99f28b580a843f09eb7982d8e809370054204e8a3b84caa73e2eb9b81f16c080029007f000001c3177540199cd67023617f729516cb8634e7ab8154f79a2cf89b776e9fecc510aa28d308ef77badaca37632803aff4d0d7f098fa08bce561fce249fbe4b6d58d6b7b3362f87875f457422a6247d9c9e9cc75ec56c557711a3fc84f0ddbe95ccee85e9c6d7f000be348f5994aea7530da90c5b651c5c6bbaa5b4b0fbaa0e6df638676929809c0d458669b5062cc7cebf776a55426684153ebd695aec669287f8e396cc5d41369385fd56423728fddcb60a6be6f3e9d7457df9b1a9fa29eef56c708007300", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x3514}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r6 = dup(r3) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2191.913595][ T6643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:05 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2191.973230][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.018088][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2192.096086][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.148695][ T4365] usb 4-1: config 0 descriptor?? 04:41:06 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:06 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x6) bind$packet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2192.646263][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.670982][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x20, 0xb, 0x30, {0x30, 0x9, "128647181b83691462684b4a1fe6dd77a59cdc87cd131d3c5ceb1e00cb847586b53939bc07ecd42daf53380f20d9"}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:08 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:08 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:08 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair(0x3, 0x800, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async, rerun: 64) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) (rerun: 64) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) r5 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r5, 0x19, &(0x7f0000000200), 0x0) sendmsg$nl_generic(r0, &(0x7f00000037c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003780)={&(0x7f0000000240)=ANY=[@ANYBLOB="143500002300020026bd7000fedbdf251f00000008005d00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x3514}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) (async) r6 = dup(r3) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 32) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:08 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:08 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x6) bind$packet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2194.193131][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2194.199389][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2194.292564][ T4365] usb 4-1: USB disconnect, device number 79 04:41:08 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x3, 0x800, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) (async) r5 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r5, 0x19, &(0x7f0000000200), 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000037c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003780)={&(0x7f0000000240)=ANY=[@ANYBLOB="143500002300020026bd7000fedbdf251f00000008005d00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="f88d4432a320c6d653f9a534efc76f8a2c86c2ff3a6d0535b8b44f316a5d2a45a42af9547b04c7f45425db8b0ebfdc07dddb0846334c63cee28e9f80b807479ee2ff4c49d2a30327ab9cce28ae1355235dd6b34982dff9760078db8390880b13b9088cc9172e01a76486f10831135acc87f3b993e0aae78e19060221ccd1c16079f0fed98849e497ee9afb504d46e052a9f278b751a9265a49e71e6b59c26c649a733d07254372eb9195147b984a381ee5f0b26948bcc41b8e9d645b31f26419be6ca2dbc6528532dc6db6f9c55048fb9865a7d46e48cfb6cfb221b5ee8423ebec2e4b0ac77ef155362c9114c0f2c82a06fc024f5f734bf04b7fec3dd28a5fd5123aed2898eb622dd1098403c469c58b55852217791e985acf65eccee917cea9d4432ad8a35f25f395c5a6949d18815c6dbd687f49f3cbca95a45906b52018c50a88e034e66b1f922b021483d1d87edfc82b956ca00ffd6d817b1fe000978031ab257aee762de72049c80e282fb38d37b6651f66fefe91278066920057d73abcd7e8c3ec9281035baf96bd45e0cebdcf8498d64e817461c0385fa9b9491eb65371f1af9cdfeb9e78ac24767be25adc851558fd15d323f5eb0277e90f795ca48b67a992c1d966b53c421e3f3dd312fccbe665826479c3d4432511f420ea44c962994ac7e813925750b7686b3f51e5465ec78522578de719c3f7cb9086285f687b052d56d4d27d7d06f73f4732372814ad7869c451bfa843faf4b2338f15da9341eb1842ed20f0b94e8750e21578a9abd1a5871f1908d6a4c3f41e88895c13f7021130022eaa8d9f14fbdad7445c38af83e1d5ea70e408248f59b574f944b61b243aa190d66df7ad02e1e03b05856764dac91fe18a1166eef3087dabb8552b0a8bfaf10dbe6e2e5d429b478a249e8aba76636c4a894bf991960a8fb271c0f73034a5763088b7e396365d03cbfeafc9726a8a1f7074a98b652d0244fa89dd2d79deee1d04374fb78a6aa3a359078963219120dae068d70813dfa0b6c311d654304a1a09691ab5c609b595cf046cd73ceef0bce331e5546c54c4b551dba9477629b94a591a37d2263152e1dcbc43f0711c2d9694cbbb300470e120b5acea0dfe7b99e054d77a4a84f98cf68d18da64832362f7bbcb64a20e75dc39747e2e203f279d26dcb4b12ec8c96ceefb1a8ad8bb8643f25dafef6c7c18ffea0e15c56cf42411b1b2de6e73a972e91baf3b9710bed5b47f0a067da5570e7babb62366dd29c68acd5ee5881fae7f6f5051c24e2512948ad4edbdd753128864f7bc5f502e276bee5dce8cddb54d0e1467e30d923aec8c9cd5b4749d0933037637f483fdaad44460e1b70791bd729a8d5cb6d2313f434cdfddedaf2bb7b5498ac27bdd15de71260e24a2de3b186dc659c06e7393956e2a7ecb8e6a2a52146fc3feb48557dec9eb8ad0a781a99178e3cfa70f2e61bea0733e8c6e4e0539491040cc3d8147ab9903dd06fd4a07fe4e43adb532b277d072809568feb9503d1ec81e9deaad021f2ee5bdacbfa3def6fa5e2c45a5b3cf13679def2249334298478bc0387f8242ea40368c714931826de9820f3e32404cee81a29c7b75049d17b7a4669c4f3f5072a3ffc0ccc1f7266d5ea696cc8dcc9b1088fa6b12ed78ed5ec372738ed9da1f611d15a6bad71c6765f227843ecf00bb89deab4cc3473e70e6d9dd68cadcdc52495611c73d658be295b635e55672fa09640eae0e80c24219f8ac66a20a076e285d49ce47d1eaab1e5a15f8e5d14c9f7ca099e8897a6f2b2935a904d1e872e0348ac5a3cff4fc16220ee84acdc6cab33421503476aa401b2b35f6a6e614a1980b8e387e625b90a59dbcc3b4b3e426450aaacd2a24b8e6662110122ee463794388cb01bd9a9ed1196e1747d35eeda257853e0e1ea2a0dda4f84b4abe147e214efb463d20e7493c800569c99a6d9df4c272b3076ecd213c056186ddcba2c5ea1c4d4b691a83f052f04e2210439af3b42aa3d49505f77b97259a34e23bdf0a4abbecda37262147c69ea6b62830616fa964b3dae86007036ac688e37df2119253946db0adf05cffa2b6b21a58c3f9170673ed101e0a90d143e23039a332e19b7ad9d7322a987c6d654a61c8771bb7f3cd56943bf1d3a3358ec2fe30e279efa1309dcea30c874557074ce07743be6bb4f6051b201762798468992056115f81c14ac75d0965b1152eb2d2d99ecf84029ce6d3d74edb185c4f0bbc5d53064e762ec13c237cd0db4ec796227e8fd66cee53d60dd9f7f57f882809fb6b82870ad21372fa354f2a98ee4a228736702e1a6623ac820d9bba7bac559842b94f790a66ab1f3b6d0bb7e474cb6b4303b0ca8a81d57762edc0cbfe8382a9a32d6deb2ee185a1b649d1ba53b2b61f761c95930f8184be1acf537827486a7a0936ee42e868e0f1eb4ff31175d15135ec3372668d3043d2a082ee52496cd20340cd69bebf5f485657e5900fdfd652c96a508fe03afe6e6716e9602d96ab6ae553a9253aebaa90ceecb8b150978e7a52f527f15866b8bea2eb26ac4e584b8c967732b954ab894891484e7131de9fde0f4a2ed68bf6b6f4bc532c6cb87331d770cbca8505718f0a0b0f30211d23e946fb2916734bec1fc3ce3edcbd645a56bef2c0572893a85461340b989f9bc573843f2c0954cd54d19cc6a71b8683a0432f664ebc2c17142f07bcb811451a1cd73dfb36ff7d032def8df02ae63b36dc9c5b318c5316deafedfa18002dee7d659d559b17ba7541491c83dc26f558f05cf4905b17c26654a78ea2d3b9600c735f7185ea80720089b0865ca3639f5662df960e579672103d09521b6020ebeb09d639bec25262dead59b21372fa2b7b96075a6e78649f33cbbf45482a54f121864ede71088c09d1559c5b53f481c7a012589bf841dbd9a5e369f80c52109cd49dab58ed4348918a7c4dc38fbc7e586d7bc2afe3c13f84d2096d9230cd9385570434e09722d29342a1bc655d609f4a22f5c0587708f95af8ec3b8e50619ce1e844aab15d0ad3389be7ff5c4b664f2baf011449dc1e60821bb44f161b6323b0803899cef5023fec8bb119b115db9407ed5d766ce3f9588905cb7a5bb0c914a6b71685a3337daf1b2a82cd02c407f1f8236d068ea650079a417f135c8e7e11751ff0dea616179188f181bacb3b25e0541a8820b509c7a4d0eb0bf05ba598116f573ad6aa01515b463d9bbedec97d4de0b7ea8d58e362f0bf4e0d8fde54cabccce6ce48be7ae594f933434c440362f9a76948cfb8597a3f7b4cbabe7c4c3f4475d916e3a9d0e4744d3f3213adcbadd5feef1d097d5c2d11b25049dc961ae6a10e684c5214794e12ce640c07dbfa46b6f4b2edaf9fc6eacbf8ce2d4c4c344a19509aba833bab6d30eab25fa5f9303b87493041903748d43c8c8c477147ed93b5c05d8da0f358274d370e116a43d26e908f68f46a703fc0cdc5f1fd4124bc240bb6241047bc680c10cbd5f1ea3d2aefa6d10b116c4396f4d5d8afd2d72e37cfa09093e9e18bced25a5b679551af23359998f9c0340e0c64d4be9f06b0c288f437266e37605db040c621d319fa7d4bcf7f4ca633d732db8ea57125ec88b9f6caab3b5e1c88e2f3fb1c6501982913ba7ac014bc42c2d91991a7fb4ddad2ef17bcc3061bc9ba54a3d9ed4004fc401b1fb0df9ad7b8acf2016757858b48842f0deb98c108c557c83fae90ef5fa9fcf00815121ca56fa6c18ddded469924514f064e38d77b01cc21a752f49c4e6a889f41b512ba62f2557c7c8646d5ce1c58b14c40d85be6db9a7e7a9066c709da0a00036beb223c203d84b598ac1f407ba39a1165f4e7949dd5019312540f67ad639e855b6f2eabe468bec5616709b811803b9ec6d08f16b6c3c94e692c70bfae2f229486fb4f92a732bda92e55750fb6ab6c1346e51ad0928e29104c515f6fb9b7c69d1dfb2483e5a4435709cacced4d75ab46607636622cd70bb08ba9d0f3f2ef4dc1e8c2cfa964ab2e32fa955de514f5b891ccf0e0059ae9d9f0ab1a987c08a60d15f711dd8f3b7ec41b47a9d94cf457e6b3312036d5ae62ad435cae95204a274eac5acb50ac951d3a2a306edffdee8751bac5e1f8ebee2e21a621d72089e66854b200f5a1204ab9259ce7ce41570ce7d5df862aebd0469c2661f0d38607e2ca235e223fc779f059f6ac8b42b611e57025e7a57a536e8e35b6d2c767112b47579de1c85aa7d5443c9bec5e0a223db4fa97e99eac09e82e1f132cf54c19685d0ab076260f01d0a6ed0b9e8af5b8b730f51db54a4759dc329b8be5f765638779fa7ddaa3d64e0f3a03ceeadd12435db1dd74eba9d31f34caa10c5067d49fbed88b9f9aec318248cf706dff856359a3cb20261d617955b88af07a018d56fdf336c418ee2a64eaa039a9f63dc469ba9e2dca2e014c1d7f14f0992e04e2697df24771a3b5327dc76aade03e3be9cdd381a9031e1858962a6c3477103647966f77260142cb7bd99d3badc748b34d1c24fb5bd580117506116adb9f5cff8a28d23d97270686be2001a37c389d8db8765fcf8c11d70ef7e3488cd0b899a43c7ba2600ed5783afac220c3154fc294bf0d01357d975deb19a0d6a8a166e4eee1fb598dc6533c4dfb580ffb3eab9b9a73cb1a36c00f57f14f82f6dd6a24679c0551ff93c131f988a16c847919b650249116a6de2a140be3cf8a6aebe43b96e03fed7af0c15063cf5ad77e049d89676db7708db03e1329656b7b47380b98bed62bf52307d3edb5ac19b00bfdeb489aa9560365b49ea2d75fd445347c2f63b9428f24d97356f4674cfd70a164b834f137ceae56cb67f3b8032c69dff341b890c9e5bac1c671f6c506da273f8e1863aa0bcca47b846cde920ebc5bdf382487b8f3cde6992ca169eb782253964de89fbba4a96374c6957ddb38a6f4f6b005297cf93b4e96a9f6dabe32da478fdda90be3c9131b7890e75f903d1bf3ad0ef237f6e36bdf97e79ed2495de1bbc02062c702ccbc225266749b33c277e6285698650c8c6df9d3fc00e46d793116fbe63761d0f3dfbb63e403e7199e03f4db12aecf89178ba242ed36c8f6d33e765faf287f28f5eb612a2eeb5939017c64c0ad24b1b55dbad1d9eabbee8a50756d4cee25173748cce4ac54fdf0a200f4728d3e98772d910eb98adfae1c7d7a3522546f80fd4e9755d2828a51cae0111f1ca56c06c584590c6d6c2e56068da435aeb1af63afb7152c3e5d8ce69714278030e0ca7e92643861ca98b24884ccbd73a6fc18e11ac47c5d8885c7f7d06b3795a26886e717a39d0d2755bc3838330eb56d5fa390446566c70fd03fad14f216c904b4c455ba422a6083939f92292a0b17b82e5bd63aea440090dbf2bd1ee3bf64f3259cc0bfc68cf48f5fea8e7b22f1e3798aa48e35f2c502ccc85f0ed8f3655d79a2cc9fd0050d6e811c71b97c21146123b8f162716448258cd8bf8493b30f73141f01150c6e09f145eff08228a634598b60ff58c04b2828d5089afa13e0d9d26b4ab7128db33c9acc776e85f679436d78eba6f5e89bbea7b498b4f4baff4c05a00e38ab17de8d84cfc344dab49a3be89d2042f56e333cca991eab41806cf9207ce6bd472186e30b504630799c442dd88b2dcc12193bbb3bc77e36551fe3a002a8232b7c9b5d54a136fbdbbc5f1c68a7370721bad84f714c63f2bdaff03c5f789560a15b210d4b2088d54136721bcc3e0993cd2700c60ecfdc07ff7e2538e767f6f053e28e2eb82a99bd7d5ba8960613fb400e3b7b636ff06955f46869b3c8e6d92990ce0b2e2e139976bf39cc0bcdaded574cd8839a1929e71203d04aba3d070e32aa285854cf28bc747791cef195ca343481c818d92b2b43ab638cb5eb1e1b82e1f864644cb822fcd1087e688d11efce528218e38093f8fdb07a569f957c38488b9a767e002761e9a2ce7cea8e3dc3654f36b8d30ccaefaefdae9d13b6169fa94a44f3abcced0ea384da99cbd0e1676c6b0bd47e6a53c7b8a443201c9c389f65cac6433faa4a75c5a62d52d39a18c35617a329ca32b32624c14da69c703b844ca40ee63f315cdfb99149c43d95710e2944c45013373a8a7d15bcd84b9a9cfd1fd312608b3827d8678e4f834ae2ab8d630fd26ea70b8b40b061b44dc6e02ca97b822726de19709646258e2d9b786836457dbad43471f63de3d923d42ce3d4d261b1ac071aadfa9cbc86a42dfb56d1f5356a08e5129d556003af3296758e5688f0d0f5408ea5ceba8b2d39deaea6ce98a527702d57294f85eb5bdfe171cdeb8a919af1521ef0ef14146e6af677b3f6a0f13aee0bdac625b33aa9266230fa0252e266654326ddfd0fde9f7fd7434810a2ffa8a3043ed4f5c2163d7eee7aa4a34db2247d9888bb051f3f272a3999600ab18b0bbfaedffe51ff0d7a9be85220a0b9d18ec2ba0758b682e9689b0140d758d9a58f9a7d197bfbf5fd3037b6eef4e78ce6d7f6428ad0ae8f581c7872272aebe52b9c4773ee569ee46f67ebe454b08f8c6dcbfbacc23b8c1d136a2f8764b19c3cff764f65d48903d57f6afbf0fe97e6d9dbe180917e12241096eff922dd662fd9adcd287dd6a3bb04ca66e2bdc8e6884d9614cbc7ee1d800bda2d7ca152c9ff0c70a4fe9537108095a291778da8c235f57c5c853de9fbaa95acec3f7bd8e2de7275ed371ad627183fb5b1b4ba05d29c634760aaefe228b13af554c6c43687642e7d1c520841ba412c35c262639283f80d0751f7000000"], 0x3514}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) (async) r6 = dup(r3) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:08 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:08 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800, 0x0) [ 2194.653229][ T4365] usb 4-1: new high-speed USB device number 80 using dummy_hcd 04:41:08 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:08 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:08 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = io_uring_setup(0xb17, &(0x7f0000000180)={0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2194.755469][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.943358][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.033329][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2195.083482][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2195.107268][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.173122][ T4365] usb 4-1: config 0 descriptor?? [ 2195.823854][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.143191][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.863355][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:11 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:11 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:11 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x0, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x20, 0xb, 0x30, {0x30, 0x9, "128647181b83691462684b4a1fe6dd77a59cdc87cd131d3c5ceb1e00cb847586b53939bc07ecd42daf53380f20d9"}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:11 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = io_uring_setup(0xb17, &(0x7f0000000180)={0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) (rerun: 32) 04:41:11 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2197.213210][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2197.219763][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2197.246941][ T4365] usb 4-1: USB disconnect, device number 80 04:41:11 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:11 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r4 = io_uring_setup(0xb17, &(0x7f0000000180)={0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:11 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2197.603218][ T4365] usb 4-1: new high-speed USB device number 81 using dummy_hcd 04:41:11 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x33afdaaa5c55adb2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:11 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x33afdaaa5c55adb2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 64) r3 = dup(r2) (async, rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 64) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:11 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2197.903267][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.973106][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2197.984314][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2197.993496][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.993971][ T6643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2198.011404][ T4365] usb 4-1: config 0 descriptor?? 04:41:12 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x33afdaaa5c55adb2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x33afdaaa5c55adb2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r2) (async) pipe(&(0x7f0000000100)) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) (async) 04:41:12 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:12 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x0, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2198.943153][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2199.983232][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:14 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1ff, 0x141100) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:14 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:14 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:14 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:14 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x0, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2200.293068][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2200.303133][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2200.447525][ T4365] usb 4-1: USB disconnect, device number 81 04:41:14 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async, rerun: 64) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1ff, 0x141100) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) (rerun: 32) 04:41:14 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:14 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1ff, 0x141100) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 32) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:14 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:14 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x80000000000006, 0x5c1d01) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$setopts(0x4200, r4, 0x0, 0x20) dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = fsmount(0xffffffffffffffff, 0x1, 0x8e) write$6lowpan_enable(r5, &(0x7f0000000140)='1', 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2200.842994][ T4365] usb 4-1: new high-speed USB device number 82 using dummy_hcd 04:41:14 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2201.023490][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2201.049053][T13846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2201.078869][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2201.088565][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2201.099361][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2201.223074][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.258914][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2201.317734][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.375235][ T4365] usb 4-1: config 0 descriptor?? [ 2202.153670][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.183256][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:17 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:17 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x0, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:17 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:17 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:17 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x80000000000006, 0x5c1d01) dup(r2) (async) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$setopts(0x4200, r4, 0x0, 0x20) (async) ptrace$setopts(0x4200, r4, 0x0, 0x20) dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = fsmount(0xffffffffffffffff, 0x1, 0x8e) write$6lowpan_enable(r5, &(0x7f0000000140)='1', 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2203.363167][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2203.369211][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2203.546299][ T4365] usb 4-1: USB disconnect, device number 82 04:41:17 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async, rerun: 64) bind$packet(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x80000000000006, 0x5c1d01) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$setopts(0x4200, r4, 0x0, 0x20) (async, rerun: 64) dup(r2) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r5 = fsmount(0xffffffffffffffff, 0x1, 0x8e) write$6lowpan_enable(r5, &(0x7f0000000140)='1', 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:17 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:17 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:17 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_io_uring_complete(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000000c0)={0xd000, 0x10c000}) [ 2204.002954][ T4365] usb 4-1: new high-speed USB device number 83 using dummy_hcd 04:41:18 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2204.143531][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.223633][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.363047][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.389864][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2204.472178][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.559846][ T4365] usb 4-1: config 0 descriptor?? 04:41:18 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2205.263179][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.754675][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.763501][T12895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.772121][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.780961][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2206.303239][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:20 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:20 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_io_uring_complete(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000000c0)={0xd000, 0x10c000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_io_uring_complete(0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000000c0)={0xd000, 0x10c000}) (async) 04:41:20 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:20 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:20 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2206.503009][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2206.509099][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2206.566212][ T4365] usb 4-1: USB disconnect, device number 83 04:41:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:20 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:20 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_io_uring_complete(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000000c0)={0xd000, 0x10c000}) 04:41:21 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2207.083107][ T4365] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2207.163431][T19659] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2207.184012][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:21 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100)=0xfd, 0x4) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2207.344684][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:21 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2207.493756][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2207.536859][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2207.553501][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.564446][T19659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2207.583386][ T4365] usb 4-1: config 0 descriptor?? [ 2207.589171][T19659] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2207.606233][T19659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.673846][T19659] usb 1-1: config 0 descriptor?? [ 2209.423171][T16686] net_ratelimit: 1 callbacks suppressed [ 2209.423191][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:23 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:23 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:23 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:41:23 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100)=0xfd, 0x4) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r2) (async) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2209.543240][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2209.549329][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2209.569309][ T4365] usb 4-1: USB disconnect, device number 84 04:41:23 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100)=0xfd, 0x4) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:23 executing program 0: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:23 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x0, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2209.903502][T19659] usbhid 1-1:0.0: can't add hid device: -71 [ 2209.911063][T19659] usbhid: probe of 1-1:0.0 failed with error -71 [ 2209.943527][T19659] usb 1-1: USB disconnect, device number 41 [ 2209.973003][ T4365] usb 4-1: new high-speed USB device number 85 using dummy_hcd 04:41:24 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x111800, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@newnexthop={0x80, 0x68, 0x310, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x80}]}, @NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x50}}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '0'}}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x0, 0x3, 0x6, 0xffff19a6, 0x8, 0x5, 0x3, 0x3, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x6, &(0x7f0000000280)={&(0x7f0000000340)=""/173, 0xad}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2210.223346][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2210.383286][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2210.441742][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2210.522339][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.591144][ T4365] usb 4-1: config 0 descriptor?? [ 2210.609762][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:24 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:24 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) epoll_create1(0x80000) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="58000000680000032abd7000fddbdf250a0003000000000004000b0014000600fe8000000000000000000000000000bb1c000c800800150006000000080003000600000008000200070000000c00020000000000800000004b5474040bfb30aaf98ff2663f837a3d7c17bb687482a2a19437ffb19c6ab1d79eba22b5b68b17ae8933e96c38c6a6818919ec208f06ff6b4fbb59da148613040b55400e4bafee6f318ff20be794142497782b1ef2267bd65ae0d3e66ae1"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000011) 04:41:24 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = epoll_create1(0x80000) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="58000000680000032abd7000fddbdf250a0003000000000004000b0014000600fe8000000000000000000000000000bb1c000c800800150006000000080003000600000008000200070000000c00020000000000800000004b5474040bfb30aaf98ff2663f837a3d7c17bb687482a2a19437ffb19c6ab1d79eba22b5b68b17ae8933e96c38c6a6818919ec208f06ff6b4fbb59da148613040b55400e4bafee6f318ff20be794142497782b1ef2267bd65ae0d3e66ae1"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000011) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000d712c72d87c3861b", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/config', 0x0, 0x0) [ 2211.672904][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:26 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 64) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 64) r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x111800, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@newnexthop={0x80, 0x68, 0x310, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x80}]}, @NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x50}}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '0'}}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async, rerun: 64) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x0, 0x3, 0x6, 0xffff19a6, 0x8, 0x5, 0x3, 0x3, 0x1}, 0x0) (async, rerun: 64) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x6, &(0x7f0000000280)={&(0x7f0000000340)=""/173, 0xad}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:26 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 1) 04:41:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r5, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r8 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7]) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 04:41:26 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (fail_nth: 1) 04:41:26 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2212.562559][T22926] FAULT_INJECTION: forcing a failure. [ 2212.562559][T22926] name failslab, interval 1, probability 0, space 0, times 0 [ 2212.583064][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2212.589542][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 [ 2212.612183][ T4365] usb 4-1: USB disconnect, device number 85 [ 2212.626678][T22926] CPU: 1 PID: 22926 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2212.637131][T22926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2212.647275][T22926] Call Trace: [ 2212.650570][T22926] [ 2212.653511][T22926] dump_stack_lvl+0x136/0x150 [ 2212.658234][T22926] should_fail_ex+0x4a3/0x5b0 [ 2212.662938][T22926] should_failslab+0x9/0x20 [ 2212.667459][T22926] __kmem_cache_alloc_node+0x5b/0x320 [ 2212.672869][T22926] ? iter_file_splice_write+0x16c/0xc80 [ 2212.678525][T22926] ? iter_file_splice_write+0x16c/0xc80 [ 2212.684146][T22926] __kmalloc+0x4e/0x190 [ 2212.688360][T22926] iter_file_splice_write+0x16c/0xc80 [ 2212.693789][T22926] ? aa_path_link+0x2f0/0x2f0 [ 2212.698537][T22926] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 2212.704524][T22926] ? __lock_acquire+0xbc5/0x5d40 [ 2212.709487][T22926] ? bpf_lsm_file_permission+0x9/0x10 [ 2212.714918][T22926] ? security_file_permission+0xaf/0xd0 [ 2212.720487][T22926] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 2212.726495][T22926] do_splice+0xb5b/0x1960 [ 2212.730959][T22926] ? find_held_lock+0x2d/0x110 [ 2212.735789][T22926] ? splice_file_to_pipe+0x120/0x120 [ 2212.741109][T22926] ? lock_downgrade+0x690/0x690 [ 2212.746023][T22926] ? wait_for_completion_io_timeout+0x20/0x20 [ 2212.752149][T22926] __do_splice+0x134/0x250 [ 2212.756607][T22926] ? do_splice+0x1960/0x1960 [ 2212.761237][T22926] __x64_sys_splice+0x19c/0x250 [ 2212.766132][T22926] do_syscall_64+0x39/0xb0 [ 2212.770579][T22926] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2212.776498][T22926] RIP: 0033:0x7fb4c4a8c169 [ 2212.780935][T22926] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2212.800558][T22926] RSP: 002b:00007fb4c57d5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2212.809032][T22926] RAX: ffffffffffffffda RBX: 00007fb4c4babf80 RCX: 00007fb4c4a8c169 [ 2212.817031][T22926] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 2212.825186][T22926] RBP: 00007fb4c57d51d0 R08: 0000000000000800 R09: 0000000000000000 [ 2212.833272][T22926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2212.841367][T22926] R13: 00007fb4c4ccfb1f R14: 00007fb4c57d5300 R15: 0000000000022000 [ 2212.849380][T22926] [ 2212.878784][T22940] FAULT_INJECTION: forcing a failure. [ 2212.878784][T22940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2212.892608][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2212.923868][T22940] CPU: 1 PID: 22940 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2212.934382][T22940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2212.944526][T22940] Call Trace: [ 2212.947803][T22940] [ 2212.950752][T22940] dump_stack_lvl+0x136/0x150 [ 2212.955473][T22940] should_fail_ex+0x4a3/0x5b0 [ 2212.960213][T22940] _copy_to_user+0x2e/0x150 [ 2212.964758][T22940] simple_read_from_buffer+0xd0/0x160 [ 2212.970144][T22940] proc_fail_nth_read+0x18b/0x220 [ 2212.975180][T22940] ? proc_exe_link+0x1e0/0x1e0 [ 2212.979948][T22940] ? security_file_permission+0xaf/0xd0 [ 2212.985522][T22940] vfs_read+0x25b/0x930 [ 2212.989706][T22940] ? proc_exe_link+0x1e0/0x1e0 [ 2212.994497][T22940] ? kernel_read+0x1c0/0x1c0 [ 2212.999978][T22940] ? __fget_files+0x26a/0x480 [ 2213.004705][T22940] ksys_read+0x12b/0x250 [ 2213.008970][T22940] ? vfs_write+0xe10/0xe10 [ 2213.013402][T22940] ? syscall_enter_from_user_mode+0x26/0x80 [ 2213.019338][T22940] do_syscall_64+0x39/0xb0 [ 2213.023792][T22940] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2213.029719][T22940] RIP: 0033:0x7f2d0463df8c [ 2213.034168][T22940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2213.053802][T22940] RSP: 002b:00007f2d0541c160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2213.062258][T22940] RAX: ffffffffffffffda RBX: 00007f2d047ac050 RCX: 00007f2d0463df8c 04:41:26 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (fail_nth: 2) [ 2213.070248][T22940] RDX: 000000000000000f RSI: 00007f2d0541c1e0 RDI: 0000000000000009 [ 2213.078236][T22940] RBP: 00007f2d0541c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2213.086229][T22940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2213.094226][T22940] R13: 00007f2d048cfb1f R14: 00007f2d0541c300 R15: 0000000000022000 [ 2213.102250][T22940] 04:41:27 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async, rerun: 32) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 32) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x111800, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@newnexthop={0x80, 0x68, 0x310, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x80}]}, @NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x50}}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '0'}}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x0, 0x3, 0x6, 0xffff19a6, 0x8, 0x5, 0x3, 0x3, 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x6, &(0x7f0000000280)={&(0x7f0000000340)=""/173, 0xad}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2213.275553][T22954] FAULT_INJECTION: forcing a failure. [ 2213.275553][T22954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2213.304329][ T4365] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2213.304365][T22954] CPU: 0 PID: 22954 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2213.322350][T22954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2213.332438][T22954] Call Trace: [ 2213.335724][T22954] [ 2213.338667][T22954] dump_stack_lvl+0x136/0x150 [ 2213.343348][T22954] should_fail_ex+0x4a3/0x5b0 [ 2213.348042][T22954] _copy_to_user+0x2e/0x150 [ 2213.352553][T22954] simple_read_from_buffer+0xd0/0x160 [ 2213.357949][T22954] proc_fail_nth_read+0x18b/0x220 [ 2213.363027][T22954] ? proc_exe_link+0x1e0/0x1e0 [ 2213.367805][T22954] ? security_file_permission+0xaf/0xd0 [ 2213.373378][T22954] vfs_read+0x25b/0x930 [ 2213.377538][T22954] ? proc_exe_link+0x1e0/0x1e0 [ 2213.382308][T22954] ? kernel_read+0x1c0/0x1c0 [ 2213.386901][T22954] ? __fget_files+0x26a/0x480 [ 2213.391617][T22954] ksys_read+0x12b/0x250 [ 2213.395927][T22954] ? vfs_write+0xe10/0xe10 [ 2213.400367][T22954] ? syscall_enter_from_user_mode+0x26/0x80 [ 2213.406301][T22954] do_syscall_64+0x39/0xb0 [ 2213.410751][T22954] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2213.416673][T22954] RIP: 0033:0x7fb4c4a3df8c [ 2213.421102][T22954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2213.440819][T22954] RSP: 002b:00007fb4c57d5160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2213.449264][T22954] RAX: ffffffffffffffda RBX: 00007fb4c4babf80 RCX: 00007fb4c4a3df8c [ 2213.457248][T22954] RDX: 000000000000000f RSI: 00007fb4c57d51e0 RDI: 0000000000000005 [ 2213.465256][T22954] RBP: 00007fb4c57d51d0 R08: 0000000000000000 R09: 0000000000000000 04:41:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:41:27 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2213.473239][T22954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2213.481232][T22954] R13: 00007fb4c4ccfb1f R14: 00007fb4c57d5300 R15: 0000000000022000 [ 2213.489326][T22954] [ 2213.499776][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x802, 0x0) 04:41:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x805, 0x0) [ 2213.823531][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2213.855791][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2213.880154][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.916803][ T4365] usb 4-1: config 0 descriptor?? [ 2213.945296][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.031909][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.343257][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:29 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:29 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x806, 0x0) 04:41:29 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x2, 0x0) 04:41:29 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r0, 0x0, 0x9, 0x5, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @private2, 0x7f80, 0x20, 0x3, 0x2}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x807, 0x0) [ 2215.633222][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2215.659862][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 04:41:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x813, 0x0) [ 2215.885486][ T4365] usb 4-1: USB disconnect, device number 86 04:41:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x2) [ 2216.068456][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:30 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x5) 04:41:30 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x10, 0x0) 04:41:30 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x6) [ 2216.393075][ T4365] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2216.543494][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.611209][ T9645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.623304][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.637923][ T5981] kworker/dying (5981) used greatest stack depth: 21664 bytes left [ 2216.701639][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.783328][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2216.802930][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2216.812065][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.823243][ T4365] usb 4-1: config 0 descriptor?? [ 2217.103361][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.151631][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0xb, 0x30, {0x30, 0x9, "128647181b83691462684b4a1fe6dd77a59cdc87cd131d3c5ceb1e00cb847586b53939bc07ecd42daf53380f20d9"}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:32 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x541b, 0x0) 04:41:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x7) 04:41:32 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:32 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r0, 0x0, 0x9, 0x5, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @private2, 0x7f80, 0x20, 0x3, 0x2}}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 64) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:32 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x13) [ 2218.693156][ T4365] usbhid 4-1:0.0: can't add hid device: -71 [ 2218.701233][ T4365] usbhid: probe of 4-1:0.0 failed with error -71 04:41:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x180) 04:41:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x500) 04:41:32 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r0, 0x0, 0x9, 0x5, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @private2, 0x7f80, 0x20, 0x3, 0x2}}) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (rerun: 32) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2218.903085][ T4365] usb 4-1: USB disconnect, device number 87 04:41:32 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5421, 0x0) 04:41:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x600) [ 2219.202354][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2219.323133][ T4365] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2219.713225][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2219.731148][ T4365] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2219.749522][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.765538][ T4365] usb 4-1: config 0 descriptor?? [ 2220.223908][ T26] net_ratelimit: 1 callbacks suppressed [ 2220.223929][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2220.274514][ T4365] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 2220.302131][ T4365] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0019/input/input38 [ 2220.397487][ T4365] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2221.237496][T24344] usb 4-1: USB disconnect, device number 88 [ 2221.271226][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x30, {0x30, 0x9, "128647181b83691462684b4a1fe6dd77a59cdc87cd131d3c5ceb1e00cb847586b53939bc07ecd42daf53380f20d9"}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:35 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5450, 0x0) 04:41:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x700) 04:41:35 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:35 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000940)={0x0, 0xffffffffffffff09, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00008be2da00afb1252b9585bbe5604d598b710e4593bec0ea3c14fe28749a32e3254469e858f9dc8f110f6a105ae9bc66d6aa7d1b78", @ANYRESDEC=r0, @ANYBLOB="010000000000000000002600000018000180140002006d616376746170300000000000000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x80) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0xd}, 0x20) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000340)=0x10001, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r10, &(0x7f0000000ac0)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000540)=""/16, 0x10}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/54, 0x36}, {&(0x7f0000000980)=""/249, 0xf9}], 0x8, &(0x7f0000000a80)=""/2, 0x2}, 0x12120) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:35 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2221.745142][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.751685][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.778428][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.787517][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x1300) [ 2221.798936][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x3385) 04:41:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x8533) 04:41:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x1000000) [ 2222.093079][T25351] usb 4-1: new high-speed USB device number 89 using dummy_hcd 04:41:36 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5451, 0x0) 04:41:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x1800000) [ 2222.333383][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.513282][T25351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2222.555500][T25351] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2222.599661][T25351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.656406][T25351] usb 4-1: config 0 descriptor?? [ 2223.154416][T25351] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 2223.165921][T25351] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001A/input/input39 [ 2223.264261][T25351] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2223.351223][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.089762][T25350] usb 4-1: USB disconnect, device number 89 [ 2224.393161][T19659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x2000000) 04:41:38 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5452, 0x0) 04:41:38 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000940)={0x0, 0xffffffffffffff09, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00008be2da00afb1252b9585bbe5604d598b710e4593bec0ea3c14fe28749a32e3254469e858f9dc8f110f6a105ae9bc66d6aa7d1b78", @ANYRESDEC=r0, @ANYBLOB="010000000000000000002600000018000180140002006d616376746170300000000000000000"], 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x80) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 64) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0xd}, 0x20) (async) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000340)=0x10001, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r10, &(0x7f0000000ac0)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000540)=""/16, 0x10}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/54, 0x36}, {&(0x7f0000000980)=""/249, 0xf9}], 0x8, &(0x7f0000000a80)=""/2, 0x2}, 0x12120) (async, rerun: 32) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) (rerun: 32) 04:41:38 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x30, {0x30, 0x0, "128647181b83691462684b4a1fe6dd77a59cdc87cd131d3c5ceb1e00cb847586b53939bc07ecd42daf53380f20d9"}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:38 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x5000000) 04:41:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x6000000) [ 2224.867444][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x7000000) [ 2224.933097][T25351] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2224.960982][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:39 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000940)={0x0, 0xffffffffffffff09, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00008be2da00afb1252b9585bbe5604d598b710e4593bec0ea3c14fe28749a32e3254469e858f9dc8f110f6a105ae9bc66d6aa7d1b78", @ANYRESDEC=r0, @ANYBLOB="010000000000000000002600000018000180140002006d616376746170300000000000000000"], 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x80) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0xd}, 0x20) (async) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000340)=0x10001, 0x4) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r10, &(0x7f0000000ac0)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000540)=""/16, 0x10}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/54, 0x36}, {&(0x7f0000000980)=""/249, 0xf9}], 0x8, &(0x7f0000000a80)=""/2, 0x2}, 0x12120) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) 04:41:39 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5460, 0x0) 04:41:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x13000000) 04:41:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x85330000) 04:41:39 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000000000007000000000000000000000003000000070000000000000004000000000000000000000000000000010000000000008000000000000000000000000000000000020000000000000000000000000000005807000000000000ff07000000000000da00000000000000000000000000000000000000000000000100000000000000000000000000000005000000000000000200000000000000060000000000000000000000000000000000000000000000000800000000000000000000000000000900000000000000000080000000000004000000010000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f1f00000000000000010000000000000000000000000000000000000000000000040000000000000000000000000000000800000000000000030000000000000004000000000000000000000000000000000000000000000000100000000000000000000000000000ffffffffffffffff8000000000000000090000000000000000000000000000000000000000000000861a00"/424]) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2225.353253][T25351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:41:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x100000000000000) [ 2225.406508][T25351] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2225.427977][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.480667][T25351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:41:39 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2225.539084][T25351] usb 4-1: config 0 descriptor?? 04:41:39 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2226.024481][T25351] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 2226.096777][T25351] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001B/input/input40 [ 2226.274263][T25351] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2226.517535][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2226.978077][ T26] usb 4-1: USB disconnect, device number 90 04:41:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x30, {0x30, 0x0, "128647181b83691462684b4a1fe6dd77a59cdc87cd131d3c5ceb1e00cb847586b53939bc07ecd42daf53380f20d9"}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x180000000000000) 04:41:41 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8933, 0x0) 04:41:41 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000000000007000000000000000000000003000000070000000000000004000000000000000000000000000000010000000000008000000000000000000000000000000000020000000000000000000000000000005807000000000000ff07000000000000da00000000000000000000000000000000000000000000000100000000000000000000000000000005000000000000000200000000000000060000000000000000000000000000000000000000000000000800000000000000000000000000000900000000000000000080000000000004000000010000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f1f00000000000000010000000000000000000000000000000000000000000000040000000000000000000000000000000800000000000000030000000000000004000000000000000000000000000000000000000000000000100000000000000000000000000000ffffffffffffffff8000000000000000090000000000000000000000000000000000000000000000861a00"/424]) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000000000007000000000000000000000003000000070000000000000004000000000000000000000000000000010000000000008000000000000000000000000000000000020000000000000000000000000000005807000000000000ff07000000000000da00000000000000000000000000000000000000000000000100000000000000000000000000000005000000000000000200000000000000060000000000000000000000000000000000000000000000000800000000000000000000000000000900000000000000000080000000000004000000010000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f1f00000000000000010000000000000000000000000000000000000000000000040000000000000000000000000000000800000000000000030000000000000004000000000000000000000000000000000000000000000000100000000000000000000000000000ffffffffffffffff8000000000000000090000000000000000000000000000000000000000000000861a00"/424]) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r4) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) (async) 04:41:41 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:41 executing program 2: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x200000000000000) [ 2227.503457][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2227.522116][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2227.530785][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2227.585272][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x500000000000000) 04:41:41 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae10, 0x0) 04:41:41 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000000000007000000000000000000000003000000070000000000000004000000000000000000000000000000010000000000008000000000000000000000000000000000020000000000000000000000000000005807000000000000ff07000000000000da00000000000000000000000000000000000000000000000100000000000000000000000000000005000000000000000200000000000000060000000000000000000000000000000000000000000000000800000000000000000000000000000900000000000000000080000000000004000000010000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f1f00000000000000010000000000000000000000000000000000000000000000040000000000000000000000000000000800000000000000030000000000000004000000000000000000000000000000000000000000000000100000000000000000000000000000ffffffffffffffff8000000000000000090000000000000000000000000000000000000000000000861a00"/424]) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x104000}) [ 2227.954874][ T5169] usb 4-1: new high-speed USB device number 91 using dummy_hcd 04:41:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x600000000000000) 04:41:42 executing program 4: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2228.323234][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2228.375530][ T5169] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2228.421302][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.472586][ T5169] usb 4-1: config 0 descriptor?? [ 2228.623443][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2228.974396][ T5169] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 2228.985947][ T5169] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/input/input41 [ 2229.079125][ T5169] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2229.663303][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.877324][ T26] usb 4-1: USB disconnect, device number 91 04:41:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x700000000000000) 04:41:44 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae11, 0x0) 04:41:44 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r3, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r6 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:41:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (fail_nth: 1) 04:41:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='squashfs\x00', 0x2e4c3cb7548e9a8e, 0x0) openat(0xffffffffffffffff, 0x0, 0x620802, 0x73) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x1000000, &(0x7f0000000400)='/dev/fb0\x00') r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/140, 0x8c) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) r4 = accept4$alg(r1, 0x0, 0x0, 0x800) recvmmsg(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000180)}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/83, 0x53}], 0x6}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/33, 0x21}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000001740)=""/79, 0x4f}, {&(0x7f00000017c0)=""/240, 0xf0}], 0x5, &(0x7f0000001940)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002940)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f00000029c0)=""/254, 0xfe}, {&(0x7f0000002ac0)=""/247, 0xf7}, {&(0x7f0000000440)=""/64, 0x40}], 0x3, &(0x7f0000002bc0)=""/103, 0x67}, 0x20}], 0x3, 0x14001, &(0x7f0000002d00)) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002e00)={'\x00', 0x4, 0x401, 0x8, 0xffff, 0x1}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000002e80)=ANY=[@ANYRES16, @ANYRES64=r7, @ANYRESOCT]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, 0xffffffffffffffff, 0x1f, &(0x7f0000000500)={0x40, 0x4, 0x3}) [ 2230.419472][T23247] FAULT_INJECTION: forcing a failure. [ 2230.419472][T23247] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.508854][T23247] CPU: 1 PID: 23247 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2230.519306][T23247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2230.529450][T23247] Call Trace: [ 2230.532725][T23247] [ 2230.535693][T23247] dump_stack_lvl+0x136/0x150 [ 2230.540388][T23247] should_fail_ex+0x4a3/0x5b0 [ 2230.545080][T23247] should_failslab+0x9/0x20 [ 2230.549604][T23247] __kmem_cache_alloc_node+0x5b/0x320 [ 2230.554984][T23247] ? iter_file_splice_write+0x16c/0xc80 [ 2230.560537][T23247] ? iter_file_splice_write+0x16c/0xc80 [ 2230.566119][T23247] __kmalloc+0x4e/0x190 [ 2230.570574][T23247] iter_file_splice_write+0x16c/0xc80 [ 2230.576005][T23247] ? aa_path_link+0x2f0/0x2f0 [ 2230.580695][T23247] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 2230.586719][T23247] ? __lock_acquire+0xbc5/0x5d40 [ 2230.591665][T23247] ? bpf_lsm_file_permission+0x9/0x10 [ 2230.597030][T23247] ? security_file_permission+0xaf/0xd0 [ 2230.602580][T23247] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 2230.608555][T23247] do_splice+0xb5b/0x1960 [ 2230.612890][T23247] ? find_held_lock+0x2d/0x110 [ 2230.617723][T23247] ? splice_file_to_pipe+0x120/0x120 [ 2230.623030][T23247] ? lock_downgrade+0x690/0x690 [ 2230.627922][T23247] ? wait_for_completion_io_timeout+0x20/0x20 [ 2230.634017][T23247] __do_splice+0x134/0x250 [ 2230.638453][T23247] ? do_splice+0x1960/0x1960 [ 2230.643070][T23247] __x64_sys_splice+0x19c/0x250 [ 2230.647948][T23247] do_syscall_64+0x39/0xb0 [ 2230.652411][T23247] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2230.658336][T23247] RIP: 0033:0x7faac9e8c169 [ 2230.662765][T23247] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2230.682502][T23247] RSP: 002b:00007faac89fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2230.690958][T23247] RAX: ffffffffffffffda RBX: 00007faac9fabf80 RCX: 00007faac9e8c169 [ 2230.698947][T23247] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 04:41:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x1300000000000000) [ 2230.706953][T23247] RBP: 00007faac89fe1d0 R08: 0000000000000800 R09: 0000000000000000 [ 2230.714940][T23247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.722929][T23247] R13: 00007faaca0cfb1f R14: 00007faac89fe300 R15: 0000000000022000 [ 2230.730929][T23247] [ 2230.747403][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2230.767491][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:44 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae12, 0x0) 04:41:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (fail_nth: 2) 04:41:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x8533000000000000) [ 2230.913240][ T26] usb 4-1: new high-speed USB device number 92 using dummy_hcd 04:41:45 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r1, &(0x7f0000000000)={[0xc9c6]}, 0x8) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="90a02ffbdef7564f792a63c5edbc944263dd85cbbfc2ee83065dd2fee9a4b12cbe35b94697b95f07e81fdd30dec9f801d553aed5e71d20fef0", 0x39}, {&(0x7f0000000240)="c87397604d7c5bff2cc5cc953a1b5b964193c9cdcb146907aaa2e039ee4dd487f985d8eeeceabb049a570b61cd24f657dd9c05309b0bf909d2c303e15bb82286cf975121fe76d91d95bea94beaeba68c54805c3aa372931de6b83bdabf9bb51909927b5f57ac25356ea031bf24161c25c666c156758990908038c64197360b9bf05e9f1fe0500bba7d8be4fa51c28b6ac0e8957b3c96ca19c78d9033a430347eaba53cb281fc6abb66760f91eac98424a1914787eb2d141e09f31059ff", 0xbd}, {&(0x7f0000000180)="cc661f10917581881c8dbb6804b83bd0b0a57f97ef1f487f9923d3165c66b2e03c5e2f4a9faafaf80401554d422057e7f74a4858a759aa0704fb29398597af43106c3e4dcce6dfba10f1e4369a12af594fa570a00ed0fe9bb8b69afea2c68cdaf3771e1648ca19e84d3597e86655cd23ab970f884fbf05b1ff53dd", 0x7b}, {&(0x7f0000000380)="c564aaec1389a3d5c1f6a96f00070a82b87473c1921b751879b258d92ece724beecf9042406778eed06b01a13f9050e72ae0dcaf860ddac3ab491ef6f08bf8e86c446d485df57b962888ecffb481e048ebabcc1f96729343fb5b87003f86b714f3c7c77fd74eab6930ec262ccf28960dd3215bd85eda559aacfe040ba3144edb00ab8376ed3f9872e35f1065f090bee318e3e3fb0961817ea25668a495eaaa2dc609b3d3cb31", 0xa6}], 0x4, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r3 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x20002010}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r5, &(0x7f00000047c0)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/4, 0x4}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/248, 0xf8}, {&(0x7f0000001840)=""/174, 0xae}, {&(0x7f0000001900)=""/215, 0xd7}], 0x8}, 0x200}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/88, 0x58}, {&(0x7f0000001b80)=""/27, 0x1b}, {&(0x7f0000001bc0)=""/182, 0xb6}], 0x3, &(0x7f0000001cc0)=""/34, 0x22}, 0x3f}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/191, 0xbf}, {&(0x7f0000001dc0)=""/169, 0xa9}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001ec0)=""/16, 0x10}, {&(0x7f0000001f00)=""/183, 0xb7}, {&(0x7f0000001fc0)=""/98, 0x62}, {&(0x7f0000002040)=""/193, 0xc1}, {&(0x7f0000002140)=""/157, 0x9d}, {&(0x7f0000002200)=""/110, 0x6e}, {&(0x7f0000002280)=""/87, 0x57}, {&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/223, 0xdf}, {&(0x7f0000002700)=""/225, 0xe1}], 0xa, &(0x7f0000002800)=""/42, 0x2a}, 0x5}, {{&(0x7f0000002840)=@xdp, 0x80, &(0x7f0000002a80)=[{&(0x7f00000028c0)=""/172, 0xac}, {&(0x7f0000002980)=""/180, 0xb4}, {&(0x7f0000002a40)=""/31, 0x1f}], 0x3, &(0x7f0000002ac0)=""/229, 0xe5}, 0x10001}, {{&(0x7f0000002bc0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/127, 0x7f}, {&(0x7f0000002cc0)=""/68, 0x44}], 0x2, &(0x7f0000002d80)=""/40, 0x28}, 0xfff}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002dc0)=""/44, 0x2c}, {&(0x7f0000002e00)=""/88, 0x58}, {&(0x7f0000002e80)=""/42, 0x2a}, {&(0x7f0000002ec0)=""/180, 0xb4}], 0x4}}, {{&(0x7f0000002fc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003040)=""/25, 0x19}, {&(0x7f0000003080)=""/221, 0xdd}], 0x2, &(0x7f00000031c0)=""/236, 0xec}, 0x1ff}, {{&(0x7f00000032c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004640)=[{&(0x7f0000003340)=""/130, 0x82}, {&(0x7f0000003400)=""/203, 0xcb}, {&(0x7f0000003500)=""/71, 0x47}, {&(0x7f0000003580)=""/177, 0xb1}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x5, &(0x7f00000046c0)=""/225, 0xe1}, 0x80000}], 0x9, 0x120, &(0x7f0000004a00)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0800e9ff030000002e2f66696c653000"]) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r6, 0x19, &(0x7f0000000200), 0x0) write$binfmt_script(r6, &(0x7f0000000440)={'#! ', './file0', [{}], 0xa, "10c6de5d4172603f5965f0739aa936e15563cc07a8d4df784eae91e336529fc48ee7b054e762d8378a689aeada6382627a06f03d674f68aae1a41fe00b41f4a4ea64fc8942a261e4bb120782a3766014f27de12d1499b3ac6bc840cd08b5411c623ad2c5caf880956d245a61c196a36582480d6650988f5d414d926bffd99bb1889c953ce9c98d97c8a155345ab8b38ef4a0e42be8138dedb25ed4e4567546e25623aa2bb4dafe877e87555c7231e6ce4fbb8d876d1473126ba62b8f5de6bebdff804feac3ee458307306c0c84a9b207b4a4cc6b22ee5c9af58a1d14698ac1320e28841ed4ced31f2c9c"}, 0xf6) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ntfs', 0x200000, 0x1a) [ 2231.130493][T23273] FAULT_INJECTION: forcing a failure. [ 2231.130493][T23273] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.263163][T23273] CPU: 1 PID: 23273 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2231.273645][T23273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2231.283702][T23273] Call Trace: [ 2231.286984][T23273] [ 2231.289927][T23273] dump_stack_lvl+0x136/0x150 [ 2231.294639][T23273] should_fail_ex+0x4a3/0x5b0 [ 2231.299331][T23273] should_failslab+0x9/0x20 [ 2231.303859][T23273] __kmem_cache_alloc_node+0x5b/0x320 [ 2231.309261][T23273] ? kvmalloc_node+0xa2/0x1a0 [ 2231.313948][T23273] ? mutex_trylock+0x2f4/0x370 [ 2231.318751][T23273] ? kvmalloc_node+0xa2/0x1a0 [ 2231.323440][T23273] __kmalloc_node+0x51/0x1a0 [ 2231.328046][T23273] kvmalloc_node+0xa2/0x1a0 [ 2231.333755][T23273] file_tty_write.constprop.0+0x71f/0x9c0 [ 2231.333889][T23273] ? n_tty_close+0x1f0/0x1f0 [ 2231.333916][T23273] do_iter_readv_writev+0x20b/0x3b0 [ 2231.333943][T23273] ? generic_copy_file_range+0x1d0/0x1d0 [ 2231.333971][T23273] ? bpf_lsm_file_permission+0x9/0x10 [ 2231.333992][T23273] ? security_file_permission+0xaf/0xd0 [ 2231.334033][T23273] do_iter_write+0x182/0x700 [ 2231.334079][T23273] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 2231.334129][T23273] vfs_iter_write+0x74/0xa0 [ 2231.334146][T23273] iter_file_splice_write+0x743/0xc80 [ 2231.334168][T23273] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 2231.334183][T23273] ? __lock_acquire+0xbc5/0x5d40 [ 2231.334208][T23273] ? bpf_lsm_file_permission+0x9/0x10 [ 2231.334221][T23273] ? security_file_permission+0xaf/0xd0 [ 2231.334241][T23273] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 2231.334257][T23273] do_splice+0xb5b/0x1960 [ 2231.334273][T23273] ? find_held_lock+0x2d/0x110 [ 2231.334299][T23273] ? splice_file_to_pipe+0x120/0x120 [ 2231.334313][T23273] ? lock_downgrade+0x690/0x690 [ 2231.334329][T23273] ? wait_for_completion_io_timeout+0x20/0x20 [ 2231.334359][T23273] __do_splice+0x134/0x250 [ 2231.334376][T23273] ? do_splice+0x1960/0x1960 [ 2231.334396][T23273] __x64_sys_splice+0x19c/0x250 [ 2231.334414][T23273] do_syscall_64+0x39/0xb0 [ 2231.334438][T23273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2231.334458][T23273] RIP: 0033:0x7faac9e8c169 [ 2231.334473][T23273] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2231.334488][T23273] RSP: 002b:00007faac89fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2231.334504][T23273] RAX: ffffffffffffffda RBX: 00007faac9fabf80 RCX: 00007faac9e8c169 [ 2231.334515][T23273] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 04:41:45 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r3, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r6 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2231.334525][T23273] RBP: 00007faac89fe1d0 R08: 0000000000000800 R09: 0000000000000000 [ 2231.334535][T23273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2231.334545][T23273] R13: 00007faaca0cfb1f R14: 00007faac89fe300 R15: 0000000000022000 [ 2231.334565][T23273] [ 2231.334596][ C1] vkms_vblank_simulate: vblank timer overrun [ 2231.336285][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2231.753109][ T26] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2231.762985][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.788537][ T26] usb 4-1: config 0 descriptor?? [ 2231.837452][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2232.273973][ T26] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 2232.304459][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001D/input/input42 [ 2232.438972][ T26] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2232.863613][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2233.178863][ T26] usb 4-1: USB disconnect, device number 92 04:41:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:47 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae17, 0x0) 04:41:47 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (fail_nth: 3) 04:41:47 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r3, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r6 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:41:47 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r1, &(0x7f0000000000)={[0xc9c6]}, 0x8) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="90a02ffbdef7564f792a63c5edbc944263dd85cbbfc2ee83065dd2fee9a4b12cbe35b94697b95f07e81fdd30dec9f801d553aed5e71d20fef0", 0x39}, {&(0x7f0000000240)="c87397604d7c5bff2cc5cc953a1b5b964193c9cdcb146907aaa2e039ee4dd487f985d8eeeceabb049a570b61cd24f657dd9c05309b0bf909d2c303e15bb82286cf975121fe76d91d95bea94beaeba68c54805c3aa372931de6b83bdabf9bb51909927b5f57ac25356ea031bf24161c25c666c156758990908038c64197360b9bf05e9f1fe0500bba7d8be4fa51c28b6ac0e8957b3c96ca19c78d9033a430347eaba53cb281fc6abb66760f91eac98424a1914787eb2d141e09f31059ff", 0xbd}, {&(0x7f0000000180)="cc661f10917581881c8dbb6804b83bd0b0a57f97ef1f487f9923d3165c66b2e03c5e2f4a9faafaf80401554d422057e7f74a4858a759aa0704fb29398597af43106c3e4dcce6dfba10f1e4369a12af594fa570a00ed0fe9bb8b69afea2c68cdaf3771e1648ca19e84d3597e86655cd23ab970f884fbf05b1ff53dd", 0x7b}, {&(0x7f0000000380)="c564aaec1389a3d5c1f6a96f00070a82b87473c1921b751879b258d92ece724beecf9042406778eed06b01a13f9050e72ae0dcaf860ddac3ab491ef6f08bf8e86c446d485df57b962888ecffb481e048ebabcc1f96729343fb5b87003f86b714f3c7c77fd74eab6930ec262ccf28960dd3215bd85eda559aacfe040ba3144edb00ab8376ed3f9872e35f1065f090bee318e3e3fb0961817ea25668a495eaaa2dc609b3d3cb31", 0xa6}], 0x4, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) (async) r3 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x20002010}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="05000300002885af76002e2f66696c0e746788704f3145c3ae5f0dedc81ab88c75466886b5f8161b684711abf5bb020bdc8c958500a5d0f446b5ed12218db30000e884a5e3105cce9867c5c444635b279bb14ba40c53885028463c42036c972f53f957b45251f62e113bfd7d07c222b8cea14ee9d15f492c3ea6435cd2a8e5ed24c27426dad005ab0d92abf9661a5e5553952b4b84fdedf8a8fc97fc5de32427ac57bce10d17cc1dd514abb4f1f2befc212506cf2baac5813255122cee1ae440addb13ba96f4f3e5916f3f9c91c5556e5c9e4ee7dfabfe8875380244f73f10267f8b93a3f0d2b9b4ec7786657a34910000000000000000000037000000001c8d631eaae2fe0534236e482bbd9c6ba66090e777ce226fd6717f0f1f28bfa6d05fd05c29a1"]) (async) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r5, &(0x7f00000047c0)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/4, 0x4}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/248, 0xf8}, {&(0x7f0000001840)=""/174, 0xae}, {&(0x7f0000001900)=""/215, 0xd7}], 0x8}, 0x200}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/88, 0x58}, {&(0x7f0000001b80)=""/27, 0x1b}, {&(0x7f0000001bc0)=""/182, 0xb6}], 0x3, &(0x7f0000001cc0)=""/34, 0x22}, 0x3f}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/191, 0xbf}, {&(0x7f0000001dc0)=""/169, 0xa9}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001ec0)=""/16, 0x10}, {&(0x7f0000001f00)=""/183, 0xb7}, {&(0x7f0000001fc0)=""/98, 0x62}, {&(0x7f0000002040)=""/193, 0xc1}, {&(0x7f0000002140)=""/157, 0x9d}, {&(0x7f0000002200)=""/110, 0x6e}, {&(0x7f0000002280)=""/87, 0x57}, {&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/223, 0xdf}, {&(0x7f0000002700)=""/225, 0xe1}], 0xa, &(0x7f0000002800)=""/42, 0x2a}, 0x5}, {{&(0x7f0000002840)=@xdp, 0x80, &(0x7f0000002a80)=[{&(0x7f00000028c0)=""/172, 0xac}, {&(0x7f0000002980)=""/180, 0xb4}, {&(0x7f0000002a40)=""/31, 0x1f}], 0x3, &(0x7f0000002ac0)=""/229, 0xe5}, 0x10001}, {{&(0x7f0000002bc0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/127, 0x7f}, {&(0x7f0000002cc0)=""/68, 0x44}], 0x2, &(0x7f0000002d80)=""/40, 0x28}, 0xfff}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002dc0)=""/44, 0x2c}, {&(0x7f0000002e00)=""/88, 0x58}, {&(0x7f0000002e80)=""/42, 0x2a}, {&(0x7f0000002ec0)=""/180, 0xb4}], 0x4}}, {{&(0x7f0000002fc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003040)=""/25, 0x19}, {&(0x7f0000003080)=""/221, 0xdd}], 0x2, &(0x7f00000031c0)=""/236, 0xec}, 0x1ff}, {{&(0x7f00000032c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004640)=[{&(0x7f0000003340)=""/130, 0x82}, {&(0x7f0000003400)=""/203, 0xcb}, {&(0x7f0000003500)=""/71, 0x47}, {&(0x7f0000003580)=""/177, 0xb1}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x5, &(0x7f00000046c0)=""/225, 0xe1}, 0x80000}], 0x9, 0x120, &(0x7f0000004a00)={0x0, 0x989680}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0800e9ff030000002e2f66696c653000"]) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r6, 0x19, &(0x7f0000000200), 0x0) write$binfmt_script(r6, &(0x7f0000000440)={'#! ', './file0', [{}], 0xa, "10c6de5d4172603f5965f0739aa936e15563cc07a8d4df784eae91e336529fc48ee7b054e762d8378a689aeada6382627a06f03d674f68aae1a41fe00b41f4a4ea64fc8942a261e4bb120782a3766014f27de12d1499b3ac6bc840cd08b5411c623ad2c5caf880956d245a61c196a36582480d6650988f5d414d926bffd99bb1889c953ce9c98d97c8a155345ab8b38ef4a0e42be8138dedb25ed4e4567546e25623aa2bb4dafe877e87555c7231e6ce4fbb8d876d1473126ba62b8f5de6bebdff804feac3ee458307306c0c84a9b207b4a4cc6b22ee5c9af58a1d14698ac1320e28841ed4ced31f2c9c"}, 0xf6) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ntfs', 0x200000, 0x1a) 04:41:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='squashfs\x00', 0x2e4c3cb7548e9a8e, 0x0) openat(0xffffffffffffffff, 0x0, 0x620802, 0x73) (async) openat(0xffffffffffffffff, 0x0, 0x620802, 0x73) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x1000000, &(0x7f0000000400)='/dev/fb0\x00') r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/140, 0x8c) (async) syslog(0x3, &(0x7f0000000000)=""/140, 0x8c) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) r4 = accept4$alg(r1, 0x0, 0x0, 0x800) recvmmsg(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000180)}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/83, 0x53}], 0x6}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/33, 0x21}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000001740)=""/79, 0x4f}, {&(0x7f00000017c0)=""/240, 0xf0}], 0x5, &(0x7f0000001940)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002940)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f00000029c0)=""/254, 0xfe}, {&(0x7f0000002ac0)=""/247, 0xf7}, {&(0x7f0000000440)=""/64, 0x40}], 0x3, &(0x7f0000002bc0)=""/103, 0x67}, 0x20}], 0x3, 0x14001, &(0x7f0000002d00)) (async) recvmmsg(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000180)}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/83, 0x53}], 0x6}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/33, 0x21}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000001740)=""/79, 0x4f}, {&(0x7f00000017c0)=""/240, 0xf0}], 0x5, &(0x7f0000001940)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002940)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f00000029c0)=""/254, 0xfe}, {&(0x7f0000002ac0)=""/247, 0xf7}, {&(0x7f0000000440)=""/64, 0x40}], 0x3, &(0x7f0000002bc0)=""/103, 0x67}, 0x20}], 0x3, 0x14001, &(0x7f0000002d00)) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002e00)={'\x00', 0x4, 0x401, 0x8, 0xffff, 0x1}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002e00)={'\x00', 0x4, 0x401, 0x8, 0xffff, 0x1}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000002e80)=ANY=[@ANYRES16, @ANYRES64=r7, @ANYRESOCT]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) getpid() (async) r8 = getpid() rt_tgsigqueueinfo(r8, 0xffffffffffffffff, 0x1f, &(0x7f0000000500)={0x40, 0x4, 0x3}) (async) rt_tgsigqueueinfo(r8, 0xffffffffffffffff, 0x1f, &(0x7f0000000500)={0x40, 0x4, 0x3}) [ 2233.724838][T23289] FAULT_INJECTION: forcing a failure. [ 2233.724838][T23289] name fail_usercopy, interval 1, probability 0, space 0, times 0 04:41:47 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r1, &(0x7f0000000000)={[0xc9c6]}, 0x8) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="90a02ffbdef7564f792a63c5edbc944263dd85cbbfc2ee83065dd2fee9a4b12cbe35b94697b95f07e81fdd30dec9f801d553aed5e71d20fef0", 0x39}, {&(0x7f0000000240)="c87397604d7c5bff2cc5cc953a1b5b964193c9cdcb146907aaa2e039ee4dd487f985d8eeeceabb049a570b61cd24f657dd9c05309b0bf909d2c303e15bb82286cf975121fe76d91d95bea94beaeba68c54805c3aa372931de6b83bdabf9bb51909927b5f57ac25356ea031bf24161c25c666c156758990908038c64197360b9bf05e9f1fe0500bba7d8be4fa51c28b6ac0e8957b3c96ca19c78d9033a430347eaba53cb281fc6abb66760f91eac98424a1914787eb2d141e09f31059ff", 0xbd}, {&(0x7f0000000180)="cc661f10917581881c8dbb6804b83bd0b0a57f97ef1f487f9923d3165c66b2e03c5e2f4a9faafaf80401554d422057e7f74a4858a759aa0704fb29398597af43106c3e4dcce6dfba10f1e4369a12af594fa570a00ed0fe9bb8b69afea2c68cdaf3771e1648ca19e84d3597e86655cd23ab970f884fbf05b1ff53dd", 0x7b}, {&(0x7f0000000380)="c564aaec1389a3d5c1f6a96f00070a82b87473c1921b751879b258d92ece724beecf9042406778eed06b01a13f9050e72ae0dcaf860ddac3ab491ef6f08bf8e86c446d485df57b962888ecffb481e048ebabcc1f96729343fb5b87003f86b714f3c7c77fd74eab6930ec262ccf28960dd3215bd85eda559aacfe040ba3144edb00ab8376ed3f9872e35f1065f090bee318e3e3fb0961817ea25668a495eaaa2dc609b3d3cb31", 0xa6}], 0x4, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) (async) r3 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x20002010}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) (async) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r5, &(0x7f00000047c0)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/4, 0x4}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/248, 0xf8}, {&(0x7f0000001840)=""/174, 0xae}, {&(0x7f0000001900)=""/215, 0xd7}], 0x8}, 0x200}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/88, 0x58}, {&(0x7f0000001b80)=""/27, 0x1b}, {&(0x7f0000001bc0)=""/182, 0xb6}], 0x3, &(0x7f0000001cc0)=""/34, 0x22}, 0x3f}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/191, 0xbf}, {&(0x7f0000001dc0)=""/169, 0xa9}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001ec0)=""/16, 0x10}, {&(0x7f0000001f00)=""/183, 0xb7}, {&(0x7f0000001fc0)=""/98, 0x62}, {&(0x7f0000002040)=""/193, 0xc1}, {&(0x7f0000002140)=""/157, 0x9d}, {&(0x7f0000002200)=""/110, 0x6e}, {&(0x7f0000002280)=""/87, 0x57}, {&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/223, 0xdf}, {&(0x7f0000002700)=""/225, 0xe1}], 0xa, &(0x7f0000002800)=""/42, 0x2a}, 0x5}, {{&(0x7f0000002840)=@xdp, 0x80, &(0x7f0000002a80)=[{&(0x7f00000028c0)=""/172, 0xac}, {&(0x7f0000002980)=""/180, 0xb4}, {&(0x7f0000002a40)=""/31, 0x1f}], 0x3, &(0x7f0000002ac0)=""/229, 0xe5}, 0x10001}, {{&(0x7f0000002bc0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/127, 0x7f}, {&(0x7f0000002cc0)=""/68, 0x44}], 0x2, &(0x7f0000002d80)=""/40, 0x28}, 0xfff}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002dc0)=""/44, 0x2c}, {&(0x7f0000002e00)=""/88, 0x58}, {&(0x7f0000002e80)=""/42, 0x2a}, {&(0x7f0000002ec0)=""/180, 0xb4}], 0x4}}, {{&(0x7f0000002fc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003040)=""/25, 0x19}, {&(0x7f0000003080)=""/221, 0xdd}], 0x2, &(0x7f00000031c0)=""/236, 0xec}, 0x1ff}, {{&(0x7f00000032c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004640)=[{&(0x7f0000003340)=""/130, 0x82}, {&(0x7f0000003400)=""/203, 0xcb}, {&(0x7f0000003500)=""/71, 0x47}, {&(0x7f0000003580)=""/177, 0xb1}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x5, &(0x7f00000046c0)=""/225, 0xe1}, 0x80000}], 0x9, 0x120, &(0x7f0000004a00)={0x0, 0x989680}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0800e9ff030000002e2f66696c653000"]) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r6, 0x19, &(0x7f0000000200), 0x0) (async) write$binfmt_script(r6, &(0x7f0000000440)={'#! ', './file0', [{}], 0xa, "10c6de5d4172603f5965f0739aa936e15563cc07a8d4df784eae91e336529fc48ee7b054e762d8378a689aeada6382627a06f03d674f68aae1a41fe00b41f4a4ea64fc8942a261e4bb120782a3766014f27de12d1499b3ac6bc840cd08b5411c623ad2c5caf880956d245a61c196a36582480d6650988f5d414d926bffd99bb1889c953ce9c98d97c8a155345ab8b38ef4a0e42be8138dedb25ed4e4567546e25623aa2bb4dafe877e87555c7231e6ce4fbb8d876d1473126ba62b8f5de6bebdff804feac3ee458307306c0c84a9b207b4a4cc6b22ee5c9af58a1d14698ac1320e28841ed4ced31f2c9c"}, 0xf6) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ntfs', 0x200000, 0x1a) 04:41:47 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x141482) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x0, r4}) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@int=0x7, 0x4) [ 2233.794027][T23289] CPU: 0 PID: 23289 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 04:41:47 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae1b, 0x0) [ 2233.794065][T23289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2233.794082][T23289] Call Trace: [ 2233.794091][T23289] [ 2233.794102][T23289] dump_stack_lvl+0x136/0x150 [ 2233.794141][T23289] should_fail_ex+0x4a3/0x5b0 [ 2233.794185][T23289] _copy_to_user+0x2e/0x150 [ 2233.794223][T23289] simple_read_from_buffer+0xd0/0x160 [ 2233.794258][T23289] proc_fail_nth_read+0x18b/0x220 04:41:48 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae2a, 0x0) [ 2233.794296][T23289] ? proc_exe_link+0x1e0/0x1e0 [ 2233.794338][T23289] ? security_file_permission+0xaf/0xd0 [ 2233.794382][T23289] vfs_read+0x25b/0x930 [ 2233.794410][T23289] ? proc_exe_link+0x1e0/0x1e0 [ 2233.794445][T23289] ? kernel_read+0x1c0/0x1c0 [ 2233.794474][T23289] ? __fget_files+0x26a/0x480 04:41:48 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae2c, 0x0) 04:41:48 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2233.794527][T23289] ksys_read+0x12b/0x250 [ 2233.794551][T23289] ? vfs_write+0xe10/0xe10 [ 2233.794576][T23289] ? syscall_enter_from_user_mode+0x26/0x80 [ 2233.794628][T23289] do_syscall_64+0x39/0xb0 [ 2233.794668][T23289] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2233.794700][T23289] RIP: 0033:0x7faac9e3df8c [ 2233.794722][T23289] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2233.794749][T23289] RSP: 002b:00007faac89fe160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2233.794776][T23289] RAX: ffffffffffffffda RBX: 00007faac9fabf80 RCX: 00007faac9e3df8c [ 2233.794795][T23289] RDX: 000000000000000f RSI: 00007faac89fe1e0 RDI: 0000000000000005 [ 2233.794811][T23289] RBP: 00007faac89fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2233.794826][T23289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2233.794842][T23289] R13: 00007faaca0cfb1f R14: 00007faac89fe300 R15: 0000000000022000 [ 2233.794875][T23289] [ 2233.838100][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2233.903776][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2234.028070][ T26] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2234.384625][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2234.384660][ T26] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2234.384679][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.386019][ T26] usb 4-1: config 0 descriptor?? [ 2234.559622][ T6643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2234.869933][ C1] vkms_vblank_simulate: vblank timer overrun [ 2234.871657][ T26] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 2234.883533][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001E/input/input43 [ 2234.962419][ T26] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2234.969019][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2235.262323][T23313] tty tty20: ldisc open failed (-12), clearing slot 19 [ 2235.768609][ T5169] usb 4-1: USB disconnect, device number 93 [ 2235.983725][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:50 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:50 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae34, 0x0) 04:41:50 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x141482) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x0, r4}) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@int=0x7, 0x4) 04:41:50 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:41:50 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='squashfs\x00', 0x2e4c3cb7548e9a8e, 0x0) openat(0xffffffffffffffff, 0x0, 0x620802, 0x73) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) (async) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x1000000, &(0x7f0000000400)='/dev/fb0\x00') (async, rerun: 64) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/140, 0x8c) (async) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) (async, rerun: 64) r4 = accept4$alg(r1, 0x0, 0x0, 0x800) (rerun: 64) recvmmsg(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000180)}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/83, 0x53}], 0x6}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/33, 0x21}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000001740)=""/79, 0x4f}, {&(0x7f00000017c0)=""/240, 0xf0}], 0x5, &(0x7f0000001940)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002940)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f00000029c0)=""/254, 0xfe}, {&(0x7f0000002ac0)=""/247, 0xf7}, {&(0x7f0000000440)=""/64, 0x40}], 0x3, &(0x7f0000002bc0)=""/103, 0x67}, 0x20}], 0x3, 0x14001, &(0x7f0000002d00)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002e00)={'\x00', 0x4, 0x401, 0x8, 0xffff, 0x1}) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000002e80)=ANY=[@ANYRES16, @ANYRES64=r7, @ANYRESOCT]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) (async) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, 0xffffffffffffffff, 0x1f, &(0x7f0000000500)={0x40, 0x4, 0x3}) 04:41:50 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x802, 0x0) 04:41:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:50 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x805, 0x0) 04:41:50 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae3a, 0x0) 04:41:50 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x806, 0x0) 04:41:50 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x817, 0x0) [ 2236.613063][T25351] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2236.802947][ T4365] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2236.863233][ T6643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2237.023980][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2237.042284][T25351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2237.053754][T25351] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2237.062971][T25351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.073900][T25351] usb 4-1: config 0 descriptor?? [ 2237.183266][ T4365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2237.194542][ T4365] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2237.204192][ T4365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.221260][ T4365] usb 5-1: config 0 descriptor?? [ 2237.564437][T25351] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 2237.579004][T25351] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001F/input/input44 [ 2237.690023][T25351] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2237.704563][ T4365] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 2237.736691][ T4365] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input45 [ 2237.842484][ T4365] keytouch 0003:0926:3333.0020: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2238.071558][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2238.538699][T25350] usb 4-1: USB disconnect, device number 94 [ 2238.621723][ T6643] usb 5-1: USB disconnect, device number 12 04:41:52 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:52 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x2) 04:41:52 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae3b, 0x0) 04:41:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:52 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async, rerun: 32) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (rerun: 32) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x141482) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x0, r4}) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@int=0x7, 0x4) 04:41:53 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x5) 04:41:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") [ 2239.103681][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:53 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x6) 04:41:53 executing program 0: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:41:53 executing program 0: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:41:53 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:53 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x17) 04:41:53 executing program 0: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)) (async) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) [ 2239.373097][T25350] usb 4-1: new high-speed USB device number 95 using dummy_hcd 04:41:53 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae48, 0x0) 04:41:53 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r4 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000200)={0x20002010}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="05000300002885af76002e2f66696c0e746788704f3145c3ae5f0dedc81ab88c75466886b5f8161b684711abf5bb020bdc8c958500a5d0f446b5ed12218db30000e884a5e3105cce9867c5c444635b279bb14ba40c53885028463c42036c972f53f957b45251f62e113bfd7d07c222b8cea14ee9d15f492c3ea6435cd2a8e5ed24c27426dad005ab0d92abf9661a5e5553952b4b84fdedf8a8fc97fc5de32427ac57bce10d17cc1dd514abb4f1f2befc212506cf2baac5813255122cee1ae440addb13ba96f4f3e5916f3f9c91c5556e5c9e4ee7dfabfe8875380244f73f10267f8b93a3f0d2b9b4ec7786657a34910000000000000000000037000000001c8d631eaae2fe0534236e482bbd9c6ba66090e777ce226fd6717f0f1f28bfa6d05fd05c29a1"]) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffc, r2, &(0x7f0000000000)="cdab51e9f57cff8921880efe162f78c656ded151064febec06743ae3c2accce7806cd6c96e231a1f5e6670b3cda9fb680b98640c637fb0544be369f174ef598fe4488e2e2650a2c65c9c994d93e4f6ff9784662eadf950b4ed3ae7108b37919c2f414a6b4575fcc22f8c", 0x6a, 0x2, 0x0, 0x0, r4}, &(0x7f00000000c0)) [ 2239.463381][ T6643] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2239.783359][T25350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2239.795741][T25350] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2239.805717][T25350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.821577][T25350] usb 4-1: config 0 descriptor?? [ 2239.843621][ T6643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2239.854878][ T6643] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2239.867668][ T6643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.879002][ T6643] usb 5-1: config 0 descriptor?? [ 2239.916203][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2240.143767][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2240.284132][T25350] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 2240.296308][T25350] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0021/input/input46 [ 2240.364452][ T6643] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 2240.385972][T25350] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2240.416255][ T6643] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0022/input/input47 [ 2240.513226][ T6643] keytouch 0003:0926:3333.0022: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2241.192365][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2241.256935][ T6643] usb 4-1: USB disconnect, device number 95 [ 2241.358304][ T4365] usb 5-1: USB disconnect, device number 13 04:41:55 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x1, 0x0) close(r1) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) io_uring_setup(0xb17, &(0x7f0000000180)) (async) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r4 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000200)={0x20002010}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="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"]) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffc, r2, &(0x7f0000000000)="cdab51e9f57cff8921880efe162f78c656ded151064febec06743ae3c2accce7806cd6c96e231a1f5e6670b3cda9fb680b98640c637fb0544be369f174ef598fe4488e2e2650a2c65c9c994d93e4f6ff9784662eadf950b4ed3ae7108b37919c2f414a6b4575fcc22f8c", 0x6a, 0x2, 0x0, 0x0, r4}, &(0x7f00000000c0)) 04:41:55 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x180) 04:41:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:55 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae8b, 0x0) 04:41:55 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:55 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x500) 04:41:55 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x1, 0x0) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async, rerun: 32) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) (async) r4 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000200)={0x20002010}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="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"]) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffc, r2, &(0x7f0000000000)="cdab51e9f57cff8921880efe162f78c656ded151064febec06743ae3c2accce7806cd6c96e231a1f5e6670b3cda9fb680b98640c637fb0544be369f174ef598fe4488e2e2650a2c65c9c994d93e4f6ff9784662eadf950b4ed3ae7108b37919c2f414a6b4575fcc22f8c", 0x6a, 0x2, 0x0, 0x0, r4}, &(0x7f00000000c0)) 04:41:55 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x600) 04:41:55 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) close(r1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xb8, 0xf3, 0x5, 0x10000, 0x2, 0x3, 0x3, 0x2cb, 0x40, 0x1f3, 0xab, 0x800, 0x38, 0x1, 0x1f, 0x200, 0x427}, [{0x70000000, 0x6, 0x3, 0xffff, 0xbc, 0xbd, 0x7fff, 0x80}, {0x7, 0x2, 0xfffffffffffffff9, 0x600000, 0x4, 0x7, 0x1, 0x6}], "2292c5be29e18d4c57d22e66fbba9ccebbcf69e3d5c5364d6b5efd3e8bc11b0701caecb6b2e13bb4c38b2765c931ca065a99a719f910f0b3ae0ab644791acbf3fa8d2ca23f1ed2b1b88055bb13f98c8f60252ab9b36b3388522d3fef31e284c2feff0f5627fc519c7e6a2dbf509988782449414ae661cc8b587d8853222500fcfc87e4cafa674275d82822ab150cdbfa66c66874c72447b2d4cab8cdbeccefb4f36ee9da3b261af3b24c2e1f5709db65aa3372f0851576173f36ab223196d158b8d4e7df1b", ['\x00', '\x00']}, 0x375) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:41:55 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) close(r1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xb8, 0xf3, 0x5, 0x10000, 0x2, 0x3, 0x3, 0x2cb, 0x40, 0x1f3, 0xab, 0x800, 0x38, 0x1, 0x1f, 0x200, 0x427}, [{0x70000000, 0x6, 0x3, 0xffff, 0xbc, 0xbd, 0x7fff, 0x80}, {0x7, 0x2, 0xfffffffffffffff9, 0x600000, 0x4, 0x7, 0x1, 0x6}], "2292c5be29e18d4c57d22e66fbba9ccebbcf69e3d5c5364d6b5efd3e8bc11b0701caecb6b2e13bb4c38b2765c931ca065a99a719f910f0b3ae0ab644791acbf3fa8d2ca23f1ed2b1b88055bb13f98c8f60252ab9b36b3388522d3fef31e284c2feff0f5627fc519c7e6a2dbf509988782449414ae661cc8b587d8853222500fcfc87e4cafa674275d82822ab150cdbfa66c66874c72447b2d4cab8cdbeccefb4f36ee9da3b261af3b24c2e1f5709db65aa3372f0851576173f36ab223196d158b8d4e7df1b", ['\x00', '\x00']}, 0x375) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:41:56 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x1700) [ 2242.070225][ T6643] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2242.203202][ T4365] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2242.223731][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2242.493077][ T6643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.504346][ T6643] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2242.513498][ T6643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.535320][ T6643] usb 4-1: config 0 descriptor?? [ 2242.563051][ T4365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.581004][ T4365] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2242.590814][ T4365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.608290][ T4365] usb 5-1: config 0 descriptor?? [ 2242.943910][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2243.004249][ T6643] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 2243.014556][ T6643] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0023/input/input48 [ 2243.094062][ T4365] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 2243.106330][ T4365] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0024/input/input49 [ 2243.144699][ T6643] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2243.218426][ T4365] keytouch 0003:0926:3333.0024: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2243.271034][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2243.948607][ T4365] usb 4-1: USB disconnect, device number 96 [ 2244.025691][T25350] usb 5-1: USB disconnect, device number 14 [ 2244.143281][ T6643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.311791][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:41:58 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) (async) close(r1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xb8, 0xf3, 0x5, 0x10000, 0x2, 0x3, 0x3, 0x2cb, 0x40, 0x1f3, 0xab, 0x800, 0x38, 0x1, 0x1f, 0x200, 0x427}, [{0x70000000, 0x6, 0x3, 0xffff, 0xbc, 0xbd, 0x7fff, 0x80}, {0x7, 0x2, 0xfffffffffffffff9, 0x600000, 0x4, 0x7, 0x1, 0x6}], "2292c5be29e18d4c57d22e66fbba9ccebbcf69e3d5c5364d6b5efd3e8bc11b0701caecb6b2e13bb4c38b2765c931ca065a99a719f910f0b3ae0ab644791acbf3fa8d2ca23f1ed2b1b88055bb13f98c8f60252ab9b36b3388522d3fef31e284c2feff0f5627fc519c7e6a2dbf509988782449414ae661cc8b587d8853222500fcfc87e4cafa674275d82822ab150cdbfa66c66874c72447b2d4cab8cdbeccefb4f36ee9da3b261af3b24c2e1f5709db65aa3372f0851576173f36ab223196d158b8d4e7df1b", ['\x00', '\x00']}, 0x375) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:41:58 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae8c, 0x0) 04:41:58 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:41:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) 04:41:58 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x346b) 04:41:58 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:41:58 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)="a6303582e82b842e29891931e7ea5d85182c6b8afe3953f840c1f63b70aea5f85fd2614f6c34f72e4a325892b7201772d9888cbdc408d62372dbc534cab6cfa12ed7c6dfad0b027c62781c6e", 0x4c}, {&(0x7f00000000c0)="5b17cffd05b36865010357dff022e9dfb7029f7f957d8b043b5a06bc6dec1e779cb0db17ba44b3b518ceab03a447f97ffbe2f75213", 0x35}, {&(0x7f0000000240)="9be84e6ca62a7f1e244b44b574aabecf125657aadfb8a45acee1c0859019a7b467371c7fc04d3f7c3ece0ce0dabdf1e0c89396e292d5967e7fe94dbb7e3c2eb9f626f003b5ceb7c635d203519f83587e760370a5ebb020a017cc01d1d567204c73d33e041ebe41346072c0c1b63ddb9f4c62b64dc60bba5d43ef00f2576cb7361ea37495b0a4cc", 0x87}, {&(0x7f0000000300)="777e90c39911fb1e1d872b4012db738c4e53cb44759a97ccaf3606c5f37280d5b364214877ada35c333676582eb90685fd2efbc4b937966460cd4c090068f2278aca228cc2eafae1d1cde3ea390ee08082e6e9da9a172a24961d9e1904762c0fd5cee5903728d2f72a6f9f43b255c5080ed9554605cebd1a9897b957283533be6d1eb8dd29de8ef581f685a03a70d2d355fbfaedc58ac30ce4844c1ed7760c87621641a41333", 0xa6}, {&(0x7f0000000180)="463974b9730491fc4ccf0b9f75a2c792a539bad2e71afe537b7bced5b7311a6f324d9c3084528d4f8ba4c2a9597b738b5570e5176315f0f4247deb73fc47da99a779e5e388e6353c798f7509cb543fd1a0280232d550f53c2f12af7692", 0x5d}, {&(0x7f00000003c0)="e78535b942d166dc23a1c1596a69b3f3046646a95deec1b7445a245ab44f85c0c894c1eb59beda17deb670e0ed362e15ea4bf5ed9aca2432771706ef9d655dff5b8aca044d0e225c0cb24e11f01484fa03b4cd47be260ceb0ce4222d9257eb1ad18e4cbefcd6fe71243b1a8766720450bc26bf5a242e4d94cb9e5e1c294198dfcd617027c9640b854dccc4dfa6400612f04708d59688a1d05baf6352c68d1becd4a736fe8f79ab07f793cca84f8e4984ca3257eb5624dfa8b69082c1b8434eca37ec3239cdca115167738f5670a08087165ccdba54cf97", 0xd7}, {&(0x7f00000004c0)="6392bbb0d21d6a0e1440e644d676853e249fda33635a5af5b9612257f31517368055d25eea216476be80b2be9eb0ba6b41686cb98c", 0x35}], 0x7, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x0) 04:41:58 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x6b34) 04:41:58 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)="a6303582e82b842e29891931e7ea5d85182c6b8afe3953f840c1f63b70aea5f85fd2614f6c34f72e4a325892b7201772d9888cbdc408d62372dbc534cab6cfa12ed7c6dfad0b027c62781c6e", 0x4c}, {&(0x7f00000000c0)="5b17cffd05b36865010357dff022e9dfb7029f7f957d8b043b5a06bc6dec1e779cb0db17ba44b3b518ceab03a447f97ffbe2f75213", 0x35}, {&(0x7f0000000240)="9be84e6ca62a7f1e244b44b574aabecf125657aadfb8a45acee1c0859019a7b467371c7fc04d3f7c3ece0ce0dabdf1e0c89396e292d5967e7fe94dbb7e3c2eb9f626f003b5ceb7c635d203519f83587e760370a5ebb020a017cc01d1d567204c73d33e041ebe41346072c0c1b63ddb9f4c62b64dc60bba5d43ef00f2576cb7361ea37495b0a4cc", 0x87}, {&(0x7f0000000300)="777e90c39911fb1e1d872b4012db738c4e53cb44759a97ccaf3606c5f37280d5b364214877ada35c333676582eb90685fd2efbc4b937966460cd4c090068f2278aca228cc2eafae1d1cde3ea390ee08082e6e9da9a172a24961d9e1904762c0fd5cee5903728d2f72a6f9f43b255c5080ed9554605cebd1a9897b957283533be6d1eb8dd29de8ef581f685a03a70d2d355fbfaedc58ac30ce4844c1ed7760c87621641a41333", 0xa6}, {&(0x7f0000000180)="463974b9730491fc4ccf0b9f75a2c792a539bad2e71afe537b7bced5b7311a6f324d9c3084528d4f8ba4c2a9597b738b5570e5176315f0f4247deb73fc47da99a779e5e388e6353c798f7509cb543fd1a0280232d550f53c2f12af7692", 0x5d}, {&(0x7f00000003c0)="e78535b942d166dc23a1c1596a69b3f3046646a95deec1b7445a245ab44f85c0c894c1eb59beda17deb670e0ed362e15ea4bf5ed9aca2432771706ef9d655dff5b8aca044d0e225c0cb24e11f01484fa03b4cd47be260ceb0ce4222d9257eb1ad18e4cbefcd6fe71243b1a8766720450bc26bf5a242e4d94cb9e5e1c294198dfcd617027c9640b854dccc4dfa6400612f04708d59688a1d05baf6352c68d1becd4a736fe8f79ab07f793cca84f8e4984ca3257eb5624dfa8b69082c1b8434eca37ec3239cdca115167738f5670a08087165ccdba54cf97", 0xd7}, {&(0x7f00000004c0)="6392bbb0d21d6a0e1440e644d676853e249fda33635a5af5b9612257f31517368055d25eea216476be80b2be9eb0ba6b41686cb98c", 0x35}], 0x7, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x0) 04:41:58 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae8f, 0x0) 04:41:58 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x1000000) 04:41:58 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)="a6303582e82b842e29891931e7ea5d85182c6b8afe3953f840c1f63b70aea5f85fd2614f6c34f72e4a325892b7201772d9888cbdc408d62372dbc534cab6cfa12ed7c6dfad0b027c62781c6e", 0x4c}, {&(0x7f00000000c0)="5b17cffd05b36865010357dff022e9dfb7029f7f957d8b043b5a06bc6dec1e779cb0db17ba44b3b518ceab03a447f97ffbe2f75213", 0x35}, {&(0x7f0000000240)="9be84e6ca62a7f1e244b44b574aabecf125657aadfb8a45acee1c0859019a7b467371c7fc04d3f7c3ece0ce0dabdf1e0c89396e292d5967e7fe94dbb7e3c2eb9f626f003b5ceb7c635d203519f83587e760370a5ebb020a017cc01d1d567204c73d33e041ebe41346072c0c1b63ddb9f4c62b64dc60bba5d43ef00f2576cb7361ea37495b0a4cc", 0x87}, {&(0x7f0000000300)="777e90c39911fb1e1d872b4012db738c4e53cb44759a97ccaf3606c5f37280d5b364214877ada35c333676582eb90685fd2efbc4b937966460cd4c090068f2278aca228cc2eafae1d1cde3ea390ee08082e6e9da9a172a24961d9e1904762c0fd5cee5903728d2f72a6f9f43b255c5080ed9554605cebd1a9897b957283533be6d1eb8dd29de8ef581f685a03a70d2d355fbfaedc58ac30ce4844c1ed7760c87621641a41333", 0xa6}, {&(0x7f0000000180)="463974b9730491fc4ccf0b9f75a2c792a539bad2e71afe537b7bced5b7311a6f324d9c3084528d4f8ba4c2a9597b738b5570e5176315f0f4247deb73fc47da99a779e5e388e6353c798f7509cb543fd1a0280232d550f53c2f12af7692", 0x5d}, {&(0x7f00000003c0)="e78535b942d166dc23a1c1596a69b3f3046646a95deec1b7445a245ab44f85c0c894c1eb59beda17deb670e0ed362e15ea4bf5ed9aca2432771706ef9d655dff5b8aca044d0e225c0cb24e11f01484fa03b4cd47be260ceb0ce4222d9257eb1ad18e4cbefcd6fe71243b1a8766720450bc26bf5a242e4d94cb9e5e1c294198dfcd617027c9640b854dccc4dfa6400612f04708d59688a1d05baf6352c68d1becd4a736fe8f79ab07f793cca84f8e4984ca3257eb5624dfa8b69082c1b8434eca37ec3239cdca115167738f5670a08087165ccdba54cf97", 0xd7}, {&(0x7f00000004c0)="6392bbb0d21d6a0e1440e644d676853e249fda33635a5af5b9612257f31517368055d25eea216476be80b2be9eb0ba6b41686cb98c", 0x35}], 0x7, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x0) [ 2244.773116][T25350] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2244.863148][ T6643] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2245.173224][T25350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2245.192242][T25350] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2245.201880][T25350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.226847][T25350] usb 4-1: config 0 descriptor?? [ 2245.263278][ T6643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2245.281336][ T6643] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2245.290570][ T6643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.307169][ T6643] usb 5-1: config 0 descriptor?? [ 2245.343615][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2245.694814][T25350] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 2245.723037][T25350] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0025/input/input50 [ 2245.764347][ T6643] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 2245.775686][ T6643] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0026/input/input51 [ 2245.812283][T25350] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2245.889658][ T6643] keytouch 0003:0926:3333.0026: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2245.968067][ T5161] usb 5-1: USB disconnect, device number 15 [ 2245.983711][ T6643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2246.383751][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2246.639375][T25350] usb 4-1: USB disconnect, device number 97 04:42:01 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30dbff63cdcf1836007b22b79a4b23b4d1c8a3d9be96fed692c5d836beae9c475ce95087322550e41fd86e56d0cc07b418e7387ad4946c4aa6d831f044a9a34382f5fc4c23cbe8f09915c64768c70f78d6d32f092748a061756eb5618519993174d632ae1371dcc255cca05c0039e0c6e47bfe41cfc8ebf602b48e195891636014a5d0c2565bb551effc9859"], 0x97) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="8f5e0000000000002e2f66696c653000b4cbb0785e3df468e455dfb7c8ed833667339e7f35ba7ff118a9ebe23b32721416f0d7b541abbe462db2b3bcccf9c761d775b4a74594aefde50b25910ca3f8c2aa662e356c83aafb307a45b77a649f82d334342de70695478924b29767fb7151f9e58144c0947cc1b975ef0779183b17af016f0568aebfa910a3449beff64116a47ff2a85fb551"]) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000240)=r4, 0x1) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x1800000) 04:42:01 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:01 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae9e, 0x0) 04:42:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) 04:42:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x2000000) 04:42:01 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30dbff63cdcf1836007b22b79a4b23b4d1c8a3d9be96fed692c5d836beae9c475ce95087322550e41fd86e56d0cc07b418e7387ad4946c4aa6d831f044a9a34382f5fc4c23cbe8f09915c64768c70f78d6d32f092748a061756eb5618519993174d632ae1371dcc255cca05c0039e0c6e47bfe41cfc8ebf602b48e195891636014a5d0c2565bb551effc9859"], 0x97) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="8f5e0000000000002e2f66696c653000b4cbb0785e3df468e455dfb7c8ed833667339e7f35ba7ff118a9ebe23b32721416f0d7b541abbe462db2b3bcccf9c761d775b4a74594aefde50b25910ca3f8c2aa662e356c83aafb307a45b77a649f82d334342de70695478924b29767fb7151f9e58144c0947cc1b975ef0779183b17af016f0568aebfa910a3449beff64116a47ff2a85fb551"]) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000240)=r4, 0x1) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x5000000) 04:42:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x6000000) 04:42:01 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:01 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30dbff63cdcf1836007b22b79a4b23b4d1c8a3d9be96fed692c5d836beae9c475ce95087322550e41fd86e56d0cc07b418e7387ad4946c4aa6d831f044a9a34382f5fc4c23cbe8f09915c64768c70f78d6d32f092748a061756eb5618519993174d632ae1371dcc255cca05c0039e0c6e47bfe41cfc8ebf602b48e195891636014a5d0c2565bb551effc9859"], 0x97) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="8f5e0000000000002e2f66696c653000b4cbb0785e3df468e455dfb7c8ed833667339e7f35ba7ff118a9ebe23b32721416f0d7b541abbe462db2b3bcccf9c761d775b4a74594aefde50b25910ca3f8c2aa662e356c83aafb307a45b77a649f82d334342de70695478924b29767fb7151f9e58144c0947cc1b975ef0779183b17af016f0568aebfa910a3449beff64116a47ff2a85fb551"]) (async) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000240)=r4, 0x1) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2247.428646][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2247.452987][ T5161] usb 5-1: new high-speed USB device number 16 using dummy_hcd 04:42:01 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaec0, 0x0) 04:42:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x17000000) 04:42:01 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="6db4bcb768b2a9cb4869421490", 0xd}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x46500, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2247.477624][T25350] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2247.485857][T23534] tty tty20: ldisc open failed (-12), clearing slot 19 04:42:01 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="6db4bcb768b2a9cb4869421490", 0xd}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x46500, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2247.813255][ T5161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.824838][ T5161] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2247.838542][ T5161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.868335][ T5161] usb 5-1: config 0 descriptor?? [ 2247.883209][T25350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.901569][T25350] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2247.925080][T25350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.941441][T25350] usb 4-1: config 0 descriptor?? [ 2248.355017][ T5161] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 2248.381685][ T5161] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0027/input/input52 [ 2248.406809][T25350] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 2248.433084][T25350] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0028/input/input53 [ 2248.470808][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2248.489577][ T5161] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2248.559859][ T5161] usb 5-1: USB disconnect, device number 16 [ 2248.571849][T25350] keytouch 0003:0926:3333.0028: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 04:42:02 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="6db4bcb768b2a9cb4869421490", 0xd}], 0x1, 0x0) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x46500, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2249.023682][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2249.338765][ T5161] usb 4-1: USB disconnect, device number 98 [ 2249.511336][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:03 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:03 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x9, 0x8, 0x3, 0x3}, {0x100, 0x2, 0x81, 0x7}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) splice(r1, &(0x7f0000000000)=0xc8e, r2, &(0x7f0000000040)=0x7fffffff, 0x40, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006800010027bd7000fbdbdf250a0004001000000024000200010000eae80000000048e6ba47226a388d800f0000000700000002000000010000000900000005000000"], 0x3c}}, 0x20040015) 04:42:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x6b340000) 04:42:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) 04:42:03 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaec1, 0x0) 04:42:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x100000000000000) 04:42:03 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x9, 0x8, 0x3, 0x3}, {0x100, 0x2, 0x81, 0x7}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) splice(r1, &(0x7f0000000000)=0xc8e, r2, &(0x7f0000000040)=0x7fffffff, 0x40, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006800010027bd7000fbdbdf250a0004001000000024000200010000eae80000000048e6ba47226a388d800f0000000700000002000000010000000900000005000000"], 0x3c}}, 0x20040015) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) io_uring_setup(0xb17, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x9, 0x8, 0x3, 0x3}, {0x100, 0x2, 0x81, 0x7}]}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) splice(r1, &(0x7f0000000000)=0xc8e, r2, &(0x7f0000000040)=0x7fffffff, 0x40, 0x8) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006800010027bd7000fbdbdf250a0004001000000024000200010000eae80000000048e6ba47226a388d800f0000000700000002000000010000000900000005000000"], 0x3c}}, 0x20040015) (async) 04:42:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x180000000000000) 04:42:04 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x200000000000000) 04:42:04 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x9, 0x8, 0x3, 0x3}, {0x100, 0x2, 0x81, 0x7}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) splice(r1, &(0x7f0000000000)=0xc8e, r2, &(0x7f0000000040)=0x7fffffff, 0x40, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006800010027bd7000fbdbdf250a0004001000000024000200010000eae80000000048e6ba47226a388d800f0000000700000002000000010000000900000005000000"], 0x3c}}, 0x20040015) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) io_uring_setup(0xb17, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x9, 0x8, 0x3, 0x3}, {0x100, 0x2, 0x81, 0x7}]}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) splice(r1, &(0x7f0000000000)=0xc8e, r2, &(0x7f0000000040)=0x7fffffff, 0x40, 0x8) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006800010027bd7000fbdbdf250a0004001000000024000200010000eae80000000048e6ba47226a388d800f0000000700000002000000010000000900000005000000"], 0x3c}}, 0x20040015) (async) 04:42:04 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r3, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r6 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2250.144395][T25351] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2250.283095][ T5161] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2250.533136][T25351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2250.545148][T25351] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2250.554313][T25351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.560128][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2250.570375][T25351] usb 5-1: config 0 descriptor?? [ 2250.693127][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2250.712352][ T5161] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2250.721853][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.747049][ T5161] usb 4-1: config 0 descriptor?? [ 2251.054529][T25351] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 2251.077879][T25351] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0029/input/input54 [ 2251.168035][T25351] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2251.224489][ T5161] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 2251.253001][ T5161] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002A/input/input55 [ 2251.269596][T16686] usb 5-1: USB disconnect, device number 17 [ 2251.355171][ T5161] keytouch 0003:0926:3333.002A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2251.588547][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2252.063388][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2252.165573][T25350] usb 4-1: USB disconnect, device number 99 04:42:06 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaec2, 0x0) 04:42:06 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x500000000000000) 04:42:06 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000000)) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x109000) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000240)={{r5}, "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"}) 04:42:06 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r3, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r6 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:42:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") [ 2252.629759][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:06 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x600000000000000) 04:42:06 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaecd, 0x0) 04:42:06 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x1700000000000000) 04:42:06 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x6b34000000000000) [ 2252.972978][ T6644] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2253.043180][ T26] usb 4-1: new high-speed USB device number 100 using dummy_hcd 04:42:07 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaece, 0x0) 04:42:07 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xffe0, 0xffff}, {0x10, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x81, 0x81}}]}, 0x3c}}, 0x48000) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r3 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x20002010}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000180)={0x3, 0x7, 0x1, 0xffffff81, 0xffffffff, 0x9, 0x40, 0x10000, 0x77}) 04:42:07 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xffe0, 0xffff}, {0x10, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x81, 0x81}}]}, 0x3c}}, 0x48000) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) (async) r3 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x20002010}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) (rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000180)={0x3, 0x7, 0x1, 0xffffff81, 0xffffffff, 0x9, 0x40, 0x10000, 0x77}) 04:42:07 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r3, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r6 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2253.333261][ T6644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2253.369169][ T6644] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2253.392538][ T6644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.433359][ T6644] usb 5-1: config 0 descriptor?? [ 2253.463425][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2253.503505][ T26] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 04:42:07 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000000)) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x109000) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000240)={{r5}, "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"}) 04:42:07 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaee1, 0x0) [ 2253.520002][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.570669][ T26] usb 4-1: config 0 descriptor?? [ 2253.670632][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2253.750206][T25351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2254.064282][ T26] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 2254.076547][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002B/input/input56 [ 2254.164650][ T26] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2254.276662][ T26] usb 4-1: USB disconnect, device number 100 [ 2254.704390][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2255.103202][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:09 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xffe0, 0xffff}, {0x10, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x81, 0x81}}]}, 0x3c}}, 0x48000) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r3 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x20002010}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000180)={0x3, 0x7, 0x1, 0xffffff81, 0xffffffff, 0x9, 0x40, 0x10000, 0x77}) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xffe0, 0xffff}, {0x10, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x81, 0x81}}]}, 0x3c}}, 0x48000) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x20002010}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="05000300002885af76002e2f66696c0e746788704f3145c3ae5f0dedc81ab88c75466886b5f8161b684711abf5bb020bdc8c958500a5d0f446b5ed12218db30000e884a5e3105cce9867c5c444635b279bb14ba40c53885028463c42036c972f53f957b45251f62e113bfd7d07c222b8cea14ee9d15f492c3ea6435cd2a8e5ed24c27426dad005ab0d92abf9661a5e5553952b4b84fdedf8a8fc97fc5de32427ac57bce10d17cc1dd514abb4f1f2befc212506cf2baac5813255122cee1ae440addb13ba96f4f3e5916f3f9c91c5556e5c9e4ee7dfabfe8875380244f73f10267f8b93a3f0d2b9b4ec7786657a34910000000000000000000037000000001c8d631eaae2fe0534236e482bbd9c6ba66090e777ce226fd6717f0f1f28bfa6d05fd05c29a1"]) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000180)={0x3, 0x7, 0x1, 0xffffff81, 0xffffffff, 0x9, 0x40, 0x10000, 0x77}) (async) 04:42:09 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:09 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaefe, 0x0) 04:42:09 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000000)) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) r4 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x19, &(0x7f0000000200), 0x0) (async, rerun: 64) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x109000) (rerun: 64) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000240)={{r5}, "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"}) 04:42:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") [ 2255.753673][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2255.763181][ T6644] usbhid 5-1:0.0: can't add hid device: -71 [ 2255.770939][ T6644] usbhid: probe of 5-1:0.0 failed with error -71 [ 2255.799823][ T6644] usb 5-1: USB disconnect, device number 18 04:42:09 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "8dab772b3168503685642bea5442bf8064cf01dae6e0284e06816137ff51369fa2c30225d749c3a64a9b71761a"}, 0x31) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:09 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1, 0x5) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) write(r3, &(0x7f0000000000)="4d24a3ec09226d90d8a9f3398f633501a5bbe4264f60f8d62ecf2b596deec8e761cfcffa", 0x24) 04:42:09 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x400448c9, 0x0) 04:42:09 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "8dab772b3168503685642bea5442bf8064cf01dae6e0284e06816137ff51369fa2c30225d749c3a64a9b71761a"}, 0x31) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:09 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1, 0x5) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) (async) write(r3, &(0x7f0000000000)="4d24a3ec09226d90d8a9f3398f633501a5bbe4264f60f8d62ecf2b596deec8e761cfcffa", 0x24) [ 2256.003170][T16686] usb 4-1: new high-speed USB device number 101 using dummy_hcd 04:42:10 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "8dab772b3168503685642bea5442bf8064cf01dae6e0284e06816137ff51369fa2c30225d749c3a64a9b71761a"}, 0x31) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2256.163318][ T6644] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2256.393204][T16686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2256.404380][T16686] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2256.413932][T16686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.430496][T16686] usb 4-1: config 0 descriptor?? [ 2256.523097][ T6644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2256.534299][ T6644] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2256.544003][ T6644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.555946][ T6644] usb 5-1: config 0 descriptor?? [ 2256.790783][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2256.913925][T16686] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 2256.932061][T16686] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002C/input/input57 [ 2257.035073][T16686] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2257.119274][T16686] usb 4-1: USB disconnect, device number 101 [ 2257.823556][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2258.153267][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:12 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:12 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x400448dd, 0x0) 04:42:12 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="e4b9bb5712fa6d96b26b7599661a89f61bc15ea8690a96db226fa5b15fc978d49a0c4afde2d5045055cecb02330f3a5c9d0b9d61145824cb0526c565d79f30cc3cd1dc6ac7692f2536008f0c8545ad035e2b346abf8d0f3d32a7032bb8017aa334b5e95056", 0x65}, {&(0x7f0000000080)="86d3d824ae95a24195626da237209b042867c02ceb90106107817e1753245c449ad0cfb593485eaf91272bbaad38f2c28c89a8b94b163322dd5fb33b6b8ebf694e84797bb055d64f9eb4189fc897c2cdf368c0dff35472", 0x57}, {&(0x7f0000000180)="550f06df04a43d92a5d056db2389adfa4cb3b22e313d4fb28f70a5b7d253a5114084b063109a9c236d9b012e962c364441a5c68bcb2331841e3a0790461ec02a38e289248098935dee2f640bc8cfe902da16f3256e7412f69cd580ca938c417c7706a5e3f466ffb86f00c31b921d8062efd4c05a0f247c827a1ecf7663355d5d8d0a9dda91f9169afb6de656d9765bd3ca0bd58c3f5c9b8b8dcab8fc43d69426c2f39ecda86a657f18d719b8c80453de8b3cbc", 0xb3}, {&(0x7f0000000240)="29379d7805534ba2323b72baf31be562c0d187452f7ef610cb8a9afccbbf870f8500549d0db2fc60d9229ff4bb5d6afadebfb4cf72584ae5e1c278194e40331aebc91e830768fb9344777e059653b2f858f4e123de33d36f406d9e22e61148bd667e17ea0487034888d993a3e8f37248fa070902916fe54477c2d174a27f8cba", 0x80}, {&(0x7f00000002c0)="e4c63396e662bba86d901bcd8ba496541f15ee706f6dc6ab99198875b6373521f1553c558c76349d4b8c0e10ffbacf8a2bccf935fb8526186d6851de54d3cc40bc61e3af331cc2f9e2605c0d926d534ffe0603e6065e8f471d5702d2650ae33cdbc039bbbe2f172add054322f2c71025f3e441f35f98f2cf2bfe34a8cad90b3077a0918d63109ddb6e11c047734ff53ad18840afe8aecf9c871318e6eb8886375fe5604a32e2a7f46266fbe4be0f150cdae3bab55a8c0e8d5e81ca9a9da1e2eb6cd0edfc7f9acb13cf8cba98b9ed", 0xce}], 0x5, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) splice(r3, &(0x7f0000001600)=0xfffffffffffffffa, r2, &(0x7f0000001640)=0x1000, 0x8000000000000001, 0x4) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x410000, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000580)={0x0, 0x1f, 0x81, 0xf2b4, 0x7, "aae459c62bc6894c40cca5630bd2f84a408893"}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x410000, 0x0) splice(r4, 0x0, r7, 0x0, 0x7fd, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000600)={{0x0, 0x20, 0x9, 0xff, 0xffff, 0xffffffffffffffff, 0x400, 0x48, 0x9, 0x401, 0x0, 0x800, 0x6, 0x401, 0xff}}) 04:42:12 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:12 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1, 0x5) close(r1) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) io_uring_setup(0xb17, &(0x7f0000000180)) (async) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) write(r3, &(0x7f0000000000)="4d24a3ec09226d90d8a9f3398f633501a5bbe4264f60f8d62ecf2b596deec8e761cfcffa", 0x24) (async) write(r3, &(0x7f0000000000)="4d24a3ec09226d90d8a9f3398f633501a5bbe4264f60f8d62ecf2b596deec8e761cfcffa", 0x24) 04:42:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000040)={0x2, 0x4, 0x19, &(0x7f0000000000)=""/25}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x5, 0x101, @vifc_lcl_ifindex=r5, @empty}, 0x10) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2258.853245][ T6644] usbhid 5-1:0.0: can't add hid device: -71 [ 2258.863452][ T6644] usbhid: probe of 5-1:0.0 failed with error -71 [ 2258.902596][ T6644] usb 5-1: USB disconnect, device number 19 04:42:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000040)={0x2, 0x4, 0x19, &(0x7f0000000000)=""/25}) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x5, 0x101, @vifc_lcl_ifindex=r5, @empty}, 0x10) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2258.959626][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2259.052949][ T26] usb 4-1: new high-speed USB device number 102 using dummy_hcd 04:42:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000040)={0x2, 0x4, 0x19, &(0x7f0000000000)=""/25}) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x5, 0x101, @vifc_lcl_ifindex=r5, @empty}, 0x10) close(r1) (async, rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x0) (rerun: 64) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:13 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x400454ca, 0x0) 04:42:13 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2259.313403][ T6644] usb 5-1: new high-speed USB device number 20 using dummy_hcd 04:42:13 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)="e28f5f1444d9ddc4ed8e0e6a636d76f69cdb7ece1bc42a1c56e1e0735eb626646cc87b702e5cee55827f64c0c4657a3017ccc32fbba08b652c33cd2c85cfa82031113a9aa4939a53b73c3473b88c3f381f3d8860c5def4b5b828a979380cdcaf77a47097f4081768da08ce82e8b6d6d5e965e78f0fd6961bd51ff56b15383aecc337fb9fa9b0c89864a9177062070bfab2697db002dfd444e598cdb1342d2cb72d25912b1c82b37467cfb58910fd8e2e1f81057f0b79aec91e3514767b27d15e6c30d96bf45c9274166808a2fcfe86c679b46b", 0xd3}, {&(0x7f0000001180)="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", 0x1000}], 0x3, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2259.414374][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.434114][ T26] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2259.467371][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.549327][ T26] usb 4-1: config 0 descriptor?? [ 2259.703240][ T6644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.714832][ T6644] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2259.724542][ T6644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.735227][ T6644] usb 5-1: config 0 descriptor?? [ 2259.984202][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2260.024466][ T26] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 2260.035832][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002D/input/input58 [ 2260.124354][ T26] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2260.227630][T25350] usb 4-1: USB disconnect, device number 102 [ 2261.023722][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2261.183149][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:15 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:15 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)="e28f5f1444d9ddc4ed8e0e6a636d76f69cdb7ece1bc42a1c56e1e0735eb626646cc87b702e5cee55827f64c0c4657a3017ccc32fbba08b652c33cd2c85cfa82031113a9aa4939a53b73c3473b88c3f381f3d8860c5def4b5b828a979380cdcaf77a47097f4081768da08ce82e8b6d6d5e965e78f0fd6961bd51ff56b15383aecc337fb9fa9b0c89864a9177062070bfab2697db002dfd444e598cdb1342d2cb72d25912b1c82b37467cfb58910fd8e2e1f81057f0b79aec91e3514767b27d15e6c30d96bf45c9274166808a2fcfe86c679b46b", 0xd3}, {&(0x7f0000001180)="3919526d826418671faba79aa9d11d92fd1b7185fa9ea60bf91025c483f4b91db4d29d7f2892c41fc965b8033b59a88da6f5824f0996d8b46abd20e36fce297212fc177519a410c3f9ace006ee681195056b7f4f045788e7acf2c1230ba213e5f17c3c52f6586539e1d49e8861f511347b79a89b753a0deca1ca0d5160becf9114e90a29b63418375ced07cec6dad96b62547096b37350040848ae41e5d6630591cc5421b2471add0e2b7b323a3d5ae2a6094b914c6ee92994a65ca0d465082179474167c9032af207048994d261ef7ebf94a1e64f5d800aaa96b827548c813d2285f1a166e251da13c6773da30e14dc46953106249beb60dc50dd9c4cc9e814ab7352c2018e474a9dcfdbbeb5ddee1a69515eaa7ba19852f137d133b7eb724007dc2bd1b98d96038fc60c80cbc6dc6506b5326656be0aea1ebd09d8f3efc33d22f77ace0a14ab8904aff492ad4f921b47eae2dbc81b1de1e98dcefc7b992d691e46bc927d4c25f120267f620cc9532c811471bf831098412adf361f4176788ba56ec12250e58364c0845a6c65a598ad560278199319a28f2ef9c9859ce29e0388b93550091129766975102ab21333525a134bb9e277ad950e25f73f62f6dde547d23d19bdd13d9249c6b8963a78f9a274308375db818f6a2b264111f49840e43477bc4b5f87695db9223a28be499499a5fd8dc0244f9928b0fd2c5fccb2e4abf81bb426723ad3264ca087d93cf679b0ac101c6a33649653454f38596fb8bcc35f4fea2c5cafcec40a1e5d625ed36e25b56eace15bca8a2532af481100d7408b2e24eb47ddd1e6dc488beee343e74b56b138608270061231507d635fd33ad1cb349958643fe1823c8c912777cd982c2a8490cbb63023571e0246eb0256c6e707fe1f949a51473061a6e3e37179ea031f8127bdcbb9289aed21e167c93b8e17aaa96e7791bda3dc9b3c0e00b8edae78a36f07083aa892f8d6692b981bccc5f824ce9666421147b08e6aacad5834732b595ff06db353cabede5d561718540a0a0d8c7f5939aaf4b8ec5832f408ebce04a238a40d6fbeb08c72a668641fff224e2666f91f40073e2ca7532c30669c26958ab544ac01945c6367cca9405b3f4518f2f8ed78e56d5e569d57cee40bbb5f377b5701363989dcba795ac246b1efe01090aba71012c4aca59eeba9ecec1f15b38621602a10e2c831c32c26283aac2cfcf7c903fb6210b851af012c3c193cc1553b1d9344d306d83373745ec4de6340d93407b0618544c727e7e50fc7b6c9332cedbd3086ea585c324f1eb0bbd6613c272517fbf6c7df64b29e9c15731519cea95f958c4940acda84c6290b0a7b511b1797ea2b9a8586cd8419fce98da5e51ff17a394056e953a989db6ea0ccefceadfed0c72113bd98d62e7f62b7c27dbdecb7610f0498ec534c84e6e521b791eb89d28c5b6ef51780e827f6e8b69216333274a83ab2b301b7b5d43bcc4a6b925c7a0cdd5cf35d69d3d1eead2e843f7bd438e78d227b635467fdc881c399e0d8a3fb436bf2144c96c1f33a739c95eb04fa8479b68e396734625dd4559b1708b99f03c1aca1d5869d4bb5ef7e63b400643126dda908e66e2ec6a70c97ff3985abd1f985b58b07bfa083d49c3e92d1c023b2d1668ea3b491bc50ceec59962d20c88e09bf5b11a97763bb3e387bdb0c93ffbeac93d85e777e67cef196031c00754750ea9adef9edf189212f1711575083d8147d469c27b6e2cba9ddec8760e8ebe46ccc27ef99cddaa831830b2fbe511245d9d2cc80f884eccce633c45060ca81fe0cd59660d08695568f30e8c0f5e6d9a53f642d419464a99da979be902180d25fdc2b57433fa0f4c44968433ee879a29f0588d36ccdcaa6b13391b04b04469d9485df45740d7bb50d4820e920b4b8a2cba6a79d7c1000830b464e66e0db01b5ea2748aadfb0ad796f738e042782cb7ea4e0348e76f04ed71bf9ae1dbb27a3103fa94a19d59780ccdb8c1d446466e344400b0875ddb6c141487d3d4ef600d882b004c3621135b3c75569f56dd802831940de4290e0bb3cb9592ced0265a10347402cbaa35ddc5ada8f1f1fa1972f5819b108a626b7713ec0f76155a28b6f1c2fe619eeb14d4c893c2692d0c4d196289eb41898bae5201fb8330463d32ae07a27738200f8e37bef4ccc3199d16066d4e09accb6352bed19c7423114f611ccff612bc057fb186d2eea2f6b2e93bb79af26b87fcda69183968a476ed243b2dfb469714d04599a8ee0883f8862111202c7c35b803d415579a668085acc07ce426b4a8e557833f9eb051704f36d444e976e18e81d9bf1e49163ae312448cad071ed5edb1eec11eb6a4db7aaede85c4b40671ee57791d73c50fad433d8549f08fe46bce73b4f7468f10257033cb7b1ea8bebdd7d347e79f04b9de829b33d4b08ef0b3cb9449fee31b642da040e1b6b6519a26879660963ab444a88a1362cb7a0d1b404ebab8e5bb1bf30de44ccfd93355c3040e1b87f7c5502de468cf57e2a5bffb6f02dbed7f3cb8e978373723ddeae377379e52016d9575bfa561abdc89ced61db1b318566942f19dea2e97148264d614fd876a906f323cf50f9930d57b5f4a365939284a7bd3f5e5e3ebccb79020203f1fa42441984521f7aad6f724cb271dd84c5cf31179e11dc0efcf838428dfcb41c118af283bac75e94a3c17eb2fe66cf69cdf41475de31858628f7996886b24a148d6363f259dfb510feeb3c9d336091defba4c5bd06e5b806071d54c27553c1a011628fd9cb8468750e9e51a2988cec41d604c6de5e2a9dc50d5cb8b765cdd46daf1cedd216df7f8d5dd3b32bd7930929e112c380defa2c102615be7a901d8415f50ff4206b127300795c821af4940edee044a41b91b208c934af8163572cde19f7ce6f4eb7af0848f1af6174a280b17eb4a5a0c473b5b13589763a5f60cb467a8d23d7ac1d056ddad5033e14d3956a9035f1645b543fac0b778b64d2294b1c421aab2b3f8cdd5f1791431f9ea4e27c2a657d433cfc00416c46df0844ad1945bd1e918567438b2ba3512d0c2f5359fc1647d1e1ed9c28f648c30fef126e7815f5224dc1ba0662c70fcd96c9dc1a6567b386da67bc8ce7bf3d4f864d4daf3627543a7ce206137f8b200e61e95b91b7bf0b2f67dbc3d3b68a7f79010b96f02ffb0429f4a0b7c3ef8d4cf632a48288d7ba3248ce09ffbd802c37374bbb0f7717fa270f59a49bbc2ff50144ff6a5e838e6340fd315e68885c14cb03b51333058080ec5c14c31e0cdd50f0f2e7eccd6c46381bd23b6d5d806df1e24d00caccd9bb221af81baf0470b7ff3ad7bfa2f10031804a6638b2335ddd354c1ea101d24a30c5aa72ee71e1b0571df3986d0a8e2d28020d6fd9821f0a1b75e28a0380fe4cdb56f51085931c9457fa988704a7a5310ef460eea4f719965d69cd8cc375327cb5a8d48df1d8d4116b78efdcd166a40611dda988a7f47efa65c006cb9810ccde1d5662f6caf3ec0eac616dacc2d300be8dbaec246b948018ef8e871847a4765746d3d09521ea968a314b2e40f8b40afcc099c9f83e697fe94976b6438f9a2a35d2eb4896acc062de72902b2273e8ef7008f6f6ccd417aa807535fd1e98c1dfb1442f75a38c0b2aedf0d123695558acc0f1c156f122f32148aaa25d4dab9f519b40b4e737bf0d843c00fb4fb6002ca160e2e5042cbc9b8dff9cc82650953a330f844776595a581d45d1deaea8a1bbf666590fa5ef17090394b82051a21ad061bb0c42f9dbdf273ace13636791ec77227ffe5a0a9bb14907d2468d830ec164077177888184c650151f03373fd1cbd749c8e746dec6f24c2d14bd77ef7b40a390f02254f854b3e6805c5a7c5249eb36b4ae5b48bcdf3a07f0ec4f18a84cb5068019034ad97ea9d2d80b4393dfb42576f8cf545c1ba2760f87bf81790f3e2f0a228212b5bb16b9f96fe1b159434c0d6cb58f9c867222fe684d499db0e0b270c09825975d3072aedb2a290b95445e08f45297714f5edc7f4fdee078704b2575eb48dbbbf5eb4a91d9b711d6f6988ff12d27295673fdb641becb046937339a7110a4b95a0af45dd15758bdf49e0c25baf4bdc172c544a8b8c3e0795a9ce264bcd4c176e7456bbab23516e0e4a913398fe73ca8f3271435493ca7a8bff6b0675bb851dea11852254ab5b9bfd2806443b1b36439f2c2efb936f9aef3545055e0d39e227a8d91b9cc37d3fd8431b00f5c86cfd0b9f32fc4d1d7d3f19cd13d0755c9ea838f0550594272569b48e6e79fadf35b388e0e64387d76c36835751120a22a57f3ae7828ea0c7b4b20f2377055e0a5d4113460bb3e620a38f3d4a2b724dc5dda4bd3e6fe7d3c16eb76faab0b5da285717f25e084819b062ff31ab793ae8b037f4b986a41e57fc716da0f2ca7b044d97fe7087585ee29b410c300878c39272a1c62fa149e0aa977a39d3e94955aa6826180acaf50d7c8757bd8cdf2f1bda5e69aa602f1e768d1b3e2b0d14b7d0637bc6895b2383d368daed47ec08241f7bed8e1827c5ddb5ed442cd79a7a30facb194fd1933c3a5450ec0d8b55687f8d0fa7ee5c2e880691c4912533f7fd103f8f69cc9057b893381d0d63b67b6a58353292de78adcfbed0ba3f912a104ff39cef3cdec6981ea0fec0b8b7929e1d56af66111fbccb0178fe9fece8ce26c6cb4e3eb7a7420daf456efdc59a95fde6927ec968335c434895810f2488b954e50f40010131288a61ca3deb74406d7c613545713a8068a836fba032b6edf3b37ad9748d301fb4e9ff586e45c8f4ed55c883be5e04ffc01fabe309ba82223f27459cbd94794dfabff8087c00911c5ed3aee7548cb671b87170adfc386a49fa5e4623650c599393117514fc4e82191c3294197a37b22054451a82388c86765e554b61ad1e8ecff0ad8f05a91a0930ed1e3dfd7a91ec138b6733eb80316661995a9f5941d8bee3ca635aec511d40df2cd9a1cb368b5cb5d40ecc0f4ee3405ec1b4b60b8bde21169907e040f2255e0a0ba61fab0a02aac1eca0a9a3c3537c14538fb623aaea8157634bf7206491ff87c7f37bdc295b68a9ceead6cae2226b0562d918e7984726553eeb7644d2ae8c53927668b574acafa96a28ef776e5500edf4ebeadb2024b6ee19498e7a83879eed714b049cd3a732bf4a9c7c8df935fa7af410dccde1b8ab4603162b5fd93a6e016f8942b7ea73621dfb392fefec4d6f488bf99464c17cd3ce640689c8c7bcab598b95d7810c15344e5d19c5937cf8bfefca0efd0f2db7cfb0a0eb9d6964c3cd82a666de0f042fb044ff91f77fb040943304c6679397d2c7f41e565c4158178923fe6879bb23a0425943e981d1697c4b7bec3191823eb241d6010782af7829c0884ac9d8d577695c494e6ed5962e465235a485e70a6613528c5528eb0df4bf50f769cc0f333342c8dd85eb5288e505b7338fc513bb5b932808f1778e1ed7ef962180dd215e2a3b15af030e9a46ff023fa663e27a05a4b18b663178c9de48171ca37c12329a41414463b91ac28d1a70605d04480652cb9b4e74bcf9e1db7bced09078dab35b9749ebf7994babbc5efdb32756448892c8fbb48aa86cf35dcb508dccb4ed2ee9d5fc0d4c769b0229fb7e9a9f0cf67f4c0e4c34f9385c7223d935edad458292ab5d22b79fd04ccea713e6f60cb9ec038b938d6dbb04e7aa6370416ce316b3adbc104e5470659ef44889b2518372449beeb78d33d57ac90e7e1ffb8567ae705b0bb9f0d2962b2b89cb3bfe901eed863b85f3f6295ce6dd648eb037773f53d2735", 0x1000}], 0x3, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:15 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x40049409, 0x0) 04:42:15 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="e4b9bb5712fa6d96b26b7599661a89f61bc15ea8690a96db226fa5b15fc978d49a0c4afde2d5045055cecb02330f3a5c9d0b9d61145824cb0526c565d79f30cc3cd1dc6ac7692f2536008f0c8545ad035e2b346abf8d0f3d32a7032bb8017aa334b5e95056", 0x65}, {&(0x7f0000000080)="86d3d824ae95a24195626da237209b042867c02ceb90106107817e1753245c449ad0cfb593485eaf91272bbaad38f2c28c89a8b94b163322dd5fb33b6b8ebf694e84797bb055d64f9eb4189fc897c2cdf368c0dff35472", 0x57}, {&(0x7f0000000180)="550f06df04a43d92a5d056db2389adfa4cb3b22e313d4fb28f70a5b7d253a5114084b063109a9c236d9b012e962c364441a5c68bcb2331841e3a0790461ec02a38e289248098935dee2f640bc8cfe902da16f3256e7412f69cd580ca938c417c7706a5e3f466ffb86f00c31b921d8062efd4c05a0f247c827a1ecf7663355d5d8d0a9dda91f9169afb6de656d9765bd3ca0bd58c3f5c9b8b8dcab8fc43d69426c2f39ecda86a657f18d719b8c80453de8b3cbc", 0xb3}, {&(0x7f0000000240)="29379d7805534ba2323b72baf31be562c0d187452f7ef610cb8a9afccbbf870f8500549d0db2fc60d9229ff4bb5d6afadebfb4cf72584ae5e1c278194e40331aebc91e830768fb9344777e059653b2f858f4e123de33d36f406d9e22e61148bd667e17ea0487034888d993a3e8f37248fa070902916fe54477c2d174a27f8cba", 0x80}, {&(0x7f00000002c0)="e4c63396e662bba86d901bcd8ba496541f15ee706f6dc6ab99198875b6373521f1553c558c76349d4b8c0e10ffbacf8a2bccf935fb8526186d6851de54d3cc40bc61e3af331cc2f9e2605c0d926d534ffe0603e6065e8f471d5702d2650ae33cdbc039bbbe2f172add054322f2c71025f3e441f35f98f2cf2bfe34a8cad90b3077a0918d63109ddb6e11c047734ff53ad18840afe8aecf9c871318e6eb8886375fe5604a32e2a7f46266fbe4be0f150cdae3bab55a8c0e8d5e81ca9a9da1e2eb6cd0edfc7f9acb13cf8cba98b9ed", 0xce}], 0x5, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) (async) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) splice(r3, &(0x7f0000001600)=0xfffffffffffffffa, r2, &(0x7f0000001640)=0x1000, 0x8000000000000001, 0x4) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x410000, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000580)={0x0, 0x1f, 0x81, 0xf2b4, 0x7, "aae459c62bc6894c40cca5630bd2f84a408893"}) (async) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x410000, 0x0) splice(r4, 0x0, r7, 0x0, 0x7fd, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000600)={{0x0, 0x20, 0x9, 0xff, 0xffff, 0xffffffffffffffff, 0x400, 0x48, 0x9, 0x401, 0x0, 0x800, 0x6, 0x401, 0xff}}) 04:42:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) [ 2261.853252][ T6644] usbhid 5-1:0.0: can't add hid device: -71 [ 2261.853354][ T6644] usbhid: probe of 5-1:0.0 failed with error -71 [ 2261.855327][ T6644] usb 5-1: USB disconnect, device number 20 04:42:15 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4004ae8b, 0x0) [ 2262.063689][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2262.102989][T25350] usb 4-1: new high-speed USB device number 103 using dummy_hcd 04:42:16 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:16 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4004ae99, 0x0) [ 2262.263053][ T6644] usb 5-1: new high-speed USB device number 21 using dummy_hcd 04:42:16 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x40086602, 0x0) [ 2262.463513][T25350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:42:16 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="e4b9bb5712fa6d96b26b7599661a89f61bc15ea8690a96db226fa5b15fc978d49a0c4afde2d5045055cecb02330f3a5c9d0b9d61145824cb0526c565d79f30cc3cd1dc6ac7692f2536008f0c8545ad035e2b346abf8d0f3d32a7032bb8017aa334b5e95056", 0x65}, {&(0x7f0000000080)="86d3d824ae95a24195626da237209b042867c02ceb90106107817e1753245c449ad0cfb593485eaf91272bbaad38f2c28c89a8b94b163322dd5fb33b6b8ebf694e84797bb055d64f9eb4189fc897c2cdf368c0dff35472", 0x57}, {&(0x7f0000000180)="550f06df04a43d92a5d056db2389adfa4cb3b22e313d4fb28f70a5b7d253a5114084b063109a9c236d9b012e962c364441a5c68bcb2331841e3a0790461ec02a38e289248098935dee2f640bc8cfe902da16f3256e7412f69cd580ca938c417c7706a5e3f466ffb86f00c31b921d8062efd4c05a0f247c827a1ecf7663355d5d8d0a9dda91f9169afb6de656d9765bd3ca0bd58c3f5c9b8b8dcab8fc43d69426c2f39ecda86a657f18d719b8c80453de8b3cbc", 0xb3}, {&(0x7f0000000240)="29379d7805534ba2323b72baf31be562c0d187452f7ef610cb8a9afccbbf870f8500549d0db2fc60d9229ff4bb5d6afadebfb4cf72584ae5e1c278194e40331aebc91e830768fb9344777e059653b2f858f4e123de33d36f406d9e22e61148bd667e17ea0487034888d993a3e8f37248fa070902916fe54477c2d174a27f8cba", 0x80}, {&(0x7f00000002c0)="e4c63396e662bba86d901bcd8ba496541f15ee706f6dc6ab99198875b6373521f1553c558c76349d4b8c0e10ffbacf8a2bccf935fb8526186d6851de54d3cc40bc61e3af331cc2f9e2605c0d926d534ffe0603e6065e8f471d5702d2650ae33cdbc039bbbe2f172add054322f2c71025f3e441f35f98f2cf2bfe34a8cad90b3077a0918d63109ddb6e11c047734ff53ad18840afe8aecf9c871318e6eb8886375fe5604a32e2a7f46266fbe4be0f150cdae3bab55a8c0e8d5e81ca9a9da1e2eb6cd0edfc7f9acb13cf8cba98b9ed", 0xce}], 0x5, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) splice(r3, &(0x7f0000001600)=0xfffffffffffffffa, r2, &(0x7f0000001640)=0x1000, 0x8000000000000001, 0x4) close(r1) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x410000, 0x0) (async) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x410000, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000580)={0x0, 0x1f, 0x81, 0xf2b4, 0x7, "aae459c62bc6894c40cca5630bd2f84a408893"}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x410000, 0x0) splice(r4, 0x0, r7, 0x0, 0x7fd, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000600)={{0x0, 0x20, 0x9, 0xff, 0xffff, 0xffffffffffffffff, 0x400, 0x48, 0x9, 0x401, 0x0, 0x800, 0x6, 0x401, 0xff}}) [ 2262.463550][T25350] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2262.463568][T25350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.464936][T25350] usb 4-1: config 0 descriptor?? [ 2262.623674][ T6644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:42:16 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)="e28f5f1444d9ddc4ed8e0e6a636d76f69cdb7ece1bc42a1c56e1e0735eb626646cc87b702e5cee55827f64c0c4657a3017ccc32fbba08b652c33cd2c85cfa82031113a9aa4939a53b73c3473b88c3f381f3d8860c5def4b5b828a979380cdcaf77a47097f4081768da08ce82e8b6d6d5e965e78f0fd6961bd51ff56b15383aecc337fb9fa9b0c89864a9177062070bfab2697db002dfd444e598cdb1342d2cb72d25912b1c82b37467cfb58910fd8e2e1f81057f0b79aec91e3514767b27d15e6c30d96bf45c9274166808a2fcfe86c679b46b", 0xd3}, {&(0x7f0000001180)="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", 0x1000}], 0x3, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)="e28f5f1444d9ddc4ed8e0e6a636d76f69cdb7ece1bc42a1c56e1e0735eb626646cc87b702e5cee55827f64c0c4657a3017ccc32fbba08b652c33cd2c85cfa82031113a9aa4939a53b73c3473b88c3f381f3d8860c5def4b5b828a979380cdcaf77a47097f4081768da08ce82e8b6d6d5e965e78f0fd6961bd51ff56b15383aecc337fb9fa9b0c89864a9177062070bfab2697db002dfd444e598cdb1342d2cb72d25912b1c82b37467cfb58910fd8e2e1f81057f0b79aec91e3514767b27d15e6c30d96bf45c9274166808a2fcfe86c679b46b", 0xd3}, {&(0x7f0000001180)="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", 0x1000}], 0x3, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) [ 2262.703417][ T6644] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2262.738211][ T6644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.780106][ T6644] usb 5-1: config 0 descriptor?? [ 2262.944655][T25350] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 2262.954784][T25350] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002E/input/input59 [ 2263.030772][T25350] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2263.111432][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2263.343286][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2263.350349][ T5980] usb 4-1: USB disconnect, device number 103 [ 2264.143667][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2264.223782][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:18 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x40186366, 0x0) 04:42:18 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:18 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) io_uring_enter(r0, 0x5673, 0xe9f6, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:18 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x26400, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}, {&(0x7f0000000000)="c17cd86dcf2184e67d636d8bd2c4b41aea6e34f9c7c5d0c4b5c838d74185f737806eb2c9d31b42b60232235dd74c2a8a7bfb04b372f1a08385080143fbe34451d6f83b4c40de6c4436991c24b92bd9f1ad31f907e5adb41559dcf0a0d3f68951eb387e451b2dc4e82b8afc85f0e8cda1696051585b19a6c0bea119352f330fb8f85a4ea7b69d3b0e1be12507463f878b", 0x90}, {&(0x7f0000000240)="ca7d181f85585fca3ee0f059b68e434d796a0ef89e8ecab186f38f41cc876ef57cc05250bdd1949c5a803fbdb90ff305c7b76dfeb5f66ab7f78c389a18371b884fe9f09814685bb854fa5a44b18fede4d24df546a8bf5cb761b34644645343fda6c82b88f2f52cbb448f16e4b8a7cc2a2411ff1a1b125aeb3befc788e5a139a7cfef6c2a08931bf1c40268884901d8c797dd2ce82a0d1438df3976adbc890f1e9214c82ab953c326569204d902e930239203cd64d87fd643b7fc", 0xba}], 0x3, 0xe) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 04:42:18 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x26400, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}, {&(0x7f0000000000)="c17cd86dcf2184e67d636d8bd2c4b41aea6e34f9c7c5d0c4b5c838d74185f737806eb2c9d31b42b60232235dd74c2a8a7bfb04b372f1a08385080143fbe34451d6f83b4c40de6c4436991c24b92bd9f1ad31f907e5adb41559dcf0a0d3f68951eb387e451b2dc4e82b8afc85f0e8cda1696051585b19a6c0bea119352f330fb8f85a4ea7b69d3b0e1be12507463f878b", 0x90}, {&(0x7f0000000240)="ca7d181f85585fca3ee0f059b68e434d796a0ef89e8ecab186f38f41cc876ef57cc05250bdd1949c5a803fbdb90ff305c7b76dfeb5f66ab7f78c389a18371b884fe9f09814685bb854fa5a44b18fede4d24df546a8bf5cb761b34644645343fda6c82b88f2f52cbb448f16e4b8a7cc2a2411ff1a1b125aeb3befc788e5a139a7cfef6c2a08931bf1c40268884901d8c797dd2ce82a0d1438df3976adbc890f1e9214c82ab953c326569204d902e930239203cd64d87fd643b7fc", 0xba}], 0x3, 0xe) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:18 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) io_uring_enter(r0, 0x5673, 0xe9f6, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) io_uring_enter(r0, 0x5673, 0xe9f6, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) [ 2264.913234][ T6644] usbhid 5-1:0.0: can't add hid device: -71 [ 2264.920261][ T6644] usbhid: probe of 5-1:0.0 failed with error -71 [ 2264.930405][ T6644] usb 5-1: USB disconnect, device number 21 04:42:19 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x401c5820, 0x0) [ 2265.051257][T23829] tty tty20: ldisc open failed (-12), clearing slot 19 04:42:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x26400, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}, {&(0x7f0000000000)="c17cd86dcf2184e67d636d8bd2c4b41aea6e34f9c7c5d0c4b5c838d74185f737806eb2c9d31b42b60232235dd74c2a8a7bfb04b372f1a08385080143fbe34451d6f83b4c40de6c4436991c24b92bd9f1ad31f907e5adb41559dcf0a0d3f68951eb387e451b2dc4e82b8afc85f0e8cda1696051585b19a6c0bea119352f330fb8f85a4ea7b69d3b0e1be12507463f878b", 0x90}, {&(0x7f0000000240)="ca7d181f85585fca3ee0f059b68e434d796a0ef89e8ecab186f38f41cc876ef57cc05250bdd1949c5a803fbdb90ff305c7b76dfeb5f66ab7f78c389a18371b884fe9f09814685bb854fa5a44b18fede4d24df546a8bf5cb761b34644645343fda6c82b88f2f52cbb448f16e4b8a7cc2a2411ff1a1b125aeb3befc788e5a139a7cfef6c2a08931bf1c40268884901d8c797dd2ce82a0d1438df3976adbc890f1e9214c82ab953c326569204d902e930239203cd64d87fd643b7fc", 0xba}], 0x3, 0xe) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:19 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) io_uring_enter(r0, 0x5673, 0xe9f6, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) io_uring_enter(r0, 0x5673, 0xe9f6, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) 04:42:19 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2265.152981][T16686] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2265.199078][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2265.283076][ T6644] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2265.543072][T16686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.560823][T16686] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2265.573583][T16686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.593348][T16686] usb 4-1: config 0 descriptor?? [ 2265.653149][ T6644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.671102][ T6644] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2265.682519][ T6644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.706204][ T6644] usb 5-1: config 0 descriptor?? [ 2266.075891][T16686] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 2266.094509][T16686] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002F/input/input60 [ 2266.179633][T16686] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2266.230894][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2266.481271][T25350] usb 4-1: USB disconnect, device number 104 [ 2267.263330][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2267.271521][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:21 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) io_uring_setup(0x7d10, &(0x7f0000000000)={0x0, 0xf345, 0x47, 0x1, 0x13d, 0x0, r2}) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x2f, 0x81, 0xff, 0xe9d, 0x40, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50, 0x8000, 0x0, 0x9}}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:21 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) dup(r2) 04:42:21 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4020940d, 0x0) 04:42:21 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 04:42:21 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) dup(r2) 04:42:21 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) io_uring_setup(0xb17, &(0x7f0000000180)) (async) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) dup(r2) [ 2267.963187][ T6644] usbhid 5-1:0.0: can't add hid device: -71 [ 2267.969236][ T6644] usbhid: probe of 5-1:0.0 failed with error -71 04:42:21 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async, rerun: 32) io_uring_setup(0x7d10, &(0x7f0000000000)={0x0, 0xf345, 0x47, 0x1, 0x13d, 0x0, r2}) (async, rerun: 32) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x2f, 0x81, 0xff, 0xe9d, 0x40, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50, 0x8000, 0x0, 0x9}}) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2268.093855][ T6644] usb 5-1: USB disconnect, device number 22 04:42:22 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000003640)="fd07558e27d0089b47e3619d0016be33eb2c3563adf6ceb4754be41116991d0a5b423a41629121efc6f3fc5b4cd05cfa07dbf2ba585e180a", 0x38}], 0x1, 0x0) close(r1) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001240)={0x0, "5e82cfe7e43e794b679f49eca27557c4"}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000002640)={{r5}, 0x0, 0xe, @inherit={0x70, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000050000fd00007c70446921105b0000dd715e0afbffffffffffffff01000000000000000400000000000000c06a0000000000000800000000000000040000000000000005000000e00000000100"/112]}, @devid=r3}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={r3, "904981e99256ccd7356f2c57b692cb0b"}) syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000002240)={r6, 0x20000000000000}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:22 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4048ae9b, 0x0) 04:42:22 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) io_uring_setup(0x7d10, &(0x7f0000000000)={0x0, 0xf345, 0x47, 0x1, 0x13d, 0x0, r2}) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x2f, 0x81, 0xff, 0xe9d, 0x40, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50, 0x8000, 0x0, 0x9}}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) io_uring_setup(0xb17, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) io_uring_setup(0x7d10, &(0x7f0000000000)={0x0, 0xf345, 0x47, 0x1, 0x13d, 0x0, r2}) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x2f, 0x81, 0xff, 0xe9d, 0x40, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50, 0x8000, 0x0, 0x9}}) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) [ 2268.293018][ T5980] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2268.327611][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2268.523709][ T6644] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2268.713216][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2268.731276][ T5980] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2268.743348][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.776521][ T5980] usb 4-1: config 0 descriptor?? [ 2268.933244][ T6644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2268.944572][ T6644] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2268.954105][ T6644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.969732][ T6644] usb 5-1: config 0 descriptor?? [ 2269.267069][ T5980] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 2269.302640][ T5980] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0030/input/input61 [ 2269.350012][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2269.398664][ T5980] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2269.687595][ T5980] usb 4-1: USB disconnect, device number 105 [ 2270.313392][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2270.388237][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:24 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:24 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4090ae82, 0x0) 04:42:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000008c0)) 04:42:24 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000003640)="fd07558e27d0089b47e3619d0016be33eb2c3563adf6ceb4754be41116991d0a5b423a41629121efc6f3fc5b4cd05cfa07dbf2ba585e180a", 0x38}], 0x1, 0x0) (async) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000003640)="fd07558e27d0089b47e3619d0016be33eb2c3563adf6ceb4754be41116991d0a5b423a41629121efc6f3fc5b4cd05cfa07dbf2ba585e180a", 0x38}], 0x1, 0x0) close(r1) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001240)={0x0, "5e82cfe7e43e794b679f49eca27557c4"}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000002640)={{r5}, 0x0, 0xe, @inherit={0x70, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000050000fd00007c70446921105b0000dd715e0afbffffffffffffff01000000000000000400000000000000c06a0000000000000800000000000000040000000000000005000000e00000000100"/112]}, @devid=r3}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={r3, "904981e99256ccd7356f2c57b692cb0b"}) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000002240)={r6, 0x20000000000000}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000002240)={r6, 0x20000000000000}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x7fffffff, 0x63d}) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r1, 0x0, r1, 0x0, 0x100000000101ff, 0x8) 04:42:24 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x7fffffff, 0x63d}) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r1, 0x0, r1, 0x0, 0x100000000101ff, 0x8) 04:42:25 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) (async) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000003640)="fd07558e27d0089b47e3619d0016be33eb2c3563adf6ceb4754be41116991d0a5b423a41629121efc6f3fc5b4cd05cfa07dbf2ba585e180a", 0x38}], 0x1, 0x0) (async) close(r1) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001240)={0x0, "5e82cfe7e43e794b679f49eca27557c4"}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000002640)={{r5}, 0x0, 0xe, @inherit={0x70, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000050000fd00007c70446921105b0000dd715e0afbffffffffffffff01000000000000000400000000000000c06a0000000000000800000000000000040000000000000005000000e00000000100"/112]}, @devid=r3}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={r3, "904981e99256ccd7356f2c57b692cb0b"}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000002240)={r6, 0x20000000000000}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2271.023450][ T6644] usbhid 5-1:0.0: can't add hid device: -71 [ 2271.031184][ T6644] usbhid: probe of 5-1:0.0 failed with error -71 [ 2271.051849][ T6644] usb 5-1: USB disconnect, device number 23 04:42:25 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4138ae84, 0x0) 04:42:25 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async, rerun: 64) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x7fffffff, 0x63d}) (rerun: 64) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r1, 0x0, r1, 0x0, 0x100000000101ff, 0x8) 04:42:25 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44000) close(r1) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:25 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async) close(r1) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2271.263239][ T5161] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2271.423558][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:25 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x41a0ae8d, 0x0) [ 2271.643772][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2271.667194][ T5161] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2271.686945][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.715229][ T5161] usb 4-1: config 0 descriptor?? [ 2272.204379][ T5161] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 2272.232383][ T5161] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0031/input/input62 [ 2272.321309][ T5161] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2272.469238][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2272.624012][ T5169] usb 4-1: USB disconnect, device number 106 [ 2272.943421][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000008c0)) 04:42:27 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44000) close(r1) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async) close(r1) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) 04:42:27 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:27 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:27 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8004ae98, 0x0) 04:42:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_complete(0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000006c0)={0x1, 0x1000, 0x5e8f}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@get={0xe8, 0x13, 0x200, 0x70bd28, 0x25dfdbfe, {{'blake2s-128-generic\x00'}, '\x00', '\x00', 0x0, 0x11cc7ae5f3c92be5}, [{0x8, 0x1, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x6000010}, 0x46f5d634f4da88f7) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000300)={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000080)=""/79, 0x4f}], &(0x7f00000001c0)=[0x8000000000000001, 0x1, 0x1], 0x4}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000680)={0xfffffff8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f0000000540)=""/144, 0x90}], &(0x7f0000000640)=[0x5], 0x4}, 0x20) 04:42:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_complete(0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000006c0)={0x1, 0x1000, 0x5e8f}) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) sendmsg$nl_crypto(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@get={0xe8, 0x13, 0x200, 0x70bd28, 0x25dfdbfe, {{'blake2s-128-generic\x00'}, '\x00', '\x00', 0x0, 0x11cc7ae5f3c92be5}, [{0x8, 0x1, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x6000010}, 0x46f5d634f4da88f7) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000300)={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000080)=""/79, 0x4f}], &(0x7f00000001c0)=[0x8000000000000001, 0x1, 0x1], 0x4}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000680)={0xfffffff8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f0000000540)=""/144, 0x90}], &(0x7f0000000640)=[0x5], 0x4}, 0x20) 04:42:27 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x3000006, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x28, 0x0, r1, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/202, 0xca}], 0x1}, 0x0, 0x10020, 0x0, {0x1}}, 0x800) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:27 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x3000006, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x28, 0x0, r1, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/202, 0xca}], 0x1}, 0x0, 0x10020, 0x0, {0x1}}, 0x800) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x3000006, 0x80010, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x28, 0x0, r1, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/202, 0xca}], 0x1}, 0x0, 0x10020, 0x0, {0x1}}, 0x800) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) 04:42:27 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x3000006, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x28, 0x0, r1, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/202, 0xca}], 0x1}, 0x0, 0x10020, 0x0, {0x1}}, 0x800) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x3000006, 0x80010, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x28, 0x0, r1, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/202, 0xca}], 0x1}, 0x0, 0x10020, 0x0, {0x1}}, 0x800) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) [ 2273.353262][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:27 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x80086301, 0x0) 04:42:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_complete(0x0) (async) r2 = syz_io_uring_complete(0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000006c0)={0x1, 0x1000, 0x5e8f}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@get={0xe8, 0x13, 0x200, 0x70bd28, 0x25dfdbfe, {{'blake2s-128-generic\x00'}, '\x00', '\x00', 0x0, 0x11cc7ae5f3c92be5}, [{0x8, 0x1, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x6000010}, 0x46f5d634f4da88f7) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000300)={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000080)=""/79, 0x4f}], &(0x7f00000001c0)=[0x8000000000000001, 0x1, 0x1], 0x4}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000300)={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000080)=""/79, 0x4f}], &(0x7f00000001c0)=[0x8000000000000001, 0x1, 0x1], 0x4}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000680)={0xfffffff8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f0000000540)=""/144, 0x90}], &(0x7f0000000640)=[0x5], 0x4}, 0x20) [ 2273.473039][ T5169] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2273.511152][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2273.843212][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2273.874856][ T5169] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2273.923027][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.959801][ T5169] usb 4-1: config 0 descriptor?? [ 2274.474331][ T5169] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 2274.499778][ T5169] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0032/input/input63 [ 2274.551938][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2274.583091][ T5169] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2274.881720][T25350] usb 4-1: USB disconnect, device number 107 04:42:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000008c0)) 04:42:29 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000024000b0f000000000000000000000000c3ef659396c950a907d6e0124624e17e6ae6b0a63e08459e407a1a8f015ae3c589e06b9753fbd3a31f42b5d014e0b06d86e65b330a6f5c100e4605e67556532206086786407f128e7c1fa1b2ab914abef898229b1d1edcd4e91fd058a994603725a76f8a8fce4d52d1330095f37f5f88630aca1ccc205a4b0e08ec1418b46fa0fe6a0c1410366980d3d66c55c273b0a7025cc34324fc3411b5356120", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007462660004000200"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x84) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r9 = accept4$tipc(r1, 0x0, &(0x7f0000000580), 0x800) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r11 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000200)={0x20002010}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="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"]) io_submit(0x0, 0x5, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1, r2, &(0x7f0000000240)="d43eb0ab8921733f4d19985086b3900b0c1e68974effdbab44f86e86570d1bfbb657eb2d669c86b4d45cf3b34715a89b37bec6a7871d67815bdb341ae1f5daf0b0ef12a51eeee4786d3d5dcd594ce0a67632f4b5d6e4d9bbd47b0bedacd0f9e9d81c2810215c8bbb84f109d7101ad2d911a0e63b298f25f9e3a25cebac022e93758a30e1ac337782b0e39b06b3c585df20c1eda1c640d9494c3a894c3b502528a2739aab89092d6e23018063", 0xac, 0xcda0, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x7, r5, &(0x7f0000000300)="b92c9f5290987af525de3a4f6c11a7afa1bb3028245896770c855eaf46ac837974359bfc11087dcaa00622ed956a53f59c16fff3b57acf3be1e44fc057c343f4a3e5905d3a1b", 0x46, 0x6, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x8000, r6, &(0x7f0000000380)="5f7998774be658964c0eb08d4fe1e220b4abb0ffc0cbba5ed3afa453a11b4a2a306dbc341b33e265c1c1392a7bea3e9179f31c7356d4d2dbc3a0af5a40a8b5dad7f39cb956faad407c07e493b9f68b89a37e79a2a37dd97f308570009a8d19ec082f75bb4899e9e97291bc9824537eb7aab4dbdea780c984e7f04c6b4dc94c5c07fc65895789231c999b9932ec34c34c8c64271a1a1c7d8ca672da42a2d65059d88192f8277a510a575df32ade9ae7a0b3f04eb117d685200a8b05f2a63afe728b351a5e4a1b156ea182b1c44d1cd0fe", 0xd0, 0x0, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xc89, r7, &(0x7f00000004c0)="9ac1f64d9e3239df2f3e1802b88a323058202bee7bef43c760736787255152e6d7a012c8d8c8592be0", 0x29, 0x1, 0x0, 0x2, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x9a, r9, &(0x7f00000005c0)="9e2ec16c5d1b11bb374c8ad150a710bf0da1de144f771c15f4d71e62b681fd6fa6c8cb10669a2b72d35cf80a1e455e6a3298318c8a823b2b8007459dc7c561bff32d39989f9cca0018935a385f21c3983efb9fc16c4273b4da5792ad1952800d814c3cf97b203ad80683fbdcfcb1c4bc085e8ea27ccbd499ee5b900e378fa70aa343882e124ee0c66cef1c388b1fd2773a1f58e9d6fb59b0bcda6b0194aa8d16ab613d3f52bf198dc5aab7988e75eb9c7b2dc0ce2c6a28a8b91cf566b5f6debb7cc16851da8c1be203baaca8ec37fd671535b1ce2b5e5a8fa880e1f8b6498e88cccbbdf70feb", 0xe6, 0x7f, 0x0, 0x1, r11}]) r12 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(r1, r12, 0x80000) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:29 executing program 0: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=@routing={0x29, 0xc, 0x1, 0x94, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x41}, @private1, @dev={0xfe, 0x80, '\x00', 0x33}, @loopback]}, 0x68) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}, 0x40002000) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x5, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000004c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0xd}, 0x20) bind$inet6(r10, &(0x7f0000000800)={0xa, 0x4e22, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x158, 0x24, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xe, 0xb}, {0xfff2, 0xe}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x91, 0x8, 0x3f, 0xffff7fff, 0x2, 0x10000, 0xb01, 0x7}}, {0x12, 0x2, [0x5df, 0x7, 0x1, 0x138, 0x0, 0x1, 0x3]}}, {{0x1c, 0x1, {0x8, 0x9, 0x5, 0xff, 0x2, 0xffffff7f, 0xc6eb, 0x2}}, {0x8, 0x2, [0x8000, 0x81]}}, {{0x1c, 0x1, {0x6e, 0x8, 0xa24a, 0x4, 0x2, 0xffff, 0xc13, 0x6}}, {0x10, 0x2, [0x9, 0x1, 0x1ff, 0x7, 0x0, 0x8ae9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x0, 0x79, 0x7cb, 0x2, 0x1, 0x44e6, 0x3}}, {0xa, 0x2, [0x1ff, 0x0, 0x2]}}, {{0x1c, 0x1, {0x4, 0xc1, 0x6, 0x703, 0x2, 0x53, 0x81, 0x2}}, {0x8, 0x2, [0xef3, 0x2]}}, {{0x1c, 0x1, {0x1, 0x80, 0x401, 0xfff, 0x1, 0x7b6, 0x1, 0x3}}, {0xa, 0x2, [0x9547, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x6, 0x3f, 0xff81, 0x6, 0x1, 0x7, 0x20, 0x8}}, {0x14, 0x2, [0x8, 0x8001, 0x2, 0x9, 0x1, 0x50, 0x20, 0x200]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x400}, 0x24040810) 04:42:29 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:29 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x80086601, 0x0) 04:42:29 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2275.434321][T24021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:42:29 executing program 0: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=@routing={0x29, 0xc, 0x1, 0x94, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x41}, @private1, @dev={0xfe, 0x80, '\x00', 0x33}, @loopback]}, 0x68) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}, 0x40002000) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x5, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000004c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0xd}, 0x20) (async) bind$inet6(r10, &(0x7f0000000800)={0xa, 0x4e22, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x158, 0x24, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xe, 0xb}, {0xfff2, 0xe}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x91, 0x8, 0x3f, 0xffff7fff, 0x2, 0x10000, 0xb01, 0x7}}, {0x12, 0x2, [0x5df, 0x7, 0x1, 0x138, 0x0, 0x1, 0x3]}}, {{0x1c, 0x1, {0x8, 0x9, 0x5, 0xff, 0x2, 0xffffff7f, 0xc6eb, 0x2}}, {0x8, 0x2, [0x8000, 0x81]}}, {{0x1c, 0x1, {0x6e, 0x8, 0xa24a, 0x4, 0x2, 0xffff, 0xc13, 0x6}}, {0x10, 0x2, [0x9, 0x1, 0x1ff, 0x7, 0x0, 0x8ae9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x0, 0x79, 0x7cb, 0x2, 0x1, 0x44e6, 0x3}}, {0xa, 0x2, [0x1ff, 0x0, 0x2]}}, {{0x1c, 0x1, {0x4, 0xc1, 0x6, 0x703, 0x2, 0x53, 0x81, 0x2}}, {0x8, 0x2, [0xef3, 0x2]}}, {{0x1c, 0x1, {0x1, 0x80, 0x401, 0xfff, 0x1, 0x7b6, 0x1, 0x3}}, {0xa, 0x2, [0x9547, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x6, 0x3f, 0xff81, 0x6, 0x1, 0x7, 0x20, 0x8}}, {0x14, 0x2, [0x8, 0x8001, 0x2, 0x9, 0x1, 0x50, 0x20, 0x200]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x400}, 0x24040810) 04:42:29 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000024000b0f000000000000000000000000c3ef659396c950a907d6e0124624e17e6ae6b0a63e08459e407a1a8f015ae3c589e06b9753fbd3a31f42b5d014e0b06d86e65b330a6f5c100e4605e67556532206086786407f128e7c1fa1b2ab914abef898229b1d1edcd4e91fd058a994603725a76f8a8fce4d52d1330095f37f5f88630aca1ccc205a4b0e08ec1418b46fa0fe6a0c1410366980d3d66c55c273b0a7025cc34324fc3411b5356120", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007462660004000200"], 0x30}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x84) (async) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = memfd_secret(0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) r9 = accept4$tipc(r1, 0x0, &(0x7f0000000580), 0x800) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r11 = dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000200)={0x20002010}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="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"]) (async) io_submit(0x0, 0x5, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1, r2, &(0x7f0000000240)="d43eb0ab8921733f4d19985086b3900b0c1e68974effdbab44f86e86570d1bfbb657eb2d669c86b4d45cf3b34715a89b37bec6a7871d67815bdb341ae1f5daf0b0ef12a51eeee4786d3d5dcd594ce0a67632f4b5d6e4d9bbd47b0bedacd0f9e9d81c2810215c8bbb84f109d7101ad2d911a0e63b298f25f9e3a25cebac022e93758a30e1ac337782b0e39b06b3c585df20c1eda1c640d9494c3a894c3b502528a2739aab89092d6e23018063", 0xac, 0xcda0, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x7, r5, &(0x7f0000000300)="b92c9f5290987af525de3a4f6c11a7afa1bb3028245896770c855eaf46ac837974359bfc11087dcaa00622ed956a53f59c16fff3b57acf3be1e44fc057c343f4a3e5905d3a1b", 0x46, 0x6, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x8000, r6, &(0x7f0000000380)="5f7998774be658964c0eb08d4fe1e220b4abb0ffc0cbba5ed3afa453a11b4a2a306dbc341b33e265c1c1392a7bea3e9179f31c7356d4d2dbc3a0af5a40a8b5dad7f39cb956faad407c07e493b9f68b89a37e79a2a37dd97f308570009a8d19ec082f75bb4899e9e97291bc9824537eb7aab4dbdea780c984e7f04c6b4dc94c5c07fc65895789231c999b9932ec34c34c8c64271a1a1c7d8ca672da42a2d65059d88192f8277a510a575df32ade9ae7a0b3f04eb117d685200a8b05f2a63afe728b351a5e4a1b156ea182b1c44d1cd0fe", 0xd0, 0x0, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xc89, r7, &(0x7f00000004c0)="9ac1f64d9e3239df2f3e1802b88a323058202bee7bef43c760736787255152e6d7a012c8d8c8592be0", 0x29, 0x1, 0x0, 0x2, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x9a, r9, &(0x7f00000005c0)="9e2ec16c5d1b11bb374c8ad150a710bf0da1de144f771c15f4d71e62b681fd6fa6c8cb10669a2b72d35cf80a1e455e6a3298318c8a823b2b8007459dc7c561bff32d39989f9cca0018935a385f21c3983efb9fc16c4273b4da5792ad1952800d814c3cf97b203ad80683fbdcfcb1c4bc085e8ea27ccbd499ee5b900e378fa70aa343882e124ee0c66cef1c388b1fd2773a1f58e9d6fb59b0bcda6b0194aa8d16ab613d3f52bf198dc5aab7988e75eb9c7b2dc0ce2c6a28a8b91cf566b5f6debb7cc16851da8c1be203baaca8ec37fd671535b1ce2b5e5a8fa880e1f8b6498e88cccbbdf70feb", 0xe6, 0x7f, 0x0, 0x1, r11}]) r12 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(r1, r12, 0x80000) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:29 executing program 0: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=@routing={0x29, 0xc, 0x1, 0x94, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x41}, @private1, @dev={0xfe, 0x80, '\x00', 0x33}, @loopback]}, 0x68) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}, 0x40002000) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x5, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000004c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x0) (rerun: 32) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0xd}, 0x20) bind$inet6(r10, &(0x7f0000000800)={0xa, 0x4e22, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x158, 0x24, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xe, 0xb}, {0xfff2, 0xe}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x91, 0x8, 0x3f, 0xffff7fff, 0x2, 0x10000, 0xb01, 0x7}}, {0x12, 0x2, [0x5df, 0x7, 0x1, 0x138, 0x0, 0x1, 0x3]}}, {{0x1c, 0x1, {0x8, 0x9, 0x5, 0xff, 0x2, 0xffffff7f, 0xc6eb, 0x2}}, {0x8, 0x2, [0x8000, 0x81]}}, {{0x1c, 0x1, {0x6e, 0x8, 0xa24a, 0x4, 0x2, 0xffff, 0xc13, 0x6}}, {0x10, 0x2, [0x9, 0x1, 0x1ff, 0x7, 0x0, 0x8ae9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x0, 0x79, 0x7cb, 0x2, 0x1, 0x44e6, 0x3}}, {0xa, 0x2, [0x1ff, 0x0, 0x2]}}, {{0x1c, 0x1, {0x4, 0xc1, 0x6, 0x703, 0x2, 0x53, 0x81, 0x2}}, {0x8, 0x2, [0xef3, 0x2]}}, {{0x1c, 0x1, {0x1, 0x80, 0x401, 0xfff, 0x1, 0x7b6, 0x1, 0x3}}, {0xa, 0x2, [0x9547, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x6, 0x3f, 0xff81, 0x6, 0x1, 0x7, 0x20, 0x8}}, {0x14, 0x2, [0x8, 0x8001, 0x2, 0x9, 0x1, 0x50, 0x20, 0x200]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x400}, 0x24040810) [ 2275.594418][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2275.625735][T24036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:42:29 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x801c581f, 0x0) 04:42:29 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000024000b0f000000000000000000000000c3ef659396c950a907d6e0124624e17e6ae6b0a63e08459e407a1a8f015ae3c589e06b9753fbd3a31f42b5d014e0b06d86e65b330a6f5c100e4605e67556532206086786407f128e7c1fa1b2ab914abef898229b1d1edcd4e91fd058a994603725a76f8a8fce4d52d1330095f37f5f88630aca1ccc205a4b0e08ec1418b46fa0fe6a0c1410366980d3d66c55c273b0a7025cc34324fc3411b5356120", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007462660004000200"], 0x30}}, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x84) (async, rerun: 32) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) (async) r7 = memfd_secret(0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r9 = accept4$tipc(r1, 0x0, &(0x7f0000000580), 0x800) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r11 = dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000200)={0x20002010}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="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"]) io_submit(0x0, 0x5, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1, r2, &(0x7f0000000240)="d43eb0ab8921733f4d19985086b3900b0c1e68974effdbab44f86e86570d1bfbb657eb2d669c86b4d45cf3b34715a89b37bec6a7871d67815bdb341ae1f5daf0b0ef12a51eeee4786d3d5dcd594ce0a67632f4b5d6e4d9bbd47b0bedacd0f9e9d81c2810215c8bbb84f109d7101ad2d911a0e63b298f25f9e3a25cebac022e93758a30e1ac337782b0e39b06b3c585df20c1eda1c640d9494c3a894c3b502528a2739aab89092d6e23018063", 0xac, 0xcda0, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x7, r5, &(0x7f0000000300)="b92c9f5290987af525de3a4f6c11a7afa1bb3028245896770c855eaf46ac837974359bfc11087dcaa00622ed956a53f59c16fff3b57acf3be1e44fc057c343f4a3e5905d3a1b", 0x46, 0x6, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x8000, r6, &(0x7f0000000380)="5f7998774be658964c0eb08d4fe1e220b4abb0ffc0cbba5ed3afa453a11b4a2a306dbc341b33e265c1c1392a7bea3e9179f31c7356d4d2dbc3a0af5a40a8b5dad7f39cb956faad407c07e493b9f68b89a37e79a2a37dd97f308570009a8d19ec082f75bb4899e9e97291bc9824537eb7aab4dbdea780c984e7f04c6b4dc94c5c07fc65895789231c999b9932ec34c34c8c64271a1a1c7d8ca672da42a2d65059d88192f8277a510a575df32ade9ae7a0b3f04eb117d685200a8b05f2a63afe728b351a5e4a1b156ea182b1c44d1cd0fe", 0xd0, 0x0, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xc89, r7, &(0x7f00000004c0)="9ac1f64d9e3239df2f3e1802b88a323058202bee7bef43c760736787255152e6d7a012c8d8c8592be0", 0x29, 0x1, 0x0, 0x2, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x9a, r9, &(0x7f00000005c0)="9e2ec16c5d1b11bb374c8ad150a710bf0da1de144f771c15f4d71e62b681fd6fa6c8cb10669a2b72d35cf80a1e455e6a3298318c8a823b2b8007459dc7c561bff32d39989f9cca0018935a385f21c3983efb9fc16c4273b4da5792ad1952800d814c3cf97b203ad80683fbdcfcb1c4bc085e8ea27ccbd499ee5b900e378fa70aa343882e124ee0c66cef1c388b1fd2773a1f58e9d6fb59b0bcda6b0194aa8d16ab613d3f52bf198dc5aab7988e75eb9c7b2dc0ce2c6a28a8b91cf566b5f6debb7cc16851da8c1be203baaca8ec37fd671535b1ce2b5e5a8fa880e1f8b6498e88cccbbdf70feb", 0xe6, 0x7f, 0x0, 0x1, r11}]) (async) r12 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(r1, r12, 0x80000) (async, rerun: 32) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (rerun: 32) [ 2275.722925][ T26] usb 4-1: new high-speed USB device number 108 using dummy_hcd 04:42:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000080)={0x8, r0}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000216000/0x2000)=nil, &(0x7f0000219000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x3950, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000640)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x7a4, &(0x7f0000000140), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000adb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x16, 0x2, r5) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_MKDIRAT={0x25, 0x4c, 0x0, r2, 0x0, &(0x7f00000007c0)='./file0\x00', 0x60, 0x0, 0x1, {0x0, r5}}, 0x3ff) r7 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000780)=""/51, 0x33}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000680)=""/201, 0xc9}], 0x8) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2275.816072][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2275.895022][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2275.915135][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2275.941554][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2275.967933][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2276.049467][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2276.096824][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2276.106633][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.143174][ T26] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2276.152289][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.163883][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2276.198983][ T26] usb 4-1: config 0 descriptor?? [ 2276.393434][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.628040][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.684214][ T26] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 2276.709247][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0033/input/input64 [ 2276.800276][ T26] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2277.091862][T25350] usb 4-1: USB disconnect, device number 108 04:42:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x61, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f62") 04:42:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000080)={0x8, r0}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000216000/0x2000)=nil, &(0x7f0000219000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x3950, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000640)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x7a4, &(0x7f0000000140), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000adb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x16, 0x2, r5) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_MKDIRAT={0x25, 0x4c, 0x0, r2, 0x0, &(0x7f00000007c0)='./file0\x00', 0x60, 0x0, 0x1, {0x0, r5}}, 0x3ff) r7 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000780)=""/51, 0x33}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000680)=""/201, 0xc9}], 0x8) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000080)={0x8, r0}) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000216000/0x2000)=nil, &(0x7f0000219000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) (async) syz_io_uring_setup(0x3950, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000640)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x7a4, &(0x7f0000000140), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000adb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x16, 0x2, r5) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_MKDIRAT={0x25, 0x4c, 0x0, r2, 0x0, &(0x7f00000007c0)='./file0\x00', 0x60, 0x0, 0x1, {0x0, r5}}, 0x3ff) (async) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000780)=""/51, 0x33}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000680)=""/201, 0xc9}], 0x8) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) 04:42:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:31 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8090ae81, 0x0) 04:42:31 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0xee00, &(0x7f0000000000)) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:31 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:31 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0xee00, &(0x7f0000000000)) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2277.665958][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000080)={0x8, r0}) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000216000/0x2000)=nil, &(0x7f0000219000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000200)) (async) r4 = syz_io_uring_setup(0x3950, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000640)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x7a4, &(0x7f0000000140), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000adb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x16, 0x2, r5) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_MKDIRAT={0x25, 0x4c, 0x0, r2, 0x0, &(0x7f00000007c0)='./file0\x00', 0x60, 0x0, 0x1, {0x0, r5}}, 0x3ff) (async) r7 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000780)=""/51, 0x33}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000680)=""/201, 0xc9}], 0x8) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:31 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0xee00, &(0x7f0000000000)) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x8, 0x0) 04:42:31 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8138ae83, 0x0) [ 2277.913123][T24344] usb 4-1: new high-speed USB device number 109 using dummy_hcd 04:42:31 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000200000022cbd7000fddbdf250a14008a050000060000000014000179000000000000000000000000000000000100000000000000000000000000000000011400010000000000000000000000ffffac1e010114000100ff01000000000000000000000000000114000200fe8000000000000000000000000000bb0500130000000000050013003b000000140011006d6163766c616e30000000000000000014000200fe80000000000000000000000000001b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x80) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2278.313511][T24344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2278.329438][T24344] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2278.343108][T24344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.364777][T24344] usb 4-1: config 0 descriptor?? [ 2278.708243][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2278.834284][T24344] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 2278.861535][T24344] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0034/input/input65 [ 2278.958037][T24344] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2279.423527][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2279.505286][ T5169] usb 4-1: USB disconnect, device number 109 [ 2279.756155][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x61, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f62") 04:42:33 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) close(r1) (rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x8, 0x0) 04:42:33 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000200000022cbd7000fddbdf250a14008a050000060000000014000179000000000000000000000000000000000100000000000000000000000000000000011400010000000000000000000000ffffac1e010114000100ff01000000000000000000000000000114000200fe8000000000000000000000000000bb0500130000000000050013003b000000140011006d6163766c616e30000000000000000014000200fe80000000000000000000000000001b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x80) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:33 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x81a0ae8c, 0x0) 04:42:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:33 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:34 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) close(r1) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x8, 0x0) 04:42:34 executing program 2: pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000200000022cbd7000fddbdf250a14008a050000060000000014000179000000000000000000000000000000000100000000000000000000000000000000011400010000000000000000000000ffffac1e010114000100ff01000000000000000000000000000114000200fe8000000000000000000000000000bb0500130000000000050013003b000000140011006d6163766c616e30000000000000000014000200fe80000000000000000000000000001b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000200000022cbd7000fddbdf250a14008a050000060000000014000179000000000000000000000000000000000100000000000000000000000000000000011400010000000000000000000000ffffac1e010114000100ff01000000000000000000000000000114000200fe8000000000000000000000000000bb0500130000000000050013003b000000140011006d6163766c616e30000000000000000014000200fe80000000000000000000000000001b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x80) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:34 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc0045878, 0x0) 04:42:34 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) ioctl$TCSBRKP(r1, 0x5425, 0x80000001) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'team_slave_1\x00', 0x1f}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200202, 0x0) getdents(r2, &(0x7f0000000240)=""/234, 0xea) 04:42:34 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000180)=""/109) 04:42:34 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) ioctl$TCSBRKP(r1, 0x5425, 0x80000001) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'team_slave_1\x00', 0x1f}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200202, 0x0) getdents(r2, &(0x7f0000000240)=""/234, 0xea) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) ioctl$TCSBRKP(r1, 0x5425, 0x80000001) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'team_slave_1\x00', 0x1f}) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200202, 0x0) (async) getdents(r2, &(0x7f0000000240)=""/234, 0xea) (async) [ 2280.342987][T24344] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2280.703209][T24344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2280.726214][T24344] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2280.762372][T24344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.820811][T24344] usb 4-1: config 0 descriptor?? [ 2280.850202][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2281.324007][T24344] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor [ 2281.354792][T24344] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0035/input/input66 [ 2281.442492][T24344] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2281.903784][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2281.980517][T25350] usb 4-1: USB disconnect, device number 110 04:42:36 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc0045878, 0x0) 04:42:36 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) (async) ioctl$TCSBRKP(r1, 0x5425, 0x80000001) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'team_slave_1\x00', 0x1f}) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200202, 0x0) getdents(r2, &(0x7f0000000240)=""/234, 0xea) 04:42:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:36 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async, rerun: 64) close(r1) (rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) (async, rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000180)=""/109) 04:42:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x61, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f62") [ 2282.463234][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:36 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5, 0x23}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @local, 0x0}, &(0x7f0000000080)=0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0xa4, r1, 0x81}, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r3) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r2, 0x0, r3, 0x0, 0x800, 0x0) 04:42:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000180)=""/109) [ 2282.543163][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x42, 0xd4a, 0x7, 0x65c40333, 0x1, "2badf61bc22dce8cf8746feb1034a653a20b94", 0x10000, 0x6}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:36 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5, 0x23}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @local, 0x0}, &(0x7f0000000080)=0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0xa4, r1, 0x81}, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r3) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r2, 0x0, r3, 0x0, 0x800, 0x0) 04:42:36 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc0189436, 0x0) 04:42:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x42, 0xd4a, 0x7, 0x65c40333, 0x1, "2badf61bc22dce8cf8746feb1034a653a20b94", 0x10000, 0x6}) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2282.822982][T25350] usb 4-1: new high-speed USB device number 111 using dummy_hcd 04:42:36 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5, 0x23}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @local, 0x0}, &(0x7f0000000080)=0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0xa4, r1, 0x81}, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r3) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r2, 0x0, r3, 0x0, 0x800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5, 0x23}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @local}, &(0x7f0000000080)=0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0xa4, r1, 0x81}, 0xc) (async) pipe(&(0x7f0000000140)) (async) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r3) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r2, 0x0, r3, 0x0, 0x800, 0x0) (async) 04:42:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x42, 0xd4a, 0x7, 0x65c40333, 0x1, "2badf61bc22dce8cf8746feb1034a653a20b94", 0x10000, 0x6}) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2282.954989][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") [ 2283.184308][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.191307][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.198156][T25350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.225999][T25350] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2283.241878][T25350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.263891][T25350] usb 4-1: config 0 descriptor?? [ 2283.323009][T24344] usb 5-1: new high-speed USB device number 24 using dummy_hcd 04:42:37 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:37 executing program 2: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x9}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) fcntl$setlease(r1, 0x400, 0x1) splice(r1, &(0x7f0000000040)=0x1, r1, &(0x7f0000000080)=0x100000000, 0x8000000, 0x2) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="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", 0x1000, 0x3) [ 2283.523275][T24344] usb 5-1: device descriptor read/64, error 18 [ 2283.743875][T25350] keytouch 0003:0926:3333.0036: fixing up Keytouch IEC report descriptor [ 2283.779866][T25350] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0036/input/input67 [ 2283.792942][T24344] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2283.900187][T25350] keytouch 0003:0926:3333.0036: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2283.993438][T24344] usb 5-1: device descriptor read/64, error 18 [ 2284.004635][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2284.113627][T24344] usb usb5-port1: attempt power cycle [ 2284.403137][T25350] usb 4-1: USB disconnect, device number 111 [ 2284.523166][T24344] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2284.693121][T24344] usb 5-1: device descriptor read/8, error -61 04:42:38 executing program 2: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x9}) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) fcntl$setlease(r1, 0x400, 0x1) (async, rerun: 64) splice(r1, &(0x7f0000000040)=0x1, r1, &(0x7f0000000080)=0x100000000, 0x8000000, 0x2) (async, rerun: 64) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 64) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async, rerun: 32) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="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", 0x1000, 0x3) (rerun: 32) 04:42:38 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc018ae85, 0x0) 04:42:38 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) r3 = epoll_create1(0x0) splice(r0, 0x0, r3, 0x0, 0x800, 0x0) 04:42:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x92, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e6") 04:42:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) r3 = epoll_create1(0x0) splice(r0, 0x0, r3, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) io_uring_setup(0xb17, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) (async) epoll_create1(0x0) (async) splice(r0, 0x0, r3, 0x0, 0x800, 0x0) (async) [ 2284.962959][T24344] usb 5-1: new high-speed USB device number 27 using dummy_hcd 04:42:38 executing program 2: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x9}) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) fcntl$setlease(r1, 0x400, 0x1) (async, rerun: 32) splice(r1, &(0x7f0000000040)=0x1, r1, &(0x7f0000000080)=0x100000000, 0x8000000, 0x2) (async, rerun: 32) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async, rerun: 32) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="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", 0x1000, 0x3) (rerun: 32) [ 2285.039543][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) close(r1) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) r3 = epoll_create1(0x0) splice(r0, 0x0, r3, 0x0, 0x800, 0x0) [ 2285.133289][T24344] usb 5-1: device descriptor read/8, error -61 04:42:39 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000000240)=""/200, 0xc8}], 0x2, &(0x7f0000000340)=""/160, 0xa0}, 0x40010002) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe4) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, 0x0) syz_open_procfs(r8, &(0x7f0000000440)='autogroup\x00') close(r2) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) write$FUSE_INTERRUPT(r10, &(0x7f00000004c0)={0x10, 0xfffffffffffffff5, r7}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040), 0x9) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) splice(r1, 0x0, r11, 0x0, 0x800, 0x0) [ 2285.223091][T25350] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2285.253921][T24344] usb usb5-port1: unable to enumerate USB device [ 2285.503133][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2285.593392][T25350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2285.617704][T25350] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2285.627509][T25350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2285.677743][T25350] usb 4-1: config 0 descriptor?? 04:42:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:39 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc020660b, 0x0) 04:42:39 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5475}}, './file0\x00'}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x3, 0x62, &(0x7f0000000080)="66309bbed2e78a31f92d988a088c313ea8d41a0ac98e293b259b837b18dd206292db26672c5adb5808aea0a979cda793a6d3cea766eb3844d3d8260a9e45d154dbd0ac40d102f164bf6ce7d9c74ecf36505bc8b72b418ce1bd73de54f8d7329d7d27"}) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) vmsplice(r3, &(0x7f0000000100), 0x100000000000010a, 0x3) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) splice(r0, 0x0, r4, 0x0, 0x800, 0x0) [ 2286.068016][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:42:40 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5475}}, './file0\x00'}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x3, 0x62, &(0x7f0000000080)="66309bbed2e78a31f92d988a088c313ea8d41a0ac98e293b259b837b18dd206292db26672c5adb5808aea0a979cda793a6d3cea766eb3844d3d8260a9e45d154dbd0ac40d102f164bf6ce7d9c74ecf36505bc8b72b418ce1bd73de54f8d7329d7d27"}) (async) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) (async) vmsplice(r3, &(0x7f0000000100), 0x100000000000010a, 0x3) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) splice(r0, 0x0, r4, 0x0, 0x800, 0x0) 04:42:40 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000000240)=""/200, 0xc8}], 0x2, &(0x7f0000000340)=""/160, 0xa0}, 0x40010002) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe4) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, 0x0) (async) syz_open_procfs(r8, &(0x7f0000000440)='autogroup\x00') (async) close(r2) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) write$FUSE_INTERRUPT(r10, &(0x7f00000004c0)={0x10, 0xfffffffffffffff5, r7}, 0x10) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040), 0x9) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) splice(r1, 0x0, r11, 0x0, 0x800, 0x0) [ 2286.184394][T25350] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor 04:42:40 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5475}}, './file0\x00'}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x3, 0x62, &(0x7f0000000080)="66309bbed2e78a31f92d988a088c313ea8d41a0ac98e293b259b837b18dd206292db26672c5adb5808aea0a979cda793a6d3cea766eb3844d3d8260a9e45d154dbd0ac40d102f164bf6ce7d9c74ecf36505bc8b72b418ce1bd73de54f8d7329d7d27"}) r3 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) vmsplice(r3, &(0x7f0000000100), 0x100000000000010a, 0x3) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) splice(r0, 0x0, r4, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5475}}, './file0\x00'}) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x3, 0x62, &(0x7f0000000080)="66309bbed2e78a31f92d988a088c313ea8d41a0ac98e293b259b837b18dd206292db26672c5adb5808aea0a979cda793a6d3cea766eb3844d3d8260a9e45d154dbd0ac40d102f164bf6ce7d9c74ecf36505bc8b72b418ce1bd73de54f8d7329d7d27"}) (async) io_uring_setup(0xb17, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) (async) vmsplice(r3, &(0x7f0000000100), 0x100000000000010a, 0x3) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) (async) splice(r0, 0x0, r4, 0x0, 0x800, 0x0) (async) [ 2286.227252][T25350] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0037/input/input68 [ 2286.339258][T25350] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2286.524720][T24344] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2286.724026][T24344] usb 5-1: device descriptor read/64, error 18 [ 2286.971435][T25350] usb 4-1: USB disconnect, device number 112 [ 2286.993072][T24344] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2287.103418][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2287.193073][T24344] usb 5-1: device descriptor read/64, error 18 [ 2287.323681][T24344] usb usb5-port1: attempt power cycle 04:42:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x92, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e6") 04:42:41 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x2) 04:42:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000000240)=""/200, 0xc8}], 0x2, &(0x7f0000000340)=""/160, 0xa0}, 0x40010002) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe4) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, 0x0) (async) syz_open_procfs(r8, &(0x7f0000000440)='autogroup\x00') (async) close(r2) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$FUSE_INTERRUPT(r10, &(0x7f00000004c0)={0x10, 0xfffffffffffffff5, r7}, 0x10) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040), 0x9) (async) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) splice(r1, 0x0, r11, 0x0, 0x800, 0x0) 04:42:41 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2287.752980][T24344] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2287.803274][T25350] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2287.963151][T24344] usb 5-1: device descriptor read/8, error -61 [ 2288.151396][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2288.233253][T25350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2288.244797][T24344] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2288.252706][T25350] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2288.262240][T25350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.272760][T25350] usb 4-1: config 0 descriptor?? [ 2288.423238][T24344] usb 5-1: device descriptor read/8, error -61 [ 2288.543318][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2288.555377][T24344] usb usb5-port1: unable to enumerate USB device [ 2288.764467][T25350] keytouch 0003:0926:3333.0038: fixing up Keytouch IEC report descriptor [ 2288.783132][T25350] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0038/input/input69 [ 2288.891462][T25350] keytouch 0003:0926:3333.0038: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 04:42:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "d55e49efc7ce90029c7e7875c2cfa04946df351c8c8c6380b70e640aeb34142a2ae08e6a308e66f0aeb1ea3715e4df7efb7f052a063686c2fb837bc8bbe9bcb73a8cef0af4c3851b17c6fa0e664add62b6dc4366e42756f5cd0d9d02c6a83b427458a644d1d5144343818455bc7f96458fcf44eb2feaa481363ea6ecf6cd605dee8d6181ddd9522e6c9e0ccc74822440aa29144d70b430a88357f121e272572a0c443281d3b904195dc3ed588fe38a7a"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x78, 0x1f, 0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x10, 0x7, 0x26, "a823ab28", "75beea2b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xff, 0x9, 0x9, 0xff, 0x5}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0xc9, "721b7ba2a1aed6ebb2cc0a881cd21a61a3e5d4b44450838bcb98265abebe48892ec628de9f743d192e4b069e897e4926bb42faa21da266e1701895c2369711c38f51ba94c1b303d2fbbd8dc5cdf946478aeff9ba0edd8c2e783857298dc5cd1a78698dc5bb4087a9b80c0a39aac5a0b9a882e64f03636456cc4d47f7f0d3f0e30b9c260de2749a74ed64df67f40bd0d35b143da8cfc7b1e049ee7446b0a6572bd7188cf3c0f0d8b7b4f4be8dd4ea69ae88ab1f931ce5efb30ab84a0effa83671063fe50ce6517d7d8f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "2ffd"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xf191}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "f85a"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8b}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_usb_ep_write(r0, 0x0, 0xc2, &(0x7f00000008c0)="9a9a08f6b8818cbe3c7069996e5b540e3fba6eb7c67127d8dbe657869d100c0170a27ed5eaee51fe262b1a4b698215b42da4ab16e0f920eaeaabe979c8a225b3c5becb2ed018dd30cd87ea9ecbd134dba044a01b74db23369de503e3839cba9f626cb097db9984e0fce0b5519698021b333ed05815598f084fa4ef558bcac6567a0205ada5c7a11bb595b9164b29558958e67788fcae411ad94a03f42600c1bf727d38a60e26ff454ea0c9b2f7706d4d9dc04c49cf32d3e237ff007dc08f03f999dc") 04:42:43 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) pipe(&(0x7f0000000140)) (async) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) (async) close(r1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) (async) 04:42:43 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) io_uring_setup(0x619f, &(0x7f00000004c0)={0x0, 0x65f9, 0x908, 0x3, 0x8d, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) r3 = io_uring_setup(0x4307, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x3, 0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$6lowpan_enable(r4, &(0x7f0000000480)='1', 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="889c3b1652895737efb79d8bdabe9e1301448d44facab3082e49f75bf5432584ba2dcaa87873b31a8fbe39f2", 0x2c}, {&(0x7f0000000040)="65f451bd88a4e2a841f5d6fee406abfc3a580a3f65c494bac53ad2c06b3416533e900aa40dcc01c9e08b2d8688ba48d995a3d6232cbdbdd9f3468fd5c3cd7a769cc6b7232735980111ca498df2cb20e92aab1ec6cca01bf57e06417d3437b1038cf21995a523dfab72060448cf46", 0x6e}, {&(0x7f0000000240)="222b071f111e64d7ab10c72d1d3c1d4a98bbb6f7085277096831c41b84958e6eb0c153feead0cda2ed6203942d54f04329901d5233c16d06fda351f370feccea3e9ba671201873c8368d5edb3d6448fa2e0553b8ec16f5da219f969f2a1cdbdc554d655c56f709d7f1b1697a2cc6ba7f33a8c3be8e923b75c2e22e9f8ac7c2e169176ce87a8ec4026652d8c3ac3643e85b5ac4fcc12efc5db99c4934a0bd6692bfd8285ca0407b67257de4f3eb319bb6b34edd711c679c6889bbb94f2d8c69779289ec2c7c267a33e89736a088192c96089868249f30125d3d394199288035059ffb3521ed39c87f05abafec5675687c359365de76", 0xf5}, {&(0x7f0000000180)="cc1c4ac4bcaee5f77fd0f61b742c0a531887294122e4b49e8d2dc50f8b25b354fb469c7de92c751f62f8f050cc30701134376ceec6a95909e35f41e9b6ea5a86817bdcceb96bf238f70b8c47608ec1861557db6ce05e2ee047835907545e4975694d46afe311e77f47", 0x69}, {&(0x7f0000000340)="7a3ce8ad2346edf3ef239a836dce49bb021352ae62ece7bc4d40373d9fdeb2e9455c908655c17a9dd59e561a94a2c72e27e5d9b3bc6990bb51525606c96aba961abe5b0f4ff1d91040bd74e2d920cd1a4643fb9571a51db0a2a85d2453ee6430fa739f8b1f2646940dcca06bbc20cde7f7302ea87ce0f22be4ae9de7c3d341e198534aa11c762b4f4597e529565c84d904967abe56038fb59853b0c08775f829733063253b8c887edb0fed7602", 0xad}], 0x5, 0x10001, 0x4) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x8) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) 04:42:43 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3) 04:42:43 executing program 5: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket(0x0, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:42:43 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0xb17, &(0x7f0000000180)) (async) io_uring_setup(0x619f, &(0x7f00000004c0)={0x0, 0x65f9, 0x908, 0x3, 0x8d, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x19, &(0x7f0000000200), 0x0) (async) r3 = io_uring_setup(0x4307, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x3, 0x0, 0x0, r2}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$6lowpan_enable(r4, &(0x7f0000000480)='1', 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x19, &(0x7f0000000200), 0x0) (async) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="889c3b1652895737efb79d8bdabe9e1301448d44facab3082e49f75bf5432584ba2dcaa87873b31a8fbe39f2", 0x2c}, {&(0x7f0000000040)="65f451bd88a4e2a841f5d6fee406abfc3a580a3f65c494bac53ad2c06b3416533e900aa40dcc01c9e08b2d8688ba48d995a3d6232cbdbdd9f3468fd5c3cd7a769cc6b7232735980111ca498df2cb20e92aab1ec6cca01bf57e06417d3437b1038cf21995a523dfab72060448cf46", 0x6e}, {&(0x7f0000000240)="222b071f111e64d7ab10c72d1d3c1d4a98bbb6f7085277096831c41b84958e6eb0c153feead0cda2ed6203942d54f04329901d5233c16d06fda351f370feccea3e9ba671201873c8368d5edb3d6448fa2e0553b8ec16f5da219f969f2a1cdbdc554d655c56f709d7f1b1697a2cc6ba7f33a8c3be8e923b75c2e22e9f8ac7c2e169176ce87a8ec4026652d8c3ac3643e85b5ac4fcc12efc5db99c4934a0bd6692bfd8285ca0407b67257de4f3eb319bb6b34edd711c679c6889bbb94f2d8c69779289ec2c7c267a33e89736a088192c96089868249f30125d3d394199288035059ffb3521ed39c87f05abafec5675687c359365de76", 0xf5}, {&(0x7f0000000180)="cc1c4ac4bcaee5f77fd0f61b742c0a531887294122e4b49e8d2dc50f8b25b354fb469c7de92c751f62f8f050cc30701134376ceec6a95909e35f41e9b6ea5a86817bdcceb96bf238f70b8c47608ec1861557db6ce05e2ee047835907545e4975694d46afe311e77f47", 0x69}, {&(0x7f0000000340)="7a3ce8ad2346edf3ef239a836dce49bb021352ae62ece7bc4d40373d9fdeb2e9455c908655c17a9dd59e561a94a2c72e27e5d9b3bc6990bb51525606c96aba961abe5b0f4ff1d91040bd74e2d920cd1a4643fb9571a51db0a2a85d2453ee6430fa739f8b1f2646940dcca06bbc20cde7f7302ea87ce0f22be4ae9de7c3d341e198534aa11c762b4f4597e529565c84d904967abe56038fb59853b0c08775f829733063253b8c887edb0fed7602", 0xad}], 0x5, 0x10001, 0x4) (async) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x8) (async) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x800, 0x0) [ 2289.191193][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2289.212286][T24328] tty tty20: ldisc open failed (-12), clearing slot 19 [ 2289.263500][T12893] general protection fault, probably for non-canonical address 0xdffffc000000044c: 0000 [#1] PREEMPT SMP KASAN [ 2289.275274][T12893] KASAN: probably user-memory-access in range [0x0000000000002260-0x0000000000002267] [ 2289.284816][T12893] CPU: 0 PID: 12893 Comm: kworker/u4:11 Not tainted 6.3.0-rc7-syzkaller-00043-gaf67688dca57 #0 [ 2289.295148][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2289.305291][T12893] Workqueue: events_unbound flush_to_ldisc [ 2289.311185][T12893] RIP: 0010:n_tty_receive_buf_common+0xd4/0x1540 [ 2289.317525][T12893] Code: 60 48 89 44 24 68 48 89 d8 c7 84 24 80 00 00 00 00 00 00 00 48 c1 e8 03 4c 01 f0 48 89 44 24 70 e8 d1 47 08 fd 48 8b 44 24 68 <80> 38 00 0f 85 49 11 00 00 48 8b 44 24 10 4c 8b a0 60 22 00 00 48 [ 2289.337139][T12893] RSP: 0018:ffffc900054d7b30 EFLAGS: 00010293 [ 2289.343215][T12893] RAX: dffffc000000044c RBX: 0000000000000000 RCX: 0000000000000000 [ 2289.351213][T12893] RDX: ffff888027fa8000 RSI: ffffffff847aa38f RDI: 0000000000000001 [ 2289.359215][T12893] RBP: ffff88807701c820 R08: 0000000000000001 R09: ffff88802d048287 [ 2289.367198][T12893] R10: ffffed1005a09050 R11: 0000000000000000 R12: 00000000000000c7 [ 2289.375184][T12893] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807701c820 [ 2289.383183][T12893] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 2289.392110][T12893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2289.398708][T12893] CR2: 00007f43dd9ecd38 CR3: 000000001d76d000 CR4: 00000000003526f0 [ 2289.406785][T12893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2289.415198][T12893] DR3: 000000000000003b DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2289.423167][T12893] Call Trace: [ 2289.426438][T12893] [ 2289.429389][T12893] ? ldsem_down_read_trylock+0x11f/0x180 [ 2289.435069][T12893] tty_ldisc_receive_buf+0xa7/0x190 [ 2289.440271][T12893] ? n_tty_receive_buf_common+0x1540/0x1540 [ 2289.446361][T12893] tty_port_default_receive_buf+0x72/0xa0 [ 2289.452193][T12893] flush_to_ldisc+0x218/0x700 [ 2289.456883][T12893] ? _raw_spin_unlock_irq+0x23/0x50 [ 2289.462163][T12893] process_one_work+0x991/0x15c0 [ 2289.467201][T12893] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2289.472604][T12893] ? spin_bug+0x1c0/0x1c0 [ 2289.476958][T12893] ? _raw_spin_lock_irq+0x45/0x50 [ 2289.481988][T12893] worker_thread+0x669/0x1090 [ 2289.486665][T12893] ? process_one_work+0x15c0/0x15c0 [ 2289.491862][T12893] kthread+0x2e8/0x3a0 [ 2289.495934][T12893] ? kthread_complete_and_exit+0x40/0x40 [ 2289.501580][T12893] ret_from_fork+0x1f/0x30 [ 2289.505996][T12893] [ 2289.509001][T12893] Modules linked in: [ 2289.523804][T12893] ---[ end trace 0000000000000000 ]--- [ 2289.529602][T12893] RIP: 0010:n_tty_receive_buf_common+0xd4/0x1540 [ 2289.538994][T12893] Code: 60 48 89 44 24 68 48 89 d8 c7 84 24 80 00 00 00 00 00 00 00 48 c1 e8 03 4c 01 f0 48 89 44 24 70 e8 d1 47 08 fd 48 8b 44 24 68 <80> 38 00 0f 85 49 11 00 00 48 8b 44 24 10 4c 8b a0 60 22 00 00 48 [ 2289.565893][T12893] RSP: 0018:ffffc900054d7b30 EFLAGS: 00010293 [ 2289.572166][T12893] RAX: dffffc000000044c RBX: 0000000000000000 RCX: 0000000000000000 [ 2289.581309][T12893] RDX: ffff888027fa8000 RSI: ffffffff847aa38f RDI: 0000000000000001 [ 2289.590213][T12893] RBP: ffff88807701c820 R08: 0000000000000001 R09: ffff88802d048287 [ 2289.598538][T12893] R10: ffffed1005a09050 R11: 0000000000000000 R12: 00000000000000c7 04:42:43 executing program 1: keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x6) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f01c40b0f6139dadab9004d564b0f32b848068ee80f01d10f0d579cd0810000b8040066b9800000c00f326635008000000f3066b8294f00000f23d80f21f86635400000600f23f83626f336f08013d0", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010003080000000000000000f408df832cf3c1e96d2b436b706a6bdff7c4e2d122d075815956b496d250bcd337b4261533636652344da2dea22ea8198764ec5df8327dab496be6130e57a7347bf157ccef289bc9ec7fe843ead745b0be47e16fa8ff89e05e410e2fd48584615b053ef8209e451c5b54f397b4692b8c19c881fe8c265cb95f9fcececd99adfd12ed002642bccc3238b98450b7cb6395d5c504f6762148b839b3291329ae8316834afe20f6f21c44e09ead9f2a9d2dc5badcf04c4a0765ff28e675a48cb77b8d2bec40f8", @ANYRES32=r4, @ANYBLOB="04000000000000002e476686ff03040000000000000072db9640773e81e7d2886d"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) r7 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x4) [ 2289.649453][T12893] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807701c820 [ 2289.662267][T12893] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 2289.682073][T12893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2289.688927][T12893] CR2: 00000000201a6000 CR3: 0000000018d51000 CR4: 00000000003526f0 [ 2289.700027][T12893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2289.712662][T12893] DR3: 000000000000003b DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2289.725459][T12893] Kernel panic - not syncing: Fatal exception [ 2289.731875][T12893] Kernel Offset: disabled [ 2289.736225][T12893] Rebooting in 86400 seconds..