last executing test programs:

14.467991097s ago: executing program 2 (id=1977):
close(0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000010c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x13, 0x5, 0xe}, 0x2c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
sendmsg(r0, &(0x7f0000003580)={&(0x7f0000001140)=@caif=@dbg={0x25, 0x9}, 0x80, &(0x7f0000001400)=[{&(0x7f00000011c0)="4ff9c6f4f1bc76a260b14f16c35cfd6f7e1629220de28dfd92d6cc030f43f17838eab0050264743cdc9f70a5877a0eeee3edee329eb40bcfe555aa0d30cf05dc2c4157fc61bd30d2d2ac865716ef47b6f04ac312acff03b15ba23b65faa2cf2df213cc319529747fb973ac4fb28dab9b22b42bc511a955c35cc847d3e7c5639a97885fc435477eaf94efe86c4fb6f952ef2208d95ffba25bedbdca760e5158a735f69bd08d86173a125453a0b04ff39b3c2e0edb98dc71db143751a67a01f66ff7c343be8425035468c0312899ce565d07", 0xd1}, {&(0x7f00000012c0)="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", 0xfe}, {&(0x7f00000013c0)="117752c0", 0x4}], 0x3, &(0x7f0000001440)=[{0x1010, 0x113, 0x4, "002f28854cdf58b9b9c473567d24b6ac7f42c42b973747e9d93955c1ac2cd5adc7d9f8643e65499ba1bbe10262cd4c83e2a8e576367cf4f3f3d5a73f177e7bb0840b4bc7eae1213410cfa0d513590b30614c3a898f566f1d1e746ec94a254f21a54194c358e17bf8e123ce811253464a857719fb6b9d34eae03c3567010b3b86feb04e6b4e605a39f81f29b9877bfc8c6f137b8561667abac80cdae215102b3099d59fb90f4fce0743df920cf08c49973fccad86ed5787a3eb79684650aa9f239187fae3c0aba9194de34893a2ea972cbe05995e2d56d3f3361f3d7ac03777e86c426575756e5875b3c854dd95242dc035514dffbeb41726d379046b1f445b83c10c42a98b7869c8f42cea53d51c62980deeecf3fc5b31b060efbb0e270baacde7929717cb47873b841668649c44094789dc10490bb8673f0b997f24c1e6f350d84b68169fd04a4b50fa83f33d8c9e9aa1c91eea0d2fea97b5b57850f6ecdff2a7b217479fc8e2db3c35b5334bd57189f26d3d0b37cf354925287ecf46f65d4becfe76653b8ac2b8ee903e36698e398d58428f523c0acade1e7865fca4b0382f4c4e9f230ccc76e5bf88170f4f4c358aaf125620a8add1781feda6d9fa38dab9446998df6f856674df8d8782c46006eec0adbe97e1fc354a2cdd47b6ada15d18d27662ef94f5a5a7e3682f4a417d956fe8b5ac2dc86ec3541ad086427221941318123274b75cc3644dc2cc4d4d110310d11e74d7625e0f5cc6c4bc28ebff280c8e2fb6482420635eda0f7e5d5b9af833bfafb853e2955f2edb36e57be807b7ffcc42c7dc9bcdf149bb17f48e39c5f86ba3996a92c86e7387139bf63f5a343e9fc9ca4e6bca65e8a45c280bf575ad985f346bdeae7fe6b1bb1592f6616021833862ead17c71806ad604072be19d937a3ff3d174ade12f7db58e96d055b5e53ebe98a3097a335d3edbadbe4e7956afe19a7c86d82f797bea945a2e5161359e6edacb44d5af0124a5b39cee6fb82d418360315e64047da36f47b014f5898effe6049f0f180cf73c362e6a5597ce32aa2ecd2b4efbc3560faf6db3bd4a445b6dad2e45886ebb7c96750634acdd77cebbb8d3dfc6991fcc3fffafdeb6081cf7ed349597cc0234830c785c400f575e13832ce611278de39ff7149a7e178a3f95d282657524242ec13a0b12f62f137a9f15c8ec501a418590b2f3c4c2c08313d39449b977e542f60b313667b3fdeecb5cbdcd4c8db6bd4bc6fc16499317363300207a7ff1cc83a9f6062135d17df693a66a680d147233dc34d9c0766f832cecc791e3528a5ce8137e2c7aceaf118a0ee25480e087b78e17a91ef4f390250f456535a1884d93ce77f75c5726ca0f629d37a627614809500d7e366dcbdb1bbeb5ae8a8d6f5fa7c39f8e405c5dd8ee4b5e17c78d3f462f625416c21a54a7d0523b7f6bda7b1bcb710890ccf46ff6cbcd999190f75d419ba816694e0f94f4da86d8b0a975fd3c78a608a533b3df3d6539cd7dfddcf5425564e331b857a43987c60500709bfe5d741722d9449ff702ad62cbbc2b426b1a2251ed9c858f25e37d72859b3328e0ff828ef9e1541741868e0dd125d6a41bd8ecbda5541a8efd2c7026dacb84c95c7b44ffe16b2a5af058127591cdf9533a2faa1f663f5534fc6cb7f8de9a5d69344fdc4fceaa25227c8e641265b2c0fc87ecf5efb182f1b38d69a551e54221f349abd622597c91c3511b9c1b84f2fe94d6f42b424d5da9186cb9c171c3bebadf8a4b1985c18ee90d72d206fc5b4928ca8041d355a5cf0cf5eaf4a8440044568626e250a996b2559ec712f549a8ea60055602f3fbeb837b614f9d482d0338006bc3a1174baa3b0f01ac826393b319330aa65ca17d23ac147b64f332eec7cd63027b055b625c1f67e6c2fad056f8af2f3dc74c59386e3189b252b54cf2bd39695a87f388dece84128bc3d2c1f54140540608a798a25a38e104f5f78fab05be596c3be7da2141b1cd77ce0d83ce395df76bdb8409279ed980c4d807e2510b64505ec95e54d8e1a04a682b2c7f3197f3624aba4e9061e0819eeae43c1177e5f9fb7a746d2fecfbe3b859678b5871ada20f6d81006821e95592db566852cf1ca56d7e85a277d538547fdfeae9af54172d27c7f4fd7ff6ba9a4f607df6fef3c4ec2d7b55dd29e7d3d14adba5fc7eb72754c4370ddd716752b5a7492fec223aafdd8be953ead06bf347dba22b5e00e664aa6061b3ccf124c9e0a8dadcc74019413ea6a2694e1f410c63087253533f91068f5ba248aa67b0791e3abb8d924c0cd6648aaa5993be61c93a26f8a91e83e6844e30c79b239b9f471c94a6809e5899a5ebb65243814da1488eebc0415a305d28039a4faf914bbe52f90972b056d388cfaaf9f6c84f9c2c01e37877c68669ae0d36a6bb78ecb042756630704ca99e05cdca1c43493ddd89433598df71734ae29cbc9d1652602ad4401571b685d7b2333d326c6be9c5004a8d13b0833368dee49d15f8a7ad30c1de148e887c4ba1e18eef74975b16d04c4da1dfbccbeee10863a584e8b4684bcddb69c485d8454b4d63f948480ee2e300cae4e478f865cb07a72cae7262dd7f2d1ec99c60475becd0c3a51e89ebadcd52b3b3b2ed1aade3c49c636a0927e43da4c5101859f366fc973fd55c1581859953fe63cfbc01ce82dcf5f6376ae0ac4d8faae5449c7596f14b861f84b9f468b26e45da561d4029e4310cb3d8f55caee5fe714d5c0950b47349f72a8c0516540af4a8deb9e0cb6c81adcc38fee7c14322880a5d8a95cb2d137826e776902eae01ca7ec687f2f3420d9ee04522d124ebe2e038c225398dd6001f4fa1f628d9fe2d826b860d8d40c308a6eb90349d47f0f2ed9e230dd8888a16b9e948ed74c2050208a27f5ff7b4a8cad3788251bf51aaa7322dcf3fcaa1080058ed5da1ff5c219737c8be221ded639dbdfb0509b6c90f4a05e92076bfcf61b79b244c992cf80455546672487b4a300b41e7f1cce67ee82cc40c4d02126a10abd6888890e65e050e2477965bf3fef0e4b3bf949a93235ef700a6b30a18eceef0bd8bd28220bdcb7db882f2c0e6c8d496d7af3180e66dc05ad737268230fa086afd734a5a7b5eabce260ad556cf5ca3f4054f87852f4ec1bcbb6dc618756d5db98d8330c2a940550183514584823ee9b1fafc74183d2b5149a0119a5b2e72929aa743cbfb7515a6388328c6ade67be8065d48523c46d76b4aebd5658f7f3d97979076958a2a66978c1eee829c859f0ef4c5c61fefa8edaeb5447d09afcf435d47cfa1439e95088e88317662671e3b1452e3f5a9fbb752bd4c6b77de30d8a2c515d1fa2e72759f8f0f9592fdd0faf3373f9b39394540da28c63368f4fbc5c6ec129a305c8828fd4e347a65ec0ace014b190f7c0d71454faad2e98e3b1c33394a3d48ad07dca876065fc2e48b2b037db7f697e93945e4fd3cf89b811f520742b4a45a7ccebb6b943b130e8aea139ddeddcc0661de54815f9b4f9337232e4a36593b33dbac9c06b4e715ba1e3c831943f039ae84bb9aa2568ee4ab6895e1f91930343819812e0ca6ddc08f7b68b89b5756c3a65a1cc05823faa4aad084cffe9bef31fe88d458529be25ff2c98f455becbf4464c8747d4b6e881f967c791867b3b2871bac3db01d57ee79340a05fba31151fb2715c315c381ea6ec0f39b9bf5f43b34a284ebd2d4b67f40b8f2856b709caa6c01612eccb965927cadb9a0d559850af129e426ad0846dc3069b2c8ecaf6d91bf8b1c821bd9d2a5806249a4b7abd601a4066d1e0cce67e6e19ba7b1590997d707394eb7bea5b7c10c49e25b4bfa6435531ae483663de953915f0eca9a9c384df58c4b48b53953c0ff205b8dfc7eae8ab4558ff2c4b3876ec0c72992172d3a1b0cfac87540bf65ace7bb6e28556f0833adc58106db586ed446679d297ca9cdaf07e4699a689bcd01b5f8b5fe99b2a4c15436f1b4971e04f121af7f26542ca18ff481850d03a613579dcdb9e204b3b8a64dc8958a1ebea16f0c71db00fc575164ad8390c57bdb6fa18f8acf65336d35acf83ff311382b6aba6e9686a18117defb997cf5c032a940006b151d8105a907343be297eb593251f1b16b2f5526756779cfb849d3cf9ab7fc21ae7262972f0db56160cebb1724675ad7f7c4b1c3f2c029e499b068d55e8cb3525979d789fbceaca80167c02c5e34c7569f46b2553e32a4d18c5429c34065b086fa53098f61884ae725e9d370b288883b650d665bfecac79931620037135d59574e0246c550777863ba02a41eb6c6c56ecb469a2cd327fecb97ffc7ebd995676fc886ef31bf5e720984b22405fcd7e10f3fe2c99b778f70c7b5144636f7ba548558d2ae718a85dcc2cf2d2214b88d2812bb0a3cfc47a4f255d184302d754c851b7506bcfa1587859cc705bed222b930300af287018bc3f852535bb36a5c250e643e1b569f1c060ffa21504d13cd8b9ff235a462ddf2684c9804561437c7bb71882de547bdd927ef947cf6f9f1278930302bb46d05a98008dd7724e47e990fd61bca9260a7b82ef5cb6985823c8cdecc6b44dfe44826a63aae0930337a92f0b1740f3f1c0cda4924cdb5b301310a1d961a39c23fb9fdf348d504a705ac435809ea8509c41231ff6fce064f6fcf9ffa3ef5feff5b4f5c277eb1b171c04ad677d20e5027919490087b19b01a6504d42c26c67e93218c690d54fe55cd675e58bdd6016bccdf484a0144c557a7d9f9bd657a1baeebe9dbaba592d78b456de27a6475e481e45fac047b51b8d7d75f899c4993edb89e8366c8c58f6905616d5a9f236e28e6088b39a64c182f4408f3d26f4e47bde3656f8341acfa91802f54f32624286dab17a8169698b5152d8f75d2d837c8e2632ee19e0e3dd573244272d561c818bbff91e7db3b557947d0885d0fe9537d6da26c147785b4c771c029b72c7d8c49e289c6e48e4f5ae11c45f58a66cb84a21da4656591735419dd1789839ce9063e448c9c5a6fc7b254a9a4bfbf29149d2f00ae36cdb6d35ae4087f6f25ce5c524c986ed689571e09cf8019719e1f7f9dcd7155037cd0c735da086dd9dea66985b3211a88238315b4f47ae7283d1ae6e0f83b0ed127dd13119b752857dfed5717bdc91ef4b1395323094cd92f6323a83fd3412b1b1033d40247e9b89ec2391e03b95b73a8cf42c43acf131c2a6669318033ae0bb0a403c91614cd438a3fea8cc3d3a08f91d6fa081e6ecabfa3430d804f37e477e813f0ba88ee86995ebdea1f5e523de92029f72694da9c78e314948f91f923ae8793729e33a8cca383f3ba35f7b7bc88f80c317d94aee8c20e3c84b71c7f7e87eca3d7f69cf2e6735a2d52223d0cd002ec233fb963e895d3107baa2619376af8faa103f0d090cbcd883e5839ebb9fa920edd85e5c8264d8e01acb1ac29be9077531eaffd58b8d9b04ceb310f3012ddb1720f571aeb0390bc6f0be8c3009fede35a4220765d89f922ecd48172efca7d45d3e459dd82e0a2c497277ee7960cbcc979440e60d2d5babe9a79399b7b4d2368bdafa13b4f1cf7031da2976645c937ef9435394f183924e08488be2708829e7beaf9ee040ddc6b751c84fc5007de828b796d82a09bf5fa0f2c85be72f534b8c9d795176b0c41c55ef9e75933b24b0bdc6d86f1bdb5fee0fde53eb4b8febae02b3ac139bfb762edd5965662087cb59b21f87c4edd78262f18170163a9e0892b9530023970acb12075e92c0689ea1f6ffee38b317d8ed60dd745e6dc733ed437fce0d5dd59691860542b9827acb758"}, {0x50, 0x1, 0x1e000, "f60b47565ce16e0adf75fdcf3ab3b7b5b24db643170383ab33c81a193f0bf4ef01452b893dc909d3cb072eb8e116e91fa2ef79b4128ab7b4c18b5f11ea66"}, {0x28, 0x112, 0x9, "2f52ef2c5db9f8d768eda227e58e77d6165789d1e2c30c1c"}, {0x30, 0x111, 0xfffffff1, "9e6f9f20449170a3c80cff9f8305c35409db140ed0fd773db2c0a6aae8ce"}, {0x1010, 0x10c, 0x4, "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"}, {0x38, 0x101, 0x2, "402bd5b5877f3cf4d4d5d444df66c0a52d8f6f5379dbf87bdc5a7ee1e36600ba62"}, {0x20, 0x88, 0x9, "5b3ceb72585c7db9f4d5"}], 0x2120}, 0x40010)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040), 0x4)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x4, 0x7)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4045}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

9.833889679s ago: executing program 2 (id=1988):
close(0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000010c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x13, 0x5, 0xe}, 0x2c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040), 0x4)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x4, 0x7)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001100))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4045}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

9.595454917s ago: executing program 1 (id=1991):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f03e, 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x1f, 0x10001, 0xcb, 0x7d2, 0x0, 0x9, 0x5db, 0x2}})
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000200)={0x3, "2c65857bed13ee4e0754f3eec9cb78aad8a9633f40df9311cc42cb45678e3c4a", 0x3, 0x8, 0x4, 0xc00000, 0x0, 0x2})

8.600841257s ago: executing program 1 (id=1994):
socket$kcm(0x10, 0x2, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
semctl$SETVAL(0x0, 0x6, 0x10, &(0x7f0000018f40)=0xc6a)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r8 = io_uring_setup(0x32, &(0x7f0000000140)={0x0, 0x4804, 0x400, 0x1, 0xa7})
io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000002380)={0x7, 0x1, 0x0, &(0x7f00000022c0)=[{&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/71, 0x47}], &(0x7f0000002340)=[0x6b56, 0x13]}, 0x20)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x8, 0x7, 0x7}}, 0xa)

8.419947107s ago: executing program 0 (id=1996):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
futimesat(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00')
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4)
sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@multicast2, @remote, 0x0, 0xffffff00, 'pim6reg0\x00', 'veth0\x00', {0xff}, {}, 0x8, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x1, 0x4, 0x1, 0x1], 0x2, 0x7}, {0xffffffffffffffff, [0x0, 0x1, 0x3, 0x0, 0x3], 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff, 'veth1_virt_wifi\x00', 'sit0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x2}, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x5, 0x8000}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x254)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0xa86c, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140), &(0x7f00000001c0), 0x0, &(0x7f0000000100)=[0x0]})
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

8.350427129s ago: executing program 4 (id=1998):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x800, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x381844, 0x80)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0)
pipe2$watch_queue(0x0, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000100)='incremental-fs\x00', 0x800841, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x52, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x1ff}, @rumble={0xa, 0x6}})
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x6044}, 0x40008d0)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)

7.272169996s ago: executing program 0 (id=1999):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0])
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7f", 0x74}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9", 0xe7}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.144932164s ago: executing program 1 (id=2000):
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000f00000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d3227e7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x8080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x2, 0x3, 0x3}, {{}, 0x16, 0x3, 0xf}, {{0x0, 0xea60}, 0x3, 0x7, 0x4c}, {{0x77359400}, 0x17, 0x2, 0x7}], 0x60)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x1, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@typed={0x9, 0x5d, 0x0, 0x0, @str='ceph\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&>\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@RR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00'/335, 0xffffffffffffffff)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000003540)={0x2020}, 0x2020)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)

6.708300816s ago: executing program 0 (id=2003):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000005c80), 0x0, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x6}, 0xe)
landlock_restrict_self(0xffffffffffffffff, 0xc)

6.152999405s ago: executing program 3 (id=2004):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_io_uring_complete(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
mknodat(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x9)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0x7fffffff, 0x2, 0x34e8}})
ptrace(0x10, r4)
r5 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}})
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "115e4ecd", {0x3, 0x100, 0x0, 0x4, 0x3, 0x8, 0xd}})

5.92765016s ago: executing program 2 (id=2005):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3c, &(0x7f0000000100)})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6bba919736d34290000080008"], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r4, r4, 0x0, 0x200000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x40, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0x40082104, 0x0)

5.5937889s ago: executing program 1 (id=2006):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
close(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000095280512800c0001006d6163766c616e0004000280"], 0x34}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_ringparam={0x11, 0x4, 0x6, 0x1, 0x9, 0x5, 0x7bbc, 0xb4, 0x100}})
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x2000001e, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4)
bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
timer_settime(r3, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001000000000000000700001495"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000440), &(0x7f0000000040)=@udp=r7}, 0x20)

5.592756584s ago: executing program 2 (id=2007):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000480)={@mcast2, 0x8000000, 0x0, 0x3, 0x2, 0x0, 0x8}, 0x20)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x608000, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000900f0000000087b8000000000a00000affffffff000000060200000008000340800000000800044000000000"], 0x30}, 0x1, 0x0, 0x0, 0x200408cd}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {0x0, 0x1, 0x6}, 0xfe}, 0x18)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000640)={0xc})
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00')
preadv(r7, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0)

5.586160817s ago: executing program 4 (id=2008):
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0])
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4", 0x2f}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52", 0x24}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.438836834s ago: executing program 0 (id=2009):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xffffffc0, &(0x7f0000000140)=""/181, 0x40f00, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
wait4(r1, &(0x7f0000000280), 0x2, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x13, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_usb_connect(0x3, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005920f010402038b14201000000010902380001000000000904"], 0x0)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)

5.396288871s ago: executing program 1 (id=2010):
epoll_create1(0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r1, 0x230d}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
r2 = add_key$user(&(0x7f00000036c0), &(0x7f0000003700)={'syz', 0x1}, &(0x7f0000003740)="84", 0x1, 0xfffffffffffffffb)
keyctl$setperm(0x5, r2, 0x1010)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3)
r4 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="fab1817db434f31a2c001280110001006272696467655f736c61766500000001140005800500050000000000600022007ad42693a8a3b47973108ccef6529b9a38c53d0b7b7514d46c7e28", @ANYRES32=r1, @ANYBLOB="140003006272696467655f736c6176655f300000"], 0x60}, 0x1, 0x0, 0x0, 0x20004085}, 0x44)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000480)=0x8)
close(r5)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
r6 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$rds(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1, 0x0, 0x0, 0x20000850}, 0x4000080)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e000001190789078e202000080000000"], 0x0)
syz_emit_ethernet(0x85, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045000077000000020011907864010102000000000000ffffff9f907866b71b4468e24e771b2faa686603dd068a8887cb521ac8c5c81a94a8b9d2368be498c5c5b6ff552050944beb494f9181f9e38c2020a67367040cadfe32e0232f4d13c4ec49cb739f9d188032294bf23c81e5ed0b8af1ba533c7886"], 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0})
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000300, 0x80000330, 0x80000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000e4ffffff0000000000000000000000000000000800000000000000000000000000000000000000ffffffff0002000000000000000000000000000004000000eeff00000000000000000000000000000000000000000000feffffff00060000"]}, 0x108)

3.52928209s ago: executing program 4 (id=2011):
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0])
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x40880, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4", 0x2f}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52", 0x24}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.73054614s ago: executing program 3 (id=2012):
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x4a4000, 0x16)
r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
ftruncate(r0, 0x8800000)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
sendfile(r3, r0, 0x0, 0x1000009)

2.473427458s ago: executing program 2 (id=2013):
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0)
close(r0)

2.431199705s ago: executing program 3 (id=2014):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2)
memfd_create(0x0, 0x1)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0)
ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
renameat2(r1, &(0x7f0000000480)='./file0\x00', r0, &(0x7f00000004c0)='./file3\x00', 0x5)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x341e82, 0x10, 0x5}, 0x18)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000440))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)

2.372544358s ago: executing program 0 (id=2015):
close(0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000010c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x13, 0x5, 0xe}, 0x2c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040), 0x4)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x4, 0x7)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001100))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4045}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

2.228930598s ago: executing program 2 (id=2016):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1c0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
io_setup(0xd, &(0x7f0000000380)=<r4=>0x0)
io_destroy(r4)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000bc0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x5000)
sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0x6315, 0x1})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})

2.215424645s ago: executing program 4 (id=2017):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f03e, 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x1f, 0x10001, 0xcb, 0x7d2, 0x0, 0x9, 0x5db, 0x2}})
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000200)={0x3, "2c65857bed13ee4e0754f3eec9cb78aad8a9633f40df9311cc42cb45678e3c4a", 0x3, 0x8, 0x4, 0xc00000, 0x0, 0x2})

1.92473774s ago: executing program 1 (id=2018):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))
r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r3 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080))
read$FUSE(r2, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0xfffffef0)
keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0x0})
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x0)
timer_create(0x6, &(0x7f00000000c0)={0x0, 0x2f, 0x2, @tid=r4}, &(0x7f0000000100)=<r5=>0x0)
fchmodat(r2, &(0x7f0000000200)='./file0\x00', 0x0)
timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0)
r6 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r8], 0x28}}, 0x0)
r9 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r9, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x40081271, &(0x7f0000000980)=0x4000)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000540))
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x0, 0x0)
r11 = fsmount(r6, 0x0, 0x0)
r12 = openat$cgroup_int(r11, &(0x7f0000000180)='cpu.max.burst\x00', 0x2, 0x0)
write$cgroup_int(r12, &(0x7f0000000000), 0x12)

1.423853121s ago: executing program 3 (id=2019):
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x4a4000, 0x16)
r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r3 = accept$alg(r1, 0x0, 0x0)
r4 = dup3(r3, r1, 0x0)
sendfile(r4, r0, 0x0, 0x1000009)

1.421791701s ago: executing program 4 (id=2020):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x26, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@arp={0x806, @generic={0x4d99d0b4842805fb, 0x8906, 0x6, 0x0, 0x3, @local, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}}}}, 0x0)

907.805964ms ago: executing program 4 (id=2021):
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x4a4000, 0x16)
r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
ftruncate(r0, 0x8800000)
r1 = socket$alg(0x26, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r3 = accept$alg(r1, 0x0, 0x0)
r4 = dup3(r3, r1, 0x0)
sendfile(r4, r0, 0x0, 0x1000009)

650.493972ms ago: executing program 3 (id=2022):
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x4a4000, 0x16)
r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
ftruncate(r0, 0x8800000)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r3 = accept$alg(r1, 0x0, 0x0)
r4 = dup3(r3, r1, 0x0)
sendfile(r4, r0, 0x0, 0x1000009)

30.412096ms ago: executing program 3 (id=2023):
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x4a4000, 0x16)
r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r3 = accept$alg(r1, 0x0, 0x0)
r4 = dup3(r3, r1, 0x0)
sendfile(r4, r0, 0x0, 0x1000009)

0s ago: executing program 0 (id=2024):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000480)={@mcast2, 0x8000000, 0x0, 0x3, 0x2, 0x0, 0x8}, 0x20)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x608000, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000900f0000000087b8000000000a00000affffffff000000060200000008000340800000000800044000000000"], 0x30}, 0x1, 0x0, 0x0, 0x200408cd}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {0x0, 0x1, 0x6}, 0xfe}, 0x18)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000640)={0xc})
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00')
preadv(r7, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0)

kernel console output (not intermixed with test programs):

=1, Product=2, SerialNumber=3
[  377.140200][ T5619] usb 1-1: Product: syz
[  377.144397][ T5619] usb 1-1: Manufacturer: syz
[  377.157334][ T5619] usb 1-1: SerialNumber: syz
[  377.426933][ T5619] usb 1-1: USB disconnect, device number 43
[  378.046898][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.448559][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  378.454992][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  378.726023][ T5619] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  378.876093][ T5619] usb 5-1: device descriptor read/64, error -71
[  378.984920][T11580] Cannot find add_set index 65532 as target
[  379.155498][ T5619] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  379.210782][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.235985][  T991] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  379.346170][ T5619] usb 5-1: device descriptor read/64, error -71
[  379.479484][ T5619] usb usb5-port1: attempt power cycle
[  379.913877][ T5619] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  380.031387][ T5619] usb 5-1: device descriptor read/8, error -71
[  380.066272][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.216204][  T991] usb 2-1: Using ep0 maxpacket: 8
[  380.224736][  T991] usb 2-1: config 0 has no interfaces?
[  380.239697][  T991] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  380.249163][  T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.260426][  T991] usb 2-1: config 0 descriptor??
[  380.306892][ T5619] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  380.321448][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.332957][ T5619] usb 5-1: device descriptor read/8, error -71
[  380.448615][ T5619] usb usb5-port1: unable to enumerate USB device
[  380.535289][ T5619] usb 2-1: USB disconnect, device number 35
[  381.336450][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.526579][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.536122][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.553691][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.564175][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.594172][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.775821][T11627] __nla_validate_parse: 143 callbacks suppressed
[  381.775843][T11627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1477'.
[  381.909786][T11636] pim6reg: entered allmulticast mode
[  382.207894][T11636] team0: entered allmulticast mode
[  382.213542][T11636] team_slave_0: entered allmulticast mode
[  382.228827][T11636] team_slave_1: entered allmulticast mode
[  382.339722][T11636] team0: left allmulticast mode
[  382.372413][T11636] team_slave_0: left allmulticast mode
[  382.402500][T11636] team_slave_1: left allmulticast mode
[  382.448849][T11636] pim6reg: left allmulticast mode
[  383.086311][    T9] net_ratelimit: 3 callbacks suppressed
[  383.086331][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.809598][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.820862][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.162197][T11663] Cannot find add_set index 65532 as target
[  384.446053][ T5619] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  384.627416][ T5619] usb 4-1: Using ep0 maxpacket: 8
[  384.647334][ T5619] usb 4-1: config 0 has no interfaces?
[  384.669990][ T5619] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  384.725186][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.776589][ T5619] usb 4-1: config 0 descriptor??
[  384.847169][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.053141][ T5737] usb 4-1: USB disconnect, device number 55
[  385.918246][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.128786][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.640153][T11697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.664029][T11697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.714853][T11697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.744325][T11697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.574292][ T5737] net_ratelimit: 1021 callbacks suppressed
[  388.574309][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.166760][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.726075][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.024449][T11734] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1500'.
[  390.636231][ T5737] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  391.027693][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.195949][ T5737] usb 2-1: Using ep0 maxpacket: 8
[  391.214500][ T5737] usb 2-1: config 0 has no interfaces?
[  391.234798][ T5737] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  391.263313][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.285700][ T5737] usb 2-1: config 0 descriptor??
[  391.442945][T11735] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1510'.
[  392.206880][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.416769][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.548137][ T5737] usb 2-1: USB disconnect, device number 36
[  392.706133][   T24] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  392.866977][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[  392.883567][   T24] usb 1-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  392.905057][   T24] usb 1-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  392.927989][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  392.949573][   T24] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  393.027253][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.058873][   T24] usb 1-1: Product: syz
[  393.084862][   T24] usb 1-1: Manufacturer: syz
[  393.102429][   T24] usb 1-1: SerialNumber: syz
[  393.167572][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.472536][   T24] usb 1-1: USB disconnect, device number 44
[  393.526812][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.758711][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.575228][T11766] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1517'.
[  396.054264][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.062425][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.170743][T11787] ceph: No mds server is up or the cluster is laggy
[  396.177673][ T5619] libceph: connect (1)[c::]:6789 error -101
[  396.191532][ T5619] libceph: mon0 (1)[c::]:6789 connect error
[  396.376119][    T9] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  396.946128][    T9] usb 2-1: device descriptor read/64, error -71
[  396.984987][T11808] Cannot find add_set index 65532 as target
[  397.089554][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.196017][    T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  397.310314][ T5722] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  397.466030][ T5619] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  397.470142][    T9] usb 2-1: device descriptor read/64, error -71
[  397.587594][ T5722] usb 3-1: Using ep0 maxpacket: 8
[  397.596235][ T5722] usb 3-1: config 0 has no interfaces?
[  397.603204][ T5722] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  397.612393][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.615988][ T5619] usb 5-1: Using ep0 maxpacket: 32
[  397.630238][ T5722] usb 3-1: config 0 descriptor??
[  397.639628][ T5619] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  397.661888][ T5619] usb 5-1: config 0 has no interface number 0
[  397.678146][ T5619] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  397.697510][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.698940][    T9] usb usb2-port1: attempt power cycle
[  397.715051][ T5619] usb 5-1: Product: syz
[  397.730296][ T5619] usb 5-1: Manufacturer: syz
[  397.741690][ T5619] usb 5-1: SerialNumber: syz
[  397.815019][ T5619] usb 5-1: config 0 descriptor??
[  397.926743][ T5619] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  398.086103][    T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  398.128397][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.248834][    T9] usb 2-1: device descriptor read/8, error -71
[  398.301106][T11830] Cannot find add_set index 65532 as target
[  398.507062][ T5619] usb 5-1: qt2_attach - failed to power on unit: -71
[  398.523444][ T5619] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  398.594560][ T5714] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  398.688464][ T5619] usb 5-1: USB disconnect, device number 43
[  398.826569][ T5714] usb 4-1: Using ep0 maxpacket: 8
[  398.840637][   T24] usb 3-1: USB disconnect, device number 42
[  398.938054][ T5714] usb 4-1: config 0 has no interfaces?
[  398.963866][ T5714] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  399.001185][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.032218][ T5714] usb 4-1: config 0 descriptor??
[  399.086315][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.167289][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.254593][  T991] usb 4-1: USB disconnect, device number 56
[  399.435988][    T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  399.488668][    T9] usb 2-1: Using ep0 maxpacket: 32
[  399.519339][    T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  399.557748][    T9] usb 2-1: config 0 has no interface number 0
[  399.584320][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  399.597480][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.605640][    T9] usb 2-1: Product: syz
[  399.611832][    T9] usb 2-1: Manufacturer: syz
[  399.617443][    T9] usb 2-1: SerialNumber: syz
[  399.628283][    T9] usb 2-1: config 0 descriptor??
[  399.637065][    T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  399.926033][ T5619] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  399.949391][T11865] pim6reg: entered allmulticast mode
[  399.967331][T11867] team0: entered allmulticast mode
[  399.972548][T11867] team_slave_0: entered allmulticast mode
[  399.983275][T11867] team_slave_1: entered allmulticast mode
[  399.983336][    T9] usb 2-1: qt2_attach - failed to power on unit: -71
[  400.000778][T11865] team0: left allmulticast mode
[  400.006609][T11865] team_slave_0: left allmulticast mode
[  400.012108][T11865] team_slave_1: left allmulticast mode
[  400.013679][    T9] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  400.018932][T11865] pim6reg: left allmulticast mode
[  400.049439][    T9] usb 2-1: USB disconnect, device number 40
[  400.091814][ T5619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.109936][  T991] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  400.129096][ T5619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.161145][ T5619] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  400.186012][ T5619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.206545][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.218292][ T5619] usb 5-1: config 0 descriptor??
[  400.440595][  T991] usb 1-1: Using ep0 maxpacket: 8
[  400.519453][  T991] usb 1-1: config 0 has no interfaces?
[  400.525112][  T991] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  400.535104][  T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.557540][  T991] usb 1-1: config 0 descriptor??
[  400.773333][ T5619] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  400.789302][ T5619] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  400.967414][ T5619] cp2112 0003:10C4:EA90.000E: error requesting version
[  401.028073][ T5619] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -5
[  401.151955][  T991] usb 1-1: USB disconnect, device number 45
[  401.246211][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.316717][ T5806] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  401.477779][ T5806] usb 2-1: Using ep0 maxpacket: 32
[  401.517488][ T5806] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  401.543989][ T5806] usb 2-1: config 0 has no interface number 0
[  401.592932][ T5806] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  401.622029][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.648608][ T5806] usb 2-1: Product: syz
[  401.671384][ T5806] usb 2-1: Manufacturer: syz
[  401.689858][ T5806] usb 2-1: SerialNumber: syz
[  401.742007][ T5806] usb 2-1: config 0 descriptor??
[  401.794324][ T5806] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  402.136525][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.286430][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.324958][ T5806] usb 2-1: qt2_attach - failed to power on unit: -71
[  402.334062][ T5806] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  402.542872][ T5806] usb 2-1: USB disconnect, device number 41
[  402.639859][T11895] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1555'.
[  403.036090][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.038755][ T5619] usb 5-1: USB disconnect, device number 44
[  403.351158][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.456540][T11908] Cannot find add_set index 65532 as target
[  403.928558][    T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  404.106117][ T5619] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  404.106720][    T9] usb 1-1: Using ep0 maxpacket: 8
[  404.132853][    T9] usb 1-1: config 0 has no interfaces?
[  404.138814][    T9] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  404.170311][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.191401][    T9] usb 1-1: config 0 descriptor??
[  404.255995][ T5619] usb 5-1: Using ep0 maxpacket: 8
[  404.262610][ T5619] usb 5-1: config 0 has no interfaces?
[  404.269917][T11929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1566'.
[  404.280571][ T5619] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  404.300880][ T5619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.316896][ T5619] usb 5-1: config 0 descriptor??
[  404.366594][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.517205][  T991] usb 1-1: USB disconnect, device number 46
[  404.586518][    T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  404.796133][    T9] usb 4-1: Using ep0 maxpacket: 8
[  405.070074][  T991] usb 5-1: USB disconnect, device number 45
[  405.097741][    T9] usb 4-1: config 0 has no interfaces?
[  405.166673][    T9] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  405.258555][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.404141][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.521415][    T9] usb 4-1: config 0 descriptor??
[  405.915313][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.286080][ T5619] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  406.361987][ T5806] usb 4-1: USB disconnect, device number 57
[  406.456850][ T5619] usb 1-1: Using ep0 maxpacket: 32
[  406.463880][ T5619] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  406.473874][ T5619] usb 1-1: config 0 has no interface number 0
[  406.482222][ T5619] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  406.491483][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.503005][ T5619] usb 1-1: Product: syz
[  406.507631][ T5619] usb 1-1: Manufacturer: syz
[  406.512261][ T5619] usb 1-1: SerialNumber: syz
[  406.519890][ T5619] usb 1-1: config 0 descriptor??
[  406.531360][ T5619] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  406.543224][ T5737] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  406.767404][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.787899][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.926179][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.391824][ T5737] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  407.405984][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.421460][ T5619] usb 1-1: qt2_attach - failed to power on unit: -71
[  407.429585][ T5619] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[  407.454176][ T5737] usb 3-1: config 0 descriptor??
[  407.459418][ T5619] usb 1-1: USB disconnect, device number 47
[  407.909723][ T5737] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  407.921097][ T5737] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  407.971117][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.198954][ T5737] cp2112 0003:10C4:EA90.000F: error requesting version
[  408.275540][T11985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1581'.
[  409.530346][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.061032][T11986] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1583'.
[  411.127717][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.180913][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.193790][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.284598][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.307568][ T5737] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -5
[  411.393361][ T5737] usb 3-1: USB disconnect, device number 43
[  411.599852][T12007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.635193][T12006] pim6reg: entered allmulticast mode
[  411.662238][T12007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.675846][T12008] pim6reg: left allmulticast mode
[  411.716850][T12007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.763591][T12007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.788433][ T5619] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  411.805305][T12007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.842466][T12007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.975983][ T5619] usb 5-1: Using ep0 maxpacket: 8
[  412.134364][ T5619] usb 5-1: config 0 has no interfaces?
[  412.181239][ T5619] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  412.259283][ T5619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.868421][ T5619] usb 5-1: config 0 descriptor??
[  413.255330][   T46] usb 5-1: USB disconnect, device number 46
[  414.176012][    T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  414.362371][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.093942][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.103893][    T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  415.104108][T12045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1599'.
[  415.113128][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.132464][    T9] usb 1-1: config 0 descriptor??
[  415.826381][    T9] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  416.132552][    T9] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  416.409846][T12039] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1597'.
[  416.459015][    T9] cp2112 0003:10C4:EA90.0010: error requesting version
[  416.540230][    T9] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -5
[  416.606211][   T46] net_ratelimit: 1027 callbacks suppressed
[  416.606228][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.857358][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.867276][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.875732][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.886629][   T29] audit: type=1400 audit(1782530059.824:472): avc:  denied  { setopt } for  pid=12078 comm="syz.3.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  417.109521][T12056] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1602'.
[  417.856819][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.911925][ T5713] usb 1-1: USB disconnect, device number 48
[  417.926011][ T5737] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  418.106916][ T5737] usb 4-1: Using ep0 maxpacket: 8
[  418.130503][ T5737] usb 4-1: config 0 has no interfaces?
[  418.142280][ T5737] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  418.178783][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.224675][ T5737] usb 4-1: config 0 descriptor??
[  418.349300][T12104] pim6reg: entered allmulticast mode
[  418.368655][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  418.393949][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  418.413743][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  418.423283][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  418.439664][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  418.449298][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  418.478732][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  418.669501][T12104] team0: entered allmulticast mode
[  418.719961][T12104] team_slave_0: entered allmulticast mode
[  418.770184][T12104] team_slave_1: entered allmulticast mode
[  418.841706][T12109] team0: left allmulticast mode
[  418.863524][T12109] team_slave_0: left allmulticast mode
[  418.945311][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.948753][T12109] team_slave_1: left allmulticast mode
[  418.987999][T12109] pim6reg: left allmulticast mode
[  418.994273][   T46] usb 4-1: USB disconnect, device number 58
[  420.115418][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.356065][ T5619] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  420.431252][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.607317][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.646502][ T5713] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  421.649318][ T5619] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  421.672890][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.682013][ T5619] usb 3-1: Product: syz
[  421.686986][ T5619] usb 3-1: Manufacturer: syz
[  421.696108][ T5619] usb 3-1: SerialNumber: syz
[  421.736934][ T5619] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  421.991234][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.997686][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.011011][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.011374][   T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  422.019408][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.230579][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.237031][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.250424][ T5713] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  422.259998][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.308035][ T5713] usb 4-1: config 0 descriptor??
[  422.697772][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.877671][ T5713] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  422.897973][ T5722] libceph: connect (1)[c::]:6789 error -101
[  422.934410][ T5722] libceph: mon0 (1)[c::]:6789 connect error
[  422.946038][ T5619] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  423.060389][ T5713] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  423.158581][ T5713] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE
[  423.222552][  T991] libceph: connect (1)[c::]:6789 error -101
[  423.234217][  T991] libceph: mon0 (1)[c::]:6789 connect error
[  423.376900][ T5713] cp2112 0003:10C4:EA90.0011: error requesting SMBus config
[  423.443172][ T5713] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -32
[  423.474232][ T5713] usb 4-1: USB disconnect, device number 59
[  423.525639][T12154] ceph: No mds server is up or the cluster is laggy
[  423.577642][T12157] __nla_validate_parse: 142 callbacks suppressed
[  423.577664][T12157] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1627'.
[  423.741899][   T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  423.755494][ T5737] usb 3-1: USB disconnect, device number 44
[  423.771381][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.779876][   T24] ath9k_htc: Failed to initialize the device
[  423.787778][ T5737] usb 3-1: ath9k_htc: USB layer deinitialized
[  423.937006][ T5619] usb 1-1: not running at top speed; connect to a high speed hub
[  424.024590][ T5619] usb 1-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  424.035227][ T5619] usb 1-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  424.049298][ T5619] usb 1-1: config 1 interface 0 has no altsetting 0
[  424.059651][ T5619] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  424.068972][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.077310][ T5619] usb 1-1: Product: syz
[  424.081498][ T5619] usb 1-1: Manufacturer: syz
[  424.086430][ T5619] usb 1-1: SerialNumber: syz
[  424.180893][T12171] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1631'.
[  424.328204][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'.
[  424.354234][ T5619] usb 1-1: USB disconnect, device number 49
[  424.361211][T12179] pim6reg: entered allmulticast mode
[  424.393168][T12179] team0: entered allmulticast mode
[  424.400211][T12179] team_slave_0: entered allmulticast mode
[  424.406757][T12179] team_slave_1: entered allmulticast mode
[  424.424742][T12179] team0: left allmulticast mode
[  424.433122][T12179] team_slave_0: left allmulticast mode
[  424.441335][T12179] team_slave_1: left allmulticast mode
[  424.550667][T12179] pim6reg: left allmulticast mode
[  425.089924][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.433352][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.138934][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.267213][ T5619] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  426.441366][ T5619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.805085][ T5619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.842449][ T5619] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  426.894750][ T5619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.950637][  T991] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  426.980555][ T5619] usb 2-1: config 0 descriptor??
[  427.167050][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.370198][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.396203][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.415804][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.618617][T12212] pim6reg: entered allmulticast mode
[  427.676336][T12213] team0: entered allmulticast mode
[  427.729613][T12208] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1643'.
[  427.743098][ T5619] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  427.767793][T12213] team_slave_0: entered allmulticast mode
[  427.800947][T12213] team_slave_1: entered allmulticast mode
[  427.818340][ T5619] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  427.831080][T12215] team0: left allmulticast mode
[  427.836187][T12215] team_slave_0: left allmulticast mode
[  427.841743][T12215] team_slave_1: left allmulticast mode
[  427.847593][T12215] pim6reg: left allmulticast mode
[  427.886598][ T5619] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE
[  428.090111][ T5619] cp2112 0003:10C4:EA90.0012: error requesting SMBus config
[  428.177901][  T991] usb 4-1: Using ep0 maxpacket: 32
[  428.179327][ T5619] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -32
[  428.189757][  T991] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  428.200318][  T991] usb 4-1: config 0 has no interface number 0
[  428.208335][  T991] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  428.217743][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.217835][  T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.235287][  T991] usb 4-1: Product: syz
[  428.239823][  T991] usb 4-1: Manufacturer: syz
[  428.244442][  T991] usb 4-1: SerialNumber: syz
[  428.251424][  T991] usb 4-1: config 0 descriptor??
[  428.255372][ T5619] usb 2-1: USB disconnect, device number 42
[  428.258605][  T991] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  428.442308][T12227] Cannot find add_set index 65532 as target
[  428.628819][  T991] usb 4-1: qt2_attach - failed to power on unit: -71
[  428.638257][  T991] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  428.684385][  T991] usb 4-1: USB disconnect, device number 60
[  428.747262][ T5714] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  429.016102][ T5714] usb 3-1: Using ep0 maxpacket: 8
[  429.093089][ T5714] usb 3-1: config 0 has no interfaces?
[  429.140846][ T5714] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  429.237886][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.340644][ T5714] usb 3-1: config 0 descriptor??
[  429.399409][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.737410][T12260] pim6reg: entered allmulticast mode
[  429.762720][T12260] team0: entered allmulticast mode
[  429.768014][T12260] team_slave_0: entered allmulticast mode
[  429.773854][T12260] team_slave_1: entered allmulticast mode
[  429.780581][T12260] team0: left allmulticast mode
[  429.796385][T12260] team_slave_0: left allmulticast mode
[  429.805103][ T5619] usb 3-1: USB disconnect, device number 45
[  429.826369][T12260] team_slave_1: left allmulticast mode
[  429.886443][T12260] pim6reg: left allmulticast mode
[  430.481304][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.545404][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.306155][   T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  431.481207][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.494216][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.564350][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  431.601385][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.617792][   T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  431.655718][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.665142][T12292] pim6reg: entered allmulticast mode
[  431.704276][   T24] usb 3-1: config 0 descriptor??
[  431.715685][T12292] team0: entered allmulticast mode
[  431.734290][T12292] team_slave_0: entered allmulticast mode
[  431.758710][T12292] team_slave_1: entered allmulticast mode
[  431.789676][T12295] team0: left allmulticast mode
[  431.800359][T12295] team_slave_0: left allmulticast mode
[  431.812014][T12295] team_slave_1: left allmulticast mode
[  431.820544][T12295] pim6reg: left allmulticast mode
[  432.519793][   T24] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  432.528565][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.560364][   T24] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  432.656693][   T24] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE
[  432.713148][   T24] cp2112 0003:10C4:EA90.0013: error requesting SMBus config
[  432.773652][   T24] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -32
[  432.846498][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.855273][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.869075][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.877934][  T991] usb 3-1: USB disconnect, device number 46
[  433.721050][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.088783][T12328] Cannot find add_set index 65532 as target
[  434.106041][   T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  434.251249][T12335] pim6reg: entered allmulticast mode
[  434.286348][   T24] usb 4-1: Using ep0 maxpacket: 8
[  434.304581][   T24] usb 4-1: config 0 has no interfaces?
[  434.327565][T12337] pim6reg: left allmulticast mode
[  434.334408][   T24] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  434.371952][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.412303][   T24] usb 4-1: config 0 descriptor??
[  434.426051][ T5713] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  434.676362][ T5713] usb 1-1: Using ep0 maxpacket: 8
[  434.690696][ T5713] usb 1-1: config 0 has no interfaces?
[  434.706094][ T5713] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  434.731661][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.754780][ T5713] usb 1-1: config 0 descriptor??
[  434.766743][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.218985][   T24] usb 4-1: USB disconnect, device number 61
[  435.267045][ T5713] usb 1-1: USB disconnect, device number 50
[  435.806793][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.816381][ T5714] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  435.978592][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.996353][ T5714] usb 3-1: Using ep0 maxpacket: 8
[  436.021926][ T5714] usb 3-1: config 0 has no interfaces?
[  436.133867][ T5714] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  436.161565][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.314386][ T5714] usb 3-1: config 0 descriptor??
[  436.596217][ T5806] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  436.683479][ T5714] usb 3-1: USB disconnect, device number 47
[  437.397174][ T5806] usb 2-1: not running at top speed; connect to a high speed hub
[  437.408247][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.417943][ T5806] usb 2-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  437.491782][ T5806] usb 2-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  437.594953][ T5806] usb 2-1: config 1 interface 0 has no altsetting 0
[  437.916952][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.926480][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.059232][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.067972][ T5806] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  438.093162][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.114133][ T5806] usb 2-1: Product: syz
[  438.119003][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  438.128204][ T5806] usb 2-1: Manufacturer: syz
[  438.148003][ T5806] usb 2-1: SerialNumber: syz
[  438.197237][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  438.291845][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  438.378278][T12394] Cannot find set identified by id 0 to match
[  438.473016][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.509274][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  438.663559][   T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  438.762975][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  438.843087][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  439.012344][   T24] usb 3-1: Using ep0 maxpacket: 8
[  439.138324][   T24] usb 3-1: config 0 has no interfaces?
[  439.147474][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  439.187137][   T24] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  439.243957][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.308449][ T5806] usb 2-1: can't set config #1, error -71
[  439.442297][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  439.471719][T12390] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1692'.
[  439.574592][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.599686][   T24] usb 3-1: config 0 descriptor??
[  439.612400][ T5806] usb 2-1: USB disconnect, device number 43
[  439.761518][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  439.941460][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  439.952970][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  440.608283][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.849700][  T991] usb 3-1: USB disconnect, device number 48
[  441.166196][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.362394][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.647653][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.708815][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.726593][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.006267][ T5737] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  444.022608][T12443] Cannot find add_set index 65532 as target
[  444.172314][ T5737] usb 1-1: Using ep0 maxpacket: 8
[  444.191078][ T5737] usb 1-1: config 0 has no interfaces?
[  444.217008][ T5737] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  444.248630][T12423] __nla_validate_parse: 139 callbacks suppressed
[  444.248652][T12423] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1701'.
[  444.270648][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.302696][ T5737] usb 1-1: config 0 descriptor??
[  444.355993][   T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  444.397645][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.507427][   T24] usb 3-1: Using ep0 maxpacket: 8
[  444.528093][   T24] usb 3-1: config 0 has no interfaces?
[  444.545257][   T24] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  444.575143][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.611605][   T24] usb 3-1: config 0 descriptor??
[  444.768794][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.303583][T12462] pim6reg: entered allmulticast mode
[  445.324413][T12462] team0: entered allmulticast mode
[  445.340707][T12462] team_slave_0: entered allmulticast mode
[  445.354895][T12462] team_slave_1: entered allmulticast mode
[  445.363006][  T804] usb 1-1: USB disconnect, device number 51
[  445.371915][T12462] team0: left allmulticast mode
[  445.385055][T12462] team_slave_0: left allmulticast mode
[  445.401000][T12462] team_slave_1: left allmulticast mode
[  445.412288][T12462] pim6reg: left allmulticast mode
[  445.466544][   T24] usb 3-1: USB disconnect, device number 49
[  445.776086][ T5722] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  445.808778][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.535964][ T5722] usb 2-1: Using ep0 maxpacket: 8
[  446.546821][ T5722] usb 2-1: config 0 has no interfaces?
[  446.565648][ T5722] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  446.609829][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.648994][ T5722] usb 2-1: config 0 descriptor??
[  446.857994][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.406702][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.886543][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.209345][   T24] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  448.326337][  T991] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  448.428498][ T5713] usb 2-1: USB disconnect, device number 44
[  448.489270][  T991] usb 5-1: Using ep0 maxpacket: 8
[  448.514112][  T991] usb 5-1: config 0 has no interfaces?
[  448.566990][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[  448.576423][  T991] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  448.601124][  T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.605320][   T24] usb 1-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  448.622907][  T991] usb 5-1: config 0 descriptor??
[  448.651663][   T24] usb 1-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  448.695254][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  448.707040][   T24] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  448.737450][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.749252][   T24] usb 1-1: Product: syz
[  448.754428][   T24] usb 1-1: Manufacturer: syz
[  448.764726][   T24] usb 1-1: SerialNumber: syz
[  448.927007][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.999980][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'.
[  449.028242][   T24] usb 1-1: USB disconnect, device number 52
[  449.169290][  T804] usb 5-1: USB disconnect, device number 47
[  449.802425][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'.
[  449.827854][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  449.861775][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  449.963306][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  449.966586][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.972483][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  449.990547][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  450.001337][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  450.036695][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  450.059164][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  450.117731][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  450.835300][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.053052][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.076027][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.200525][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.244088][T12581] Cannot find add_set index 65532 as target
[  453.251444][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.633578][  T991] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  453.761317][ T5722] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  453.887207][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.949434][  T991] usb 5-1: Using ep0 maxpacket: 8
[  453.965297][  T991] usb 5-1: config 0 has no interfaces?
[  453.971102][ T5722] usb 1-1: Using ep0 maxpacket: 8
[  453.989386][ T5722] usb 1-1: config 0 has no interfaces?
[  454.000306][  T991] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  454.019927][ T5722] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  454.041514][  T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.052396][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.079999][  T991] usb 5-1: config 0 descriptor??
[  454.092814][ T5722] usb 1-1: config 0 descriptor??
[  454.246523][   T24] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  454.367200][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.857186][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  454.874292][   T24] usb 3-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  454.894777][   T24] usb 3-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  454.922208][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  454.938400][   T24] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  454.956518][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.973389][   T24] usb 3-1: Product: syz
[  454.982422][   T24] usb 3-1: Manufacturer: syz
[  454.992096][   T24] usb 3-1: SerialNumber: syz
[  455.133295][ T5806] usb 1-1: USB disconnect, device number 53
[  455.196263][  T991] usb 5-1: USB disconnect, device number 48
[  455.256195][T12594] __nla_validate_parse: 140 callbacks suppressed
[  455.256208][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'.
[  455.320083][   T24] usb 3-1: USB disconnect, device number 50
[  455.420657][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.464431][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.516008][  T991] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  456.688548][  T991] usb 1-1: Using ep0 maxpacket: 16
[  456.752502][  T991] usb 1-1: config 0 has no interfaces?
[  456.799198][  T991] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  456.838651][  T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  456.871107][  T991] usb 1-1: SerialNumber: syz
[  456.894027][  T991] usb 1-1: config 0 descriptor??
[  456.928545][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.420357][  T991] usb 1-1: USB disconnect, device number 54
[  457.503460][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.724893][   T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  458.147206][T12648] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1765'.
[  458.675985][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.760565][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  458.805155][   T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  458.886870][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.064734][   T24] usb 5-1: config 0 descriptor??
[  459.255604][   T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  459.474799][   T24] usb 5-1: USB disconnect, device number 49
[  459.733193][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.838329][ T5806] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  459.978448][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.999318][ T5806] usb 1-1: not running at top speed; connect to a high speed hub
[  460.018902][ T5806] usb 1-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  460.110345][ T5806] usb 1-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  460.160474][ T5806] usb 1-1: config 1 interface 0 has no altsetting 0
[  460.173100][ T5806] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  460.182664][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.194443][ T5806] usb 1-1: Product: syz
[  460.199490][ T5806] usb 1-1: Manufacturer: syz
[  460.204149][ T5806] usb 1-1: SerialNumber: syz
[  460.366570][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.430089][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1769'.
[  460.452678][ T5806] usb 1-1: USB disconnect, device number 55
[  460.710620][T12695] pim6reg: entered allmulticast mode
[  460.736799][T12695] team0: entered allmulticast mode
[  460.766898][T12695] team_slave_0: entered allmulticast mode
[  460.774971][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.783264][T12695] team_slave_1: entered allmulticast mode
[  460.792092][T12699] team0: left allmulticast mode
[  460.810703][T12699] team_slave_0: left allmulticast mode
[  460.820777][T12699] team_slave_1: left allmulticast mode
[  460.830038][T12699] pim6reg: left allmulticast mode
[  461.737045][ T5722] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  462.317172][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.461839][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  462.497980][ T5722] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  462.604548][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.844634][ T5722] usb 5-1: config 0 descriptor??
[  462.948375][ T5722] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  463.006558][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.343165][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.833976][  T991] usb 5-1: USB disconnect, device number 50
[  464.134582][T12737] FAULT_INJECTION: forcing a failure.
[  464.134582][T12737] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.148321][T12737] CPU: 0 UID: 0 PID: 12737 Comm: syz.0.1795 Not tainted syzkaller #0 PREEMPT(full) 
[  464.148344][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  464.148355][T12737] Call Trace:
[  464.148368][T12737]  <TASK>
[  464.148374][T12737]  dump_stack_lvl+0x100/0x190
[  464.148403][T12737]  should_fail_ex.cold+0x5/0xa
[  464.148429][T12737]  _copy_from_user+0x2e/0xd0
[  464.148450][T12737]  copy_msghdr_from_user+0x9f/0x4c0
[  464.148473][T12737]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  464.148505][T12737]  ___sys_sendmsg+0x106/0x1e0
[  464.148526][T12737]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.148545][T12737]  ? __lock_acquire+0x49f/0x1a40
[  464.148568][T12737]  ? get_pid_task+0x106/0x250
[  464.148611][T12737]  __sys_sendmsg+0x160/0x210
[  464.148637][T12737]  ? __pfx___sys_sendmsg+0x10/0x10
[  464.148676][T12737]  do_syscall_64+0x115/0x870
[  464.148699][T12737]  ? clear_bhb_loop+0x40/0x90
[  464.148720][T12737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.148737][T12737] RIP: 0033:0x7fb071f9ce59
[  464.148752][T12737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.148769][T12737] RSP: 002b:00007fb072f1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  464.148787][T12737] RAX: ffffffffffffffda RBX: 00007fb072215fa0 RCX: 00007fb071f9ce59
[  464.148798][T12737] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000004
[  464.148809][T12737] RBP: 00007fb072f1b090 R08: 0000000000000000 R09: 0000000000000000
[  464.148819][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.148829][T12737] R13: 00007fb072216038 R14: 00007fb072215fa0 R15: 00007ffc24fa73f8
[  464.148854][T12737]  </TASK>
[  464.366642][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.408333][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.050286][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.053163][T12765] pim6reg: entered allmulticast mode
[  466.115988][ T5713] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  466.208302][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.223415][T12768] team0: entered allmulticast mode
[  466.238899][T12768] team_slave_0: entered allmulticast mode
[  466.311151][T12768] team_slave_1: entered allmulticast mode
[  466.326128][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.353145][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.361616][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.371195][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.379941][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.390137][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.398487][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.638625][T12765] team0: left allmulticast mode
[  466.666405][T12765] team_slave_0: left allmulticast mode
[  466.680848][T12765] team_slave_1: left allmulticast mode
[  466.705909][T12765] pim6reg: left allmulticast mode
[  466.840390][ T5713] usb 2-1: not running at top speed; connect to a high speed hub
[  466.911930][ T5713] usb 2-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  466.929790][ T5713] usb 2-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  466.942831][ T5713] usb 2-1: config 1 interface 0 has no altsetting 0
[  466.957328][ T5713] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  466.966498][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.975947][ T5713] usb 2-1: Product: syz
[  466.980355][ T5713] usb 2-1: Manufacturer: syz
[  466.984968][ T5713] usb 2-1: SerialNumber: syz
[  466.992162][T12772] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1800'.
[  467.540507][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'.
[  468.850365][ T5713] usb 2-1: USB disconnect, device number 45
[  469.627630][ T5713] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  469.668093][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'.
[  469.696427][   T29] audit: type=1400 audit(1782530112.674:473): avc:  denied  { mounton } for  pid=12809 comm="syz.2.1814" path="/proc/1174/cgroup" dev="proc" ino=50442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  469.827418][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  469.851798][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.869576][ T5713] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  469.878852][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.889928][ T5713] usb 5-1: config 0 descriptor??
[  470.223121][  T991] usb 5-1: USB disconnect, device number 51
[  471.007752][T12833] FAULT_INJECTION: forcing a failure.
[  471.007752][T12833] name failslab, interval 1, probability 0, space 0, times 0
[  471.084241][T12833] CPU: 0 UID: 0 PID: 12833 Comm: syz.1.1819 Not tainted syzkaller #0 PREEMPT(full) 
[  471.084266][T12833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  471.084277][T12833] Call Trace:
[  471.084282][T12833]  <TASK>
[  471.084289][T12833]  dump_stack_lvl+0x100/0x190
[  471.084319][T12833]  should_fail_ex.cold+0x5/0xa
[  471.084344][T12833]  should_failslab+0xc2/0x120
[  471.084368][T12833]  __kmalloc_noprof+0xfc/0x820
[  471.084387][T12833]  ? rcu_is_watching+0x12/0xc0
[  471.084415][T12833]  ? tomoyo_realpath_from_path+0xb6/0x690
[  471.084445][T12833]  tomoyo_realpath_from_path+0xb6/0x690
[  471.084474][T12833]  tomoyo_path_number_perm+0x23c/0x580
[  471.084494][T12833]  ? tomoyo_path_number_perm+0x22e/0x580
[  471.084516][T12833]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  471.084561][T12833]  ? find_held_lock+0x2b/0x80
[  471.084578][T12833]  ? __fget_files+0x215/0x3d0
[  471.084595][T12833]  ? hook_file_ioctl_common+0x140/0x440
[  471.084620][T12833]  ? __fget_files+0x215/0x3d0
[  471.084642][T12833]  ? __fget_files+0x21f/0x3d0
[  471.084667][T12833]  security_file_ioctl+0xd3/0x230
[  471.084690][T12833]  __x64_sys_ioctl+0xb7/0x210
[  471.084717][T12833]  do_syscall_64+0x115/0x870
[  471.084746][T12833]  ? clear_bhb_loop+0x40/0x90
[  471.084767][T12833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.084786][T12833] RIP: 0033:0x7fa6b819ce59
[  471.084801][T12833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.084818][T12833] RSP: 002b:00007fa6b900f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  471.084836][T12833] RAX: ffffffffffffffda RBX: 00007fa6b8415fa0 RCX: 00007fa6b819ce59
[  471.084847][T12833] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  471.084858][T12833] RBP: 00007fa6b900f090 R08: 0000000000000000 R09: 0000000000000000
[  471.084868][T12833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.084878][T12833] R13: 00007fa6b8416038 R14: 00007fa6b8415fa0 R15: 00007ffc8f6d7208
[  471.084901][T12833]  </TASK>
[  471.084918][T12833] ERROR: Out of memory at tomoyo_realpath_from_path.
[  471.246644][   T24] net_ratelimit: 1022 callbacks suppressed
[  471.246658][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.367815][   T29] audit: type=1400 audit(1782530114.304:474): avc:  denied  { read } for  pid=12843 comm="syz.3.1823" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  472.139065][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.286321][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.446071][   T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  472.607678][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.639877][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.726116][   T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  472.747816][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.801841][   T24] usb 5-1: config 0 descriptor??
[  473.035175][   T24] usb 5-1: USB disconnect, device number 52
[  473.326409][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.367427][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.934571][T12922] FAULT_INJECTION: forcing a failure.
[  474.934571][T12922] name failslab, interval 1, probability 0, space 0, times 0
[  474.981773][T12922] CPU: 0 UID: 0 PID: 12922 Comm: syz.1.1846 Not tainted syzkaller #0 PREEMPT(full) 
[  474.981798][T12922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  474.981808][T12922] Call Trace:
[  474.981814][T12922]  <TASK>
[  474.981821][T12922]  dump_stack_lvl+0x100/0x190
[  474.981853][T12922]  should_fail_ex.cold+0x5/0xa
[  474.981879][T12922]  should_failslab+0xc2/0x120
[  474.981904][T12922]  __kmalloc_cache_noprof+0x91/0x6c0
[  474.981933][T12922]  ? __vb2_init_fileio+0x18f/0x1000
[  474.981960][T12922]  __vb2_init_fileio+0x18f/0x1000
[  474.981982][T12922]  ? __lock_acquire+0x49f/0x1a40
[  474.982010][T12922]  __vb2_perform_fileio+0x9ba/0x1380
[  474.982038][T12922]  ? __pfx___vb2_perform_fileio+0x10/0x10
[  474.982060][T12922]  ? get_pid_task+0xfc/0x250
[  474.982083][T12922]  vb2_fop_read+0x211/0x520
[  474.982107][T12922]  v4l2_read+0x229/0x2c0
[  474.982125][T12922]  ? __pfx_v4l2_read+0x10/0x10
[  474.982142][T12922]  vfs_read+0x1e4/0xb40
[  474.982173][T12922]  ? __pfx_vfs_read+0x10/0x10
[  474.982198][T12922]  ? find_held_lock+0x2b/0x80
[  474.982214][T12922]  ? __fget_files+0x215/0x3d0
[  474.982231][T12922]  ? __fget_files+0x215/0x3d0
[  474.982252][T12922]  ? __fget_files+0x21f/0x3d0
[  474.982276][T12922]  ksys_read+0x12a/0x250
[  474.982301][T12922]  ? __pfx_ksys_read+0x10/0x10
[  474.982334][T12922]  do_syscall_64+0x115/0x870
[  474.982358][T12922]  ? clear_bhb_loop+0x40/0x90
[  474.982379][T12922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.982398][T12922] RIP: 0033:0x7fa6b819ce59
[  474.982413][T12922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.982430][T12922] RSP: 002b:00007fa6b900f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  474.982448][T12922] RAX: ffffffffffffffda RBX: 00007fa6b8415fa0 RCX: 00007fa6b819ce59
[  474.982460][T12922] RDX: 00000000fffffdfc RSI: 0000200000008180 RDI: 0000000000000004
[  474.982471][T12922] RBP: 00007fa6b900f090 R08: 0000000000000000 R09: 0000000000000000
[  474.982482][T12922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.982492][T12922] R13: 00007fa6b8416038 R14: 00007fa6b8415fa0 R15: 00007ffc8f6d7208
[  474.982517][T12922]  </TASK>
[  475.207713][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.406771][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.596210][ T5806] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  475.706113][ T5737] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  475.765275][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.839434][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.850242][ T5806] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  475.869769][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.887576][ T5737] usb 4-1: Using ep0 maxpacket: 8
[  475.908393][ T5737] usb 4-1: config 0 has no interfaces?
[  475.914104][ T5737] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  475.931586][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.000792][ T5806] usb 2-1: config 0 descriptor??
[  476.031685][ T5737] usb 4-1: config 0 descriptor??
[  476.365507][ T5737] usb 4-1: USB disconnect, device number 62
[  476.381304][ T5806] usb 2-1: USB disconnect, device number 46
[  476.446524][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.744891][   T29] audit: type=1400 audit(1782530119.714:475): avc:  denied  { ioctl } for  pid=12950 comm="syz.2.1855" path="socket:[51719]" dev="sockfs" ino=51719 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  476.781294][   T29] audit: type=1400 audit(1782530119.754:476): avc:  denied  { load_policy } for  pid=12950 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  476.782884][T12955] FAULT_INJECTION: forcing a failure.
[  476.782884][T12955] name failslab, interval 1, probability 0, space 0, times 0
[  476.818425][T12955] CPU: 0 UID: 0 PID: 12955 Comm: syz.0.1856 Not tainted syzkaller #0 PREEMPT(full) 
[  476.818449][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  476.818460][T12955] Call Trace:
[  476.818466][T12955]  <TASK>
[  476.818473][T12955]  dump_stack_lvl+0x100/0x190
[  476.818500][T12955]  should_fail_ex.cold+0x5/0xa
[  476.818524][T12955]  should_failslab+0xc2/0x120
[  476.818548][T12955]  __kmalloc_noprof+0xfc/0x820
[  476.818567][T12955]  ? rcu_is_watching+0x12/0xc0
[  476.818593][T12955]  ? tomoyo_realpath_from_path+0xb6/0x690
[  476.818623][T12955]  tomoyo_realpath_from_path+0xb6/0x690
[  476.818652][T12955]  tomoyo_path_number_perm+0x23c/0x580
[  476.818671][T12955]  ? tomoyo_path_number_perm+0x22e/0x580
[  476.818692][T12955]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  476.818736][T12955]  ? find_held_lock+0x2b/0x80
[  476.818752][T12955]  ? __fget_files+0x215/0x3d0
[  476.818768][T12955]  ? hook_file_ioctl_common+0x140/0x440
[  476.818794][T12955]  ? __fget_files+0x215/0x3d0
[  476.818815][T12955]  ? __fget_files+0x21f/0x3d0
[  476.818836][T12955]  security_file_ioctl+0xd3/0x230
[  476.818859][T12955]  __x64_sys_ioctl+0xb7/0x210
[  476.818885][T12955]  do_syscall_64+0x115/0x870
[  476.818906][T12955]  ? clear_bhb_loop+0x40/0x90
[  476.818924][T12955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.818939][T12955] RIP: 0033:0x7fb071f9ce59
[  476.818953][T12955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.818966][T12955] RSP: 002b:00007fb072f1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  476.818983][T12955] RAX: ffffffffffffffda RBX: 00007fb072215fa0 RCX: 00007fb071f9ce59
[  476.818992][T12955] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003
[  476.819000][T12955] RBP: 00007fb072f1b090 R08: 0000000000000000 R09: 0000000000000000
[  476.819009][T12955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.819017][T12955] R13: 00007fb072216038 R14: 00007fb072215fa0 R15: 00007ffc24fa73f8
[  476.819038][T12955]  </TASK>
[  476.819060][T12955] ERROR: Out of memory at tomoyo_realpath_from_path.
[  476.826107][T12951] SELinux: failed to load policy
[  476.830456][T12955] loop5: detected capacity change from 0 to 7
[  476.860150][   T29] audit: type=1400 audit(1782530119.754:477): avc:  denied  { append } for  pid=12954 comm="syz.0.1856" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  476.911064][T12955] Dev loop5: unable to read RDB block 7
[  477.071249][T12955]  loop5: AHDI p1
[  477.075051][T12955] loop5: partition table partially beyond EOD, truncated
[  477.291658][T12962] pim6reg: entered allmulticast mode
[  477.315707][T12962] pim6reg: left allmulticast mode
[  477.486292][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.298182][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.125959][T12976] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1860'.
[  479.570540][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.004666][   T29] audit: type=1400 audit(1782530122.954:478): avc:  denied  { connect } for  pid=13001 comm="syz.2.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  480.469363][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.364807][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.486896][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.602423][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.827301][T13035] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1879'.
[  483.006670][  T991] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  483.076126][ T5722] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  483.548804][T13051] Invalid source name
[  483.556035][T13051] UBIFS error (pid: 13051): cannot open "./file0", error -22
[  483.563309][   T29] audit: type=1400 audit(1782530126.524:479): avc:  denied  { mounton } for  pid=13050 comm="syz.0.1881" path="/380/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  483.647197][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.714529][  T991] usb 3-1: not running at top speed; connect to a high speed hub
[  483.733447][  T991] usb 3-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  483.745669][  T991] usb 3-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  483.759123][ T5722] usb 2-1: Using ep0 maxpacket: 32
[  483.765424][  T991] usb 3-1: config 1 interface 0 has no altsetting 0
[  483.779098][ T5722] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  483.791042][  T991] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  483.800448][ T5722] usb 2-1: config 0 has no interface number 0
[  483.806593][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.815204][  T991] usb 3-1: Product: syz
[  483.820997][ T5722] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  483.830636][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.839669][  T991] usb 3-1: Manufacturer: syz
[  483.844451][  T991] usb 3-1: SerialNumber: syz
[  483.849976][ T5722] usb 2-1: Product: syz
[  483.880368][ T5722] usb 2-1: Manufacturer: syz
[  483.955392][ T5722] usb 2-1: SerialNumber: syz
[  483.962885][ T5722] usb 2-1: config 0 descriptor??
[  483.974750][ T5722] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  484.199099][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'.
[  484.222540][  T991] usb 3-1: USB disconnect, device number 51
[  484.366232][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.488447][ T5722] usb 2-1: qt2_attach - failed to power on unit: -71
[  484.504985][ T5722] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  484.527680][ T5722] usb 2-1: USB disconnect, device number 47
[  484.676025][ T5737] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  484.697481][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.867295][ T5737] usb 4-1: not running at top speed; connect to a high speed hub
[  484.926337][ T5737] usb 4-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  484.958709][T13068] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1885'.
[  485.030846][ T5737] usb 4-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  485.069318][ T5737] usb 4-1: config 1 interface 0 has no altsetting 0
[  485.364212][ T5737] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  485.375310][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.385646][ T5737] usb 4-1: Product: syz
[  485.390747][ T5737] usb 4-1: Manufacturer: syz
[  485.396694][ T5737] usb 4-1: SerialNumber: syz
[  485.730589][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.001735][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1884'.
[  486.077092][ T5737] usb 4-1: USB disconnect, device number 63
[  486.246808][ T5723] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  486.361660][T13087] pim6reg: entered allmulticast mode
[  486.380712][T13087] pim6reg: left allmulticast mode
[  486.439358][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.466003][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  486.476099][ T5723] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  486.485499][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.498521][ T5723] usb 2-1: config 0 descriptor??
[  486.766301][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.810286][T13090] FAULT_INJECTION: forcing a failure.
[  486.810286][T13090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  486.861992][T13090] CPU: 1 UID: 0 PID: 13090 Comm: syz.3.1892 Not tainted syzkaller #0 PREEMPT(full) 
[  486.862016][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  486.862026][T13090] Call Trace:
[  486.862032][T13090]  <TASK>
[  486.862039][T13090]  dump_stack_lvl+0x100/0x190
[  486.862066][T13090]  should_fail_ex.cold+0x5/0xa
[  486.862089][T13090]  _copy_from_user+0x2e/0xd0
[  486.862107][T13090]  copy_msghdr_from_user+0x9f/0x4c0
[  486.862129][T13090]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  486.862160][T13090]  ___sys_sendmsg+0x106/0x1e0
[  486.862180][T13090]  ? __pfx____sys_sendmsg+0x10/0x10
[  486.862197][T13090]  ? __lock_acquire+0x49f/0x1a40
[  486.862218][T13090]  ? get_pid_task+0x106/0x250
[  486.862258][T13090]  __sys_sendmsg+0x160/0x210
[  486.862283][T13090]  ? __pfx___sys_sendmsg+0x10/0x10
[  486.862320][T13090]  do_syscall_64+0x115/0x870
[  486.862341][T13090]  ? clear_bhb_loop+0x40/0x90
[  486.862361][T13090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.862377][T13090] RIP: 0033:0x7f685d19ce59
[  486.862391][T13090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.862406][T13090] RSP: 002b:00007f685e111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  486.862422][T13090] RAX: ffffffffffffffda RBX: 00007f685d415fa0 RCX: 00007f685d19ce59
[  486.862432][T13090] RDX: 0000000000002000 RSI: 00002000000004c0 RDI: 0000000000000003
[  486.862442][T13090] RBP: 00007f685e111090 R08: 0000000000000000 R09: 0000000000000000
[  486.862452][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.862460][T13090] R13: 00007f685d416038 R14: 00007f685d415fa0 R15: 00007fffcea39088
[  486.862483][T13090]  </TASK>
[  487.073985][T13092] FAULT_INJECTION: forcing a failure.
[  487.073985][T13092] name failslab, interval 1, probability 0, space 0, times 0
[  487.106161][ T5723] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  487.132987][ T5723] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  487.145727][T13092] CPU: 0 UID: 0 PID: 13092 Comm: syz.4.1893 Not tainted syzkaller #0 PREEMPT(full) 
[  487.145743][T13092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  487.145750][T13092] Call Trace:
[  487.145753][T13092]  <TASK>
[  487.145757][T13092]  dump_stack_lvl+0x100/0x190
[  487.145775][T13092]  should_fail_ex.cold+0x5/0xa
[  487.145791][T13092]  should_failslab+0xc2/0x120
[  487.145805][T13092]  __kmalloc_noprof+0xfc/0x820
[  487.145819][T13092]  ? rcu_is_watching+0x12/0xc0
[  487.145837][T13092]  ? tomoyo_realpath_from_path+0xb6/0x690
[  487.145868][T13092]  tomoyo_realpath_from_path+0xb6/0x690
[  487.145894][T13092]  tomoyo_path_number_perm+0x23c/0x580
[  487.145913][T13092]  ? tomoyo_path_number_perm+0x22e/0x580
[  487.145933][T13092]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  487.145973][T13092]  ? find_held_lock+0x2b/0x80
[  487.145984][T13092]  ? __fget_files+0x215/0x3d0
[  487.145994][T13092]  ? hook_file_ioctl_common+0x140/0x440
[  487.146009][T13092]  ? __fget_files+0x215/0x3d0
[  487.146022][T13092]  ? __fget_files+0x21f/0x3d0
[  487.146034][T13092]  security_file_ioctl+0xd3/0x230
[  487.146048][T13092]  __x64_sys_ioctl+0xb7/0x210
[  487.146065][T13092]  do_syscall_64+0x115/0x870
[  487.146079][T13092]  ? clear_bhb_loop+0x40/0x90
[  487.146093][T13092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.146103][T13092] RIP: 0033:0x7f393f39ce59
[  487.146113][T13092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.146123][T13092] RSP: 002b:00007f3940333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  487.146134][T13092] RAX: ffffffffffffffda RBX: 00007f393f615fa0 RCX: 00007f393f39ce59
[  487.146141][T13092] RDX: 0000000000000000 RSI: 000000000000560f RDI: 0000000000000004
[  487.146146][T13092] RBP: 00007f3940333090 R08: 0000000000000000 R09: 0000000000000000
[  487.146152][T13092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.146158][T13092] R13: 00007f393f616038 R14: 00007f393f615fa0 R15: 00007ffc6da54308
[  487.146171][T13092]  </TASK>
[  487.366504][T13092] ERROR: Out of memory at tomoyo_realpath_from_path.
[  487.373342][ T5806] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  487.407576][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.456655][ T5723] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE
[  487.558058][ T5806] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  487.575019][ T5806] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  487.596021][ T5806] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.596052][ T5806] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.597802][ T5806] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  487.597827][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.597846][ T5806] usb 4-1: Product: syz
[  487.597859][ T5806] usb 4-1: Manufacturer: syz
[  487.597873][ T5806] usb 4-1: SerialNumber: syz
[  487.663515][ T5723] cp2112 0003:10C4:EA90.0014: error requesting SMBus config
[  487.665296][ T5723] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -5
[  487.807163][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.862229][   T29] audit: type=1400 audit(1782530130.834:480): avc:  denied  { mounton } for  pid=13093 comm="syz.3.1894" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  487.928784][ T5723] usb 2-1: USB disconnect, device number 48
[  487.977419][ T5806] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  487.984522][ T5806] cdc_ncm 4-1:1.0: bind() failure
[  488.017594][ T5806] usbtest 4-1:1.0: Linux gadget zero
[  488.023150][ T5806] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt)
[  488.193048][ T5806] usb 4-1: USB disconnect, device number 64
[  488.316143][T13115] Cannot find set identified by id 0 to match
[  488.980333][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.168067][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.296379][T13137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13137 comm=syz.0.1907
[  489.856004][ T5737] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  490.047109][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.099706][T13151] FAULT_INJECTION: forcing a failure.
[  490.099706][T13151] name failslab, interval 1, probability 0, space 0, times 0
[  490.255837][T13151] CPU: 1 UID: 0 PID: 13151 Comm: syz.2.1910 Not tainted syzkaller #0 PREEMPT(full) 
[  490.255862][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  490.255875][T13151] Call Trace:
[  490.255880][T13151]  <TASK>
[  490.255886][T13151]  dump_stack_lvl+0x100/0x190
[  490.255915][T13151]  should_fail_ex.cold+0x5/0xa
[  490.255940][T13151]  should_failslab+0xc2/0x120
[  490.255963][T13151]  kmem_cache_alloc_noprof+0x91/0x6a0
[  490.255982][T13151]  ? do_raw_spin_unlock+0x145/0x1e0
[  490.256002][T13151]  ? vm_area_dup+0x27/0x8e0
[  490.256026][T13151]  vm_area_dup+0x27/0x8e0
[  490.256047][T13151]  __split_vma+0x18c/0xda0
[  490.256072][T13151]  ? __pfx___split_vma+0x10/0x10
[  490.256100][T13151]  ? lock_acquire+0x1b9/0x370
[  490.256119][T13151]  vms_gather_munmap_vmas+0x1d2/0x1720
[  490.256146][T13151]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  490.256169][T13151]  ? lapic_next_event+0x10/0x20
[  490.256188][T13151]  ? clockevents_program_event+0x1ef/0x820
[  490.256212][T13151]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  490.256233][T13151]  ? __pfx_clockevents_program_event+0x10/0x10
[  490.256254][T13151]  ? timerqueue_linked_add+0x260/0x430
[  490.256279][T13151]  do_vmi_align_munmap+0x287/0x5f0
[  490.256294][T13151]  ? find_held_lock+0x2b/0x80
[  490.256307][T13151]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  490.256348][T13151]  do_vmi_munmap+0x1f8/0x3e0
[  490.256364][T13151]  do_munmap+0xba/0x100
[  490.256382][T13151]  ? __pfx_do_munmap+0x10/0x10
[  490.256405][T13151]  ? mremap_to+0xba/0x4c0
[  490.256421][T13151]  mremap_to+0x2b3/0x4c0
[  490.256434][T13151]  ? __pfx_mremap_to+0x10/0x10
[  490.256447][T13151]  ? check_prep_vma+0x912/0xe60
[  490.256468][T13151]  __do_sys_mremap+0xb3e/0x1850
[  490.256486][T13151]  ? rcu_read_lock_any_held+0x6a/0xa0
[  490.256499][T13151]  ? find_held_lock+0x2b/0x80
[  490.256511][T13151]  ? __pfx___do_sys_mremap+0x10/0x10
[  490.256524][T13151]  ? ksys_write+0x190/0x250
[  490.256552][T13151]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  490.256575][T13151]  ? __fget_files+0x21f/0x3d0
[  490.256602][T13151]  do_syscall_64+0x115/0x870
[  490.256619][T13151]  ? clear_bhb_loop+0x40/0x90
[  490.256635][T13151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.256648][T13151] RIP: 0033:0x7fd12999ce59
[  490.256660][T13151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.256674][T13151] RSP: 002b:00007fd12a839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  490.256688][T13151] RAX: ffffffffffffffda RBX: 00007fd129c16090 RCX: 00007fd12999ce59
[  490.256697][T13151] RDX: 0000000000004000 RSI: 0000000000001000 RDI: 0000200000ffe000
[  490.256709][T13151] RBP: 00007fd12a839090 R08: 0000200000ff9000 R09: 0000000000000000
[  490.256717][T13151] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  490.256725][T13151] R13: 00007fd129c16128 R14: 00007fd129c16090 R15: 00007ffc84f2bdf8
[  490.256744][T13151]  </TASK>
[  490.567824][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.656940][ T5737] usb 2-1: not running at top speed; connect to a high speed hub
[  490.665752][ T5737] usb 2-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  490.679412][ T5737] usb 2-1: config 1 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  490.692612][ T5737] usb 2-1: config 1 interface 0 has no altsetting 0
[  490.705854][ T5737] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  490.714974][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.723059][ T5737] usb 2-1: Product: syz
[  490.727269][ T5737] usb 2-1: Manufacturer: syz
[  490.731870][ T5737] usb 2-1: SerialNumber: syz
[  490.838391][ T5722] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  491.066198][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'.
[  491.082747][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  491.097199][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.110652][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.125246][ T5722] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  491.136565][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.158090][ T5737] usb 2-1: USB disconnect, device number 49
[  491.159135][ T5722] usb 5-1: config 0 descriptor??
[  491.619454][ T5722] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[  491.641337][ T5722] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  491.810969][ T5722] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE
[  492.024698][ T5722] cp2112 0003:10C4:EA90.0015: error requesting SMBus config
[  492.385495][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.420225][ T5722] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -5
[  492.432412][ T5722] usb 5-1: USB disconnect, device number 53
[  492.654618][T13195] Invalid ELF header type: 3 != 1
[  492.666631][T13195] FAULT_INJECTION: forcing a failure.
[  492.666631][T13195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  492.679752][T13195] CPU: 1 UID: 0 PID: 13195 Comm: syz.2.1921 Not tainted syzkaller #0 PREEMPT(full) 
[  492.679777][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  492.679788][T13195] Call Trace:
[  492.679795][T13195]  <TASK>
[  492.679802][T13195]  dump_stack_lvl+0x100/0x190
[  492.679830][T13195]  should_fail_ex.cold+0x5/0xa
[  492.679855][T13195]  _copy_from_user+0x2e/0xd0
[  492.679875][T13195]  copy_clone_args_from_user+0x152/0x7d0
[  492.679904][T13195]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  492.679925][T13195]  ? lockdep_hardirqs_on+0x78/0x100
[  492.679955][T13195]  ? ksys_write+0x190/0x250
[  492.679986][T13195]  __do_sys_clone3+0xbf/0x290
[  492.680011][T13195]  ? __pfx___do_sys_clone3+0x10/0x10
[  492.680045][T13195]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  492.680076][T13195]  ? __fget_files+0x21f/0x3d0
[  492.680115][T13195]  do_syscall_64+0x115/0x870
[  492.680136][T13195]  ? clear_bhb_loop+0x40/0x90
[  492.680158][T13195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.680175][T13195] RIP: 0033:0x7fd12999ce59
[  492.680191][T13195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.680207][T13195] RSP: 002b:00007fd12a817ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  492.680224][T13195] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd12999ce59
[  492.680236][T13195] RDX: 00007fd12a817f10 RSI: 0000000000000058 RDI: 00007fd12a817f10
[  492.680247][T13195] RBP: 00007fd12a818090 R08: 0000000000000000 R09: 0000000000000058
[  492.680257][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.680267][T13195] R13: 00007fd129c16218 R14: 00007fd129c16180 R15: 00007ffc84f2bdf8
[  492.680291][T13195]  </TASK>
[  492.903571][   T29] audit: type=1400 audit(1782530135.874:481): avc:  denied  { write } for  pid=13196 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  492.949642][   T29] audit: type=1400 audit(1782530135.914:482): avc:  denied  { read } for  pid=13196 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  492.969667][   T29] audit: type=1400 audit(1782530135.914:483): avc:  denied  { bind } for  pid=13196 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  493.050856][   T29] audit: type=1400 audit(1782530136.024:484): avc:  denied  { getopt } for  pid=13201 comm="syz.0.1924" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  493.513270][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.524738][   T29] audit: type=1400 audit(1782530136.504:485): avc:  denied  { create } for  pid=13212 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  493.612655][T13219] FAULT_INJECTION: forcing a failure.
[  493.612655][T13219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.624366][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  493.634648][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  493.636796][T13219] CPU: 0 UID: 0 PID: 13219 Comm: syz.2.1930 Not tainted syzkaller #0 PREEMPT(full) 
[  493.636817][T13219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  493.636826][T13219] Call Trace:
[  493.636831][T13219]  <TASK>
[  493.636837][T13219]  dump_stack_lvl+0x100/0x190
[  493.636862][T13219]  should_fail_ex.cold+0x5/0xa
[  493.636885][T13219]  _copy_from_user+0x2e/0xd0
[  493.636902][T13219]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[  493.636922][T13219]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  493.636946][T13219]  do_sock_getsockopt+0x530/0x6e0
[  493.636962][T13219]  ? __lock_acquire+0x49f/0x1a40
[  493.636985][T13219]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  493.637001][T13219]  ? rcu_read_lock_any_held+0x6a/0xa0
[  493.637022][T13219]  ? find_held_lock+0x2b/0x80
[  493.637042][T13219]  ? __fget_files+0x21f/0x3d0
[  493.637063][T13219]  __sys_getsockopt+0x148/0x260
[  493.637090][T13219]  ? __x64_sys_getsockopt+0xbd/0x160
[  493.637110][T13219]  __x64_sys_getsockopt+0xbd/0x160
[  493.637130][T13219]  ? do_syscall_64+0x90/0x870
[  493.637149][T13219]  ? lockdep_hardirqs_on+0x78/0x100
[  493.637168][T13219]  do_syscall_64+0x115/0x870
[  493.637185][T13219]  ? clear_bhb_loop+0x40/0x90
[  493.637203][T13219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.637219][T13219] RIP: 0033:0x7fd12999ce59
[  493.637232][T13219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.637246][T13219] RSP: 002b:00007fd12a85a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  493.637262][T13219] RAX: ffffffffffffffda RBX: 00007fd129c15fa0 RCX: 00007fd12999ce59
[  493.637272][T13219] RDX: 00000000000000d2 RSI: 0000000000000029 RDI: 0000000000000003
[  493.637281][T13219] RBP: 00007fd12a85a090 R08: 0000000000000000 R09: 0000000000000000
[  493.637291][T13219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.637300][T13219] R13: 00007fd129c16038 R14: 00007fd129c15fa0 R15: 00007ffc84f2bdf8
[  493.637321][T13219]  </TASK>
[  493.656320][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.664081][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  493.692715][T13221] FAULT_INJECTION: forcing a failure.
[  493.692715][T13221] name failslab, interval 1, probability 0, space 0, times 0
[  493.697678][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  493.698089][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  493.728918][T13221] CPU: 0 UID: 0 PID: 13221 Comm: syz.2.1932 Not tainted syzkaller #0 PREEMPT(full) 
[  493.728942][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  493.728958][T13221] Call Trace:
[  493.728964][T13221]  <TASK>
[  493.728970][T13221]  dump_stack_lvl+0x100/0x190
[  493.728995][T13221]  should_fail_ex.cold+0x5/0xa
[  493.729016][T13221]  should_failslab+0xc2/0x120
[  493.729037][T13221]  __kmalloc_noprof+0xfc/0x820
[  493.729053][T13221]  ? rcu_is_watching+0x12/0xc0
[  493.729076][T13221]  ? tomoyo_realpath_from_path+0xb6/0x690
[  493.729102][T13221]  tomoyo_realpath_from_path+0xb6/0x690
[  493.729127][T13221]  tomoyo_path_number_perm+0x23c/0x580
[  493.729144][T13221]  ? tomoyo_path_number_perm+0x22e/0x580
[  493.729162][T13221]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  493.729200][T13221]  ? find_held_lock+0x2b/0x80
[  493.729214][T13221]  ? __fget_files+0x215/0x3d0
[  493.729229][T13221]  ? hook_file_ioctl_common+0x140/0x440
[  493.729250][T13221]  ? __fget_files+0x215/0x3d0
[  493.729269][T13221]  ? __fget_files+0x21f/0x3d0
[  493.729287][T13221]  security_file_ioctl+0xd3/0x230
[  493.729307][T13221]  __x64_sys_ioctl+0xb7/0x210
[  493.729330][T13221]  do_syscall_64+0x115/0x870
[  493.729348][T13221]  ? clear_bhb_loop+0x40/0x90
[  493.729367][T13221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.729382][T13221] RIP: 0033:0x7fd12999ce59
[  493.729396][T13221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.729411][T13221] RSP: 002b:00007fd12a85a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  493.729427][T13221] RAX: ffffffffffffffda RBX: 00007fd129c15fa0 RCX: 00007fd12999ce59
[  493.729437][T13221] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  493.729446][T13221] RBP: 00007fd12a85a090 R08: 0000000000000000 R09: 0000000000000000
[  493.729455][T13221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.729464][T13221] R13: 00007fd129c16038 R14: 00007fd129c15fa0 R15: 00007ffc84f2bdf8
[  493.729485][T13221]  </TASK>
[  493.729492][T13221] ERROR: Out of memory at tomoyo_realpath_from_path.
[  493.733789][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  493.734205][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  493.786108][T13221] comedi comedi3: c6xdigio: I/O base address not correctly aligned
[  493.794531][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  493.804534][T13222] Cannot find set identified by id 0 to match
[  493.811544][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  494.452839][   T29] audit: type=1400 audit(1782530137.414:486): avc:  denied  { ioctl } for  pid=13239 comm="syz.4.1936" path="socket:[53644]" dev="sockfs" ino=53644 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  494.530455][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.583470][T13240] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  494.590125][T13240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  494.623146][T13244] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8)
[  494.625290][   T29] audit: type=1400 audit(1782530137.584:487): avc:  denied  { setopt } for  pid=13239 comm="syz.4.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  494.629690][T13244] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  494.661763][T13244] vhci_hcd vhci_hcd.0: Device attached
[  494.673176][T13240] vhci_hcd vhci_hcd.0: Device attached
[  494.696478][   T29] audit: type=1400 audit(1782530137.644:488): avc:  denied  { connect } for  pid=13212 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  494.697381][T13243] vhci_hcd: connection closed
[  494.716617][T13245] vhci_hcd: connection closed
[  494.737794][ T5879] vhci_hcd vhci_hcd.4: stop threads
[  494.751137][   T29] audit: type=1400 audit(1782530137.724:489): avc:  denied  { kexec_image_load } for  pid=13251 comm="syz.3.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  494.774879][ T5879] vhci_hcd vhci_hcd.4: release socket
[  494.780964][ T5879] vhci_hcd vhci_hcd.4: disconnect device
[  494.792236][ T5879] vhci_hcd vhci_hcd.4: stop threads
[  494.842642][ T5879] vhci_hcd vhci_hcd.4: release socket
[  494.857620][ T5879] vhci_hcd vhci_hcd.4: disconnect device
[  495.090379][T13268] FAULT_INJECTION: forcing a failure.
[  495.090379][T13268] name failslab, interval 1, probability 0, space 0, times 0
[  495.103251][T13268] CPU: 1 UID: 0 PID: 13268 Comm: syz.2.1939 Not tainted syzkaller #0 PREEMPT(full) 
[  495.103276][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  495.103286][T13268] Call Trace:
[  495.103293][T13268]  <TASK>
[  495.103300][T13268]  dump_stack_lvl+0x100/0x190
[  495.103331][T13268]  should_fail_ex.cold+0x5/0xa
[  495.103356][T13268]  should_failslab+0xc2/0x120
[  495.103380][T13268]  __kmalloc_cache_noprof+0x91/0x6c0
[  495.103409][T13268]  ? drm_atomic_commit_alloc+0xb8/0x120
[  495.103442][T13268]  drm_atomic_commit_alloc+0xb8/0x120
[  495.103470][T13268]  drm_client_modeset_commit_atomic+0xcc/0x7e0
[  495.103491][T13268]  ? trace_contention_end+0x126/0x160
[  495.103517][T13268]  ? __mutex_lock+0x26d/0x1bd0
[  495.103542][T13268]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  495.103567][T13268]  ? drm_master_internal_acquire+0x21/0x80
[  495.103610][T13268]  drm_client_modeset_commit_locked+0x14d/0x580
[  495.103634][T13268]  drm_client_modeset_commit+0x4f/0x80
[  495.103655][T13268]  __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160
[  495.103688][T13268]  drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0
[  495.103720][T13268]  drm_fbdev_client_restore+0x1b/0x30
[  495.103745][T13268]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  495.103769][T13268]  drm_client_dev_restore+0x205/0x2a0
[  495.103794][T13268]  drm_release+0x2c6/0x360
[  495.103812][T13268]  ? __pfx_drm_release+0x10/0x10
[  495.103829][T13268]  __fput+0x3ff/0xb50
[  495.103857][T13268]  fput_close_sync+0x118/0x250
[  495.103879][T13268]  ? __pfx_fput_close_sync+0x10/0x10
[  495.103909][T13268]  __x64_sys_close+0x8b/0x120
[  495.103933][T13268]  do_syscall_64+0x115/0x870
[  495.103954][T13268]  ? clear_bhb_loop+0x40/0x90
[  495.103976][T13268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.103994][T13268] RIP: 0033:0x7fd12999ce59
[  495.104009][T13268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  495.104025][T13268] RSP: 002b:00007fd12a818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  495.104043][T13268] RAX: ffffffffffffffda RBX: 00007fd129c16180 RCX: 00007fd12999ce59
[  495.104054][T13268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  495.104064][T13268] RBP: 00007fd12a818090 R08: 0000000000000000 R09: 0000000000000000
[  495.104074][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  495.104084][T13268] R13: 00007fd129c16218 R14: 00007fd129c16180 R15: 00007ffc84f2bdf8
[  495.104109][T13268]  </TASK>
[  495.970705][   T29] audit: type=1400 audit(1782530138.054:490): avc:  denied  { append } for  pid=13259 comm="syz.2.1939" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  495.994020][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.297912][T13274] __nla_validate_parse: 140 callbacks suppressed
[  496.297931][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1942'.
[  496.766898][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.849248][T13291] Invalid ELF header type: 3 != 1
[  496.896170][ T5806] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  497.006755][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.067333][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.078402][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.088569][ T5806] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  497.101246][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.119290][ T5806] usb 5-1: config 0 descriptor??
[  497.360691][T13307] misc userio: The device must be registered before sending interrupts
[  497.739189][ T5806] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  497.773518][ T5806] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  498.037190][ T5806] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE
[  498.051560][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.251761][ T5806] cp2112 0003:10C4:EA90.0016: error requesting SMBus config
[  498.601278][ T5806] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -5
[  498.693657][ T5806] usb 5-1: USB disconnect, device number 54
[  499.207439][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.248343][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.278033][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.286748][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.295359][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.324289][T13315] fido_id[13315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  499.811037][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.349304][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.391983][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1958'.
[  500.486287][ T5723] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  500.678298][T13347] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1957'.
[  500.796005][ T5723] usb 5-1: Using ep0 maxpacket: 8
[  500.803824][ T5723] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  500.812170][ T5723] usb 5-1: config 0 has no interface number 0
[  500.822162][T13352] FAULT_INJECTION: forcing a failure.
[  500.822162][T13352] name failslab, interval 1, probability 0, space 0, times 0
[  500.845453][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  500.880468][T13352] CPU: 1 UID: 0 PID: 13352 Comm: syz.3.1962 Not tainted syzkaller #0 PREEMPT(full) 
[  500.880490][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  500.880499][T13352] Call Trace:
[  500.880503][T13352]  <TASK>
[  500.880509][T13352]  dump_stack_lvl+0x100/0x190
[  500.880532][T13352]  should_fail_ex.cold+0x5/0xa
[  500.880552][T13352]  should_failslab+0xc2/0x120
[  500.880571][T13352]  __kmalloc_noprof+0xfc/0x820
[  500.880586][T13352]  ? rcu_is_watching+0x12/0xc0
[  500.880607][T13352]  ? tomoyo_realpath_from_path+0xb6/0x690
[  500.880631][T13352]  tomoyo_realpath_from_path+0xb6/0x690
[  500.880654][T13352]  tomoyo_path_number_perm+0x23c/0x580
[  500.880669][T13352]  ? tomoyo_path_number_perm+0x22e/0x580
[  500.880686][T13352]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  500.880723][T13352]  ? find_held_lock+0x2b/0x80
[  500.880735][T13352]  ? __fget_files+0x215/0x3d0
[  500.880748][T13352]  ? hook_file_ioctl_common+0x140/0x440
[  500.880769][T13352]  ? __fget_files+0x215/0x3d0
[  500.880786][T13352]  ? __fget_files+0x21f/0x3d0
[  500.880803][T13352]  security_file_ioctl+0xd3/0x230
[  500.880822][T13352]  __x64_sys_ioctl+0xb7/0x210
[  500.880843][T13352]  do_syscall_64+0x115/0x870
[  500.880861][T13352]  ? clear_bhb_loop+0x40/0x90
[  500.880878][T13352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.880893][T13352] RIP: 0033:0x7f685d19ce59
[  500.880906][T13352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.880920][T13352] RSP: 002b:00007f685e111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  500.880934][T13352] RAX: ffffffffffffffda RBX: 00007f685d415fa0 RCX: 00007f685d19ce59
[  500.880943][T13352] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003
[  500.880951][T13352] RBP: 00007f685e111090 R08: 0000000000000000 R09: 0000000000000000
[  500.880959][T13352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.880967][T13352] R13: 00007f685d416038 R14: 00007f685d415fa0 R15: 00007fffcea39088
[  500.880998][T13352]  </TASK>
[  500.881013][T13352] ERROR: Out of memory at tomoyo_realpath_from_path.
[  500.882788][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  501.191352][T13358] FAULT_INJECTION: forcing a failure.
[  501.191352][T13358] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.207023][T13341] syz.1.1960 (13341) used greatest stack depth: 19232 bytes left
[  501.214776][T13358] CPU: 1 UID: 0 PID: 13358 Comm: syz.0.1964 Not tainted syzkaller #0 PREEMPT(full) 
[  501.214803][T13358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  501.214812][T13358] Call Trace:
[  501.214817][T13358]  <TASK>
[  501.214823][T13358]  dump_stack_lvl+0x100/0x190
[  501.214848][T13358]  should_fail_ex.cold+0x5/0xa
[  501.214868][T13358]  _copy_to_user+0x32/0xd0
[  501.214885][T13358]  simple_read_from_buffer+0xcb/0x170
[  501.214902][T13358]  proc_fail_nth_read+0x1af/0x230
[  501.214923][T13358]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  501.214944][T13358]  ? rw_verify_area+0xce/0x6d0
[  501.214963][T13358]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  501.214983][T13358]  vfs_read+0x1e4/0xb40
[  501.215006][T13358]  ? __pfx_vfs_read+0x10/0x10
[  501.215025][T13358]  ? __fget_files+0x215/0x3d0
[  501.215044][T13358]  ? __fget_files+0x21f/0x3d0
[  501.215063][T13358]  ksys_read+0x12a/0x250
[  501.215083][T13358]  ? __pfx_ksys_read+0x10/0x10
[  501.215109][T13358]  do_syscall_64+0x115/0x870
[  501.215126][T13358]  ? clear_bhb_loop+0x40/0x90
[  501.215143][T13358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.215157][T13358] RIP: 0033:0x7fb071f5d68e
[  501.215170][T13358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  501.215183][T13358] RSP: 002b:00007fb072f1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  501.215197][T13358] RAX: ffffffffffffffda RBX: 00007fb072f1b6c0 RCX: 00007fb071f5d68e
[  501.215206][T13358] RDX: 000000000000000f RSI: 00007fb072f1b0a0 RDI: 0000000000000003
[  501.215214][T13358] RBP: 00007fb072f1b090 R08: 0000000000000000 R09: 0000000000000000
[  501.215222][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.215230][T13358] R13: 00007fb072216038 R14: 00007fb072215fa0 R15: 00007ffc24fa73f8
[  501.215248][T13358]  </TASK>
[  501.411177][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.423321][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  501.429678][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  501.450022][ T5723] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  501.461101][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  501.474218][ T5723] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  501.483884][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.501660][ T5723] usb 5-1: config 0 descriptor??
[  501.516751][ T5723] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  501.568890][  T991] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  501.738860][  T991] usb 3-1: Using ep0 maxpacket: 16
[  501.746373][  T991] usb 3-1: config 5 has an invalid interface number: 51 but max is 0
[  501.754804][  T991] usb 3-1: config 5 has no interface number 0
[  501.871531][  T991] usb 3-1: config 5 interface 51 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7
[  501.882546][  T991] usb 3-1: config 5 interface 51 has no altsetting 0
[  501.902060][  T991] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9
[  501.918080][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.594119][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.606106][  T991] usb 3-1: Product: syz
[  502.616001][  T991] usb 3-1: Manufacturer: syz
[  502.622821][  T991] usb 3-1: SerialNumber: syz
[  502.820810][   T29] audit: type=1400 audit(1782530145.794:491): avc:  denied  { ioctl } for  pid=13377 comm="syz.0.1969" path="socket:[54010]" dev="sockfs" ino=54010 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  502.854337][T13378] input: syz0 as /devices/virtual/input/input10
[  502.872189][  T991] powermate 3-1:5.51: probe with driver powermate failed with error -5
[  502.898331][  T991] usb 3-1: USB disconnect, device number 52
[  503.242863][ T5619] usb 5-1: USB disconnect, device number 55
[  503.379867][ T5619] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  503.996009][ T5619] net_ratelimit: 1 callbacks suppressed
[  503.996021][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.194606][T13389] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1970'.
[  504.265999][ T5806] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  504.286596][  T991] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  504.427878][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  504.458635][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  504.518011][ T5806] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  504.529880][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.544159][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.546019][  T991] usb 3-1: Using ep0 maxpacket: 32
[  504.557593][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.579463][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.613122][  T991] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  504.622756][ T5806] usb 5-1: config 0 descriptor??
[  504.642650][  T804] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  504.672142][  T991] usb 3-1: config 0 has no interface number 0
[  504.697606][  T991] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  504.720118][  T804] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  504.744691][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.778586][  T991] usb 3-1: Product: syz
[  504.794407][  T991] usb 3-1: Manufacturer: syz
[  504.810831][  T991] usb 3-1: SerialNumber: syz
[  504.844831][T13390] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1973'.
[  504.871586][  T991] usb 3-1: config 0 descriptor??
[  504.896712][  T991] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  505.006397][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.157417][ T5806] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  505.166876][ T5806] cp2112 0003:10C4:EA90.0018: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  505.655755][ T5806] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE
[  505.665112][ T5806] cp2112 0003:10C4:EA90.0018: error requesting SMBus config
[  505.675014][ T5806] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -5
[  505.703294][  T991] usb 3-1: qt2_attach - failed to power on unit: -71
[  505.729646][  T991] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[  505.776500][  T991] usb 3-1: USB disconnect, device number 53
[  505.937802][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.070757][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.082067][ T5714] usb 5-1: USB disconnect, device number 56
[  507.927883][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.346036][  T991] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  508.832452][T13420] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'.
[  509.003360][T13431] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  509.016226][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.040423][T13431] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  509.120443][   T29] audit: type=1400 audit(1782530152.064:492): avc:  denied  { connect } for  pid=13426 comm="syz.0.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  509.537329][  T991] usb 3-1: Using ep0 maxpacket: 32
[  510.057006][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.232267][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.242577][  T991] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  510.250780][  T991] usb 3-1: config 0 has no interface number 0
[  510.280451][  T991] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  510.289720][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.296230][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.306442][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.315149][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.324388][  T991] usb 3-1: Product: syz
[  510.328854][  T991] usb 3-1: Manufacturer: syz
[  510.347986][  T991] usb 3-1: SerialNumber: syz
[  510.357085][  T991] usb 3-1: config 0 descriptor??
[  510.382953][  T991] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  511.251232][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.511570][  T991] usb 3-1: qt2_attach - failed to power on unit: -71
[  512.531691][  T991] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[  512.543201][  T991] usb 3-1: USB disconnect, device number 54
[  512.584914][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.255444][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.515836][T13471] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1985'.
[  513.646187][ T5619] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  513.693250][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.867418][ T5619] usb 3-1: Using ep0 maxpacket: 32
[  513.882254][ T5619] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  513.894427][ T5619] usb 3-1: config 0 has no interface number 0
[  513.948589][ T5619] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  513.975031][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.021444][ T5619] usb 3-1: Product: syz
[  514.041429][ T5619] usb 3-1: Manufacturer: syz
[  514.054383][ T5619] usb 3-1: SerialNumber: syz
[  514.070479][ T5619] usb 3-1: config 0 descriptor??
[  514.080768][ T5619] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  514.121148][   T29] audit: type=1400 audit(1782530157.094:493): avc:  denied  { setattr } for  pid=13484 comm="syz.0.1996" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  514.199255][T13488] trusted_key: syz.0.1996 sent an empty control message without MSG_MORE.
[  514.770648][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.308816][ T5619] usb 3-1: qt2_attach - failed to power on unit: -71
[  515.340339][ T5619] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[  515.383562][ T5619] usb 3-1: USB disconnect, device number 55
[  515.406811][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.416765][T13505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2000'.
[  515.432726][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.441835][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.806930][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.535038][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.780007][T13523] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2005'.
[  516.846533][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.725304][   T29] audit: type=1400 audit(1782530160.604:494): avc:  denied  { write } for  pid=13534 comm="syz.0.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  518.011776][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.476553][   T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  518.631821][T13546] pim6reg: entered allmulticast mode
[  519.085101][T13546] pim6reg: left allmulticast mode
[  519.580073][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.844219][  T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.012837][   T24] usb 1-1: Using ep0 maxpacket: 16
[  520.024101][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.036467][T13558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.044953][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.068551][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  520.078965][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.087942][T13558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.102089][   T24] usb 1-1: config 0 descriptor??
[  520.107384][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.118143][   T24] usb 1-1: can't set config #0, error -71
[  520.133856][   T24] usb 1-1: USB disconnect, device number 56
[  520.139962][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.149783][T13558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.158163][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.519833][T13566] ip6t_rpfilter: unknown options
[  520.552912][   T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  520.581333][T13564] netlink: 'syz.3.2014': attribute type 49 has an invalid length.
[  520.694654][T13571] Cannot find set identified by id 0 to match
[  520.745997][   T24] usb 1-1: Using ep0 maxpacket: 32
[  520.770716][   T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  520.804926][   T24] usb 1-1: config 0 has no interface number 0
[  520.847077][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.929049][   T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  520.938446][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.952578][   T24] usb 1-1: Product: syz
[  520.961714][   T24] usb 1-1: Manufacturer: syz
[  520.971882][   T24] usb 1-1: SerialNumber: syz
[  520.988405][   T24] usb 1-1: config 0 descriptor??
[  521.002013][   T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  521.043244][   T29] audit: type=1400 audit(1782530164.014:495): avc:  denied  { ioctl } for  pid=13573 comm="syz.1.2018" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  521.091964][T13572] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x735e1
[  521.182564][T13572] memcg:ffff88802973bf00
[  521.224303][T13572] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  521.323457][T13572] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000
[  521.416758][T13572] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88802973bf00
[  521.485593][T13572] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping))
[  521.506642][T13572] page_owner tracks the page as allocated
[  521.546659][   T29] audit: type=1400 audit(1782530164.514:496): avc:  denied  { read } for  pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  521.604342][   T29] audit: type=1400 audit(1782530164.514:497): avc:  denied  { search } for  pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  521.645846][   T29] audit: type=1400 audit(1782530164.514:498): avc:  denied  { write search } for  pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  521.646702][   T24] usb 1-1: qt2_attach - failed to power on unit: -71
[  521.677493][T13572] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 13572, tgid 13565 (vhost-13566), ts 521091940553, free_ts 521086773243
[  521.703321][   T29] audit: type=1400 audit(1782530164.514:499): avc:  denied  { add_name } for  pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  521.724406][T13572]  post_alloc_hook+0xfd/0x120
[  521.731992][T13572]  get_page_from_freelist+0xf48/0x3530
[  521.739322][   T29] audit: type=1400 audit(1782530164.514:500): avc:  denied  { create } for  pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  521.763129][T13572]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  521.791895][T13572]  alloc_pages_mpol+0x1fb/0x540
[  521.810375][T13572]  folio_alloc_noprof+0x22/0x250
[  521.816205][   T29] audit: type=1400 audit(1782530164.514:501): avc:  denied  { append open } for  pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  521.821820][   T24] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[  521.839482][T13572]  filemap_alloc_folio_noprof.part.0+0x377/0x450
[  521.886274][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.033026][   T24] usb 1-1: USB disconnect, device number 57
[  522.076824][T13572]  filemap_alloc_folio_noprof+0x5e/0x80
[  522.086544][T13572]  page_cache_ra_order+0x539/0xed0
[  522.151343][T13572]  filemap_fault+0x1943/0x3130
[  522.192519][T13572]  __do_fault+0x10b/0x440
[  522.264639][T13572]  do_fault+0x2db/0x1750
[  522.269044][   T29] audit: type=1400 audit(1782530164.514:502): avc:  denied  { getattr } for  pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  522.287789][T13572]  __handle_mm_fault+0x187d/0x2a00
[  522.313352][T13572]  handle_mm_fault+0x37b/0xa30
[  522.326174][T13572]  do_user_addr_fault+0x74c/0x12f0
[  522.340840][T13572]  exc_page_fault+0x6f/0xd0
[  522.352453][T13572]  asm_exc_page_fault+0x26/0x30
[  522.366308][T13572] page last free pid 23 tgid 23 stack trace:
[  522.383773][T13572]  __free_frozen_pages+0x79f/0x1090
[  522.397617][T13572]  rcu_core+0x5a2/0x10d0
[  522.407391][T13572]  handle_softirqs+0x1ea/0x9b0
[  522.414549][T13572]  run_ksoftirqd+0x38/0x60
[  522.421647][T13572]  smpboot_thread_fn+0x3d3/0xaa0
[  522.440291][T13572]  kthread+0x370/0x450
[  522.444478][T13572]  ret_from_fork+0x72b/0xd50
[  522.474133][T13572]  ret_from_fork_asm+0x1a/0x30
[  522.479350][T13572] ------------[ cut here ]------------
[  522.486176][T13572] kernel BUG at mm/filemap.c:858!
[  522.491783][T13572] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  522.498202][T13572] CPU: 1 UID: 0 PID: 13572 Comm: vhost-13566 Not tainted syzkaller #0 PREEMPT(full) 
[  522.507645][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  522.517679][T13572] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0
[  522.523651][T13572] Code: 50 c1 ff 48 c7 c6 e0 92 dd 8b 4c 89 ef e8 c6 ea 12 00 90 0f 0b e8 fe 4f c1 ff 48 c7 c6 40 93 dd 8b 4c 89 ef e8 af ea 12 00 90 <0f> 0b e8 e7 4f c1 ff 48 c7 c6 c0 93 dd 8b 4c 89 ef e8 98 ea 12 00
[  522.543235][T13572] RSP: 0018:ffffc90003bcf3b0 EFLAGS: 00010287
[  522.549288][T13572] RAX: 00000000000f1b84 RBX: 0000000000112cc0 RCX: ffffc9001a2e2000
[  522.557237][T13572] RDX: 0000000000100000 RSI: ffffffff825b1ae8 RDI: ffff888075b104c4
[  522.565192][T13572] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  522.573142][T13572] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002
[  522.581092][T13572] R13: ffffea0001cd7840 R14: 0000000000000000 R15: 0000000000000000
[  522.589041][T13572] FS:  00007fd12a85a6c0(0000) GS:ffff8881241e6000(0000) knlGS:0000000000000000
[  522.597950][T13572] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  522.604520][T13572] CR2: 00007fb07204f270 CR3: 0000000052d81000 CR4: 00000000003526f0
[  522.612470][T13572] Call Trace:
[  522.615727][T13572]  <TASK>
[  522.618642][T13572]  ? __pfx___filemap_add_folio+0x10/0x10
[  522.624267][T13572]  filemap_add_folio+0x1d3/0x630
[  522.629194][T13572]  ? __lock_acquire+0x49f/0x1a40
[  522.634121][T13572]  ? __pfx_filemap_add_folio+0x10/0x10
[  522.639563][T13572]  ? __pfx___css_rstat_updated+0x10/0x10
[  522.645179][T13572]  page_cache_ra_order+0x602/0xed0
[  522.650281][T13572]  filemap_fault+0x1943/0x3130
[  522.655024][T13572]  ? folio_put+0x83/0xd0
[  522.659245][T13572]  ? __pfx_filemap_fault+0x10/0x10
[  522.664339][T13572]  ? __pfx_filemap_map_pages+0x10/0x10
[  522.669781][T13572]  __do_fault+0x10b/0x440
[  522.674091][T13572]  ? find_held_lock+0x2b/0x80
[  522.678745][T13572]  do_fault+0x2db/0x1750
[  522.682981][T13572]  __handle_mm_fault+0x187d/0x2a00
[  522.688078][T13572]  ? mt_find+0x45e/0x8e0
[  522.692306][T13572]  ? __pfx___handle_mm_fault+0x10/0x10
[  522.697749][T13572]  ? __pfx_mt_find+0x10/0x10
[  522.702331][T13572]  ? find_vma+0xbf/0x140
[  522.706552][T13572]  ? __pfx_find_vma+0x10/0x10
[  522.711211][T13572]  handle_mm_fault+0x37b/0xa30
[  522.715961][T13572]  do_user_addr_fault+0x74c/0x12f0
[  522.721062][T13572]  exc_page_fault+0x6f/0xd0
[  522.725546][T13572]  asm_exc_page_fault+0x26/0x30
[  522.730374][T13572] RIP: 0010:__put_user_2+0xd/0x30
[  522.735386][T13572] Code: 88 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <66> 89 01 31 c9 0f 01 ca e9 c6 d9 03 00 66 0f 1f 44 00 00 90 90 90
[  522.754973][T13572] RSP: 0018:ffffc90003bcfb80 EFLAGS: 00050206
[  522.761019][T13572] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000000c0
[  522.768973][T13572] RDX: 1ffff1100a7d6994 RSI: ffffffff88fd7295 RDI: ffff888053eb4ca0
[  522.776923][T13572] RBP: ffff888053eb4bf0 R08: 0000000000000001 R09: 0000000000000000
[  522.784872][T13572] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[  522.792821][T13572] R13: 00000000ffffffff R14: 0000000000000001 R15: ffff888053eb4d58
[  522.800772][T13572]  ? vhost_update_used_flags+0x2c5/0x400
[  522.806391][T13572]  vhost_update_used_flags+0x2f5/0x400
[  522.811832][T13572]  vhost_enable_notify+0x34a/0x770
[  522.816928][T13572]  vhost_vsock_handle_tx_kick+0x900/0xdc0
[  522.822646][T13572]  ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10
[  522.828887][T13572]  ? find_held_lock+0x2b/0x80
[  522.833557][T13572]  ? find_held_lock+0x2b/0x80
[  522.838219][T13572]  ? kcov_remote_start+0x283/0x670
[  522.843315][T13572]  ? kcov_remote_start+0x384/0x670
[  522.848408][T13572]  ? lockdep_hardirqs_on+0x78/0x100
[  522.853592][T13572]  vhost_run_work_list+0x183/0x220
[  522.858688][T13572]  ? __pfx_vhost_run_work_list+0x10/0x10
[  522.864300][T13572]  vhost_task_fn+0x156/0x430
[  522.868871][T13572]  ? __pfx_vhost_task_fn+0x10/0x10
[  522.873960][T13572]  ? do_raw_spin_lock+0x128/0x260
[  522.878973][T13572]  ? find_held_lock+0x2b/0x80
[  522.883630][T13572]  ? ret_from_fork+0x79/0xd50
[  522.888291][T13572]  ? rcu_is_watching+0x12/0xc0
[  522.893040][T13572]  ? __pfx_vhost_task_fn+0x10/0x10
[  522.898146][T13572]  ret_from_fork+0x72b/0xd50
[  522.902728][T13572]  ? __pfx_ret_from_fork+0x10/0x10
[  522.907821][T13572]  ? rcu_is_watching+0x12/0xc0
[  522.912568][T13572]  ? __switch_to+0x800/0x10f0
[  522.917238][T13572]  ? __pfx_vhost_task_fn+0x10/0x10
[  522.922351][T13572]  ret_from_fork_asm+0x1a/0x30
[  522.927112][T13572]  </TASK>
[  522.930114][T13572] Modules linked in:
[  522.934639][T13572] ---[ end trace 0000000000000000 ]---
[  523.411448][T13572] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0
[  523.496058][T13572] Code: 50 c1 ff 48 c7 c6 e0 92 dd 8b 4c 89 ef e8 c6 ea 12 00 90 0f 0b e8 fe 4f c1 ff 48 c7 c6 40 93 dd 8b 4c 89 ef e8 af ea 12 00 90 <0f> 0b e8 e7 4f c1 ff 48 c7 c6 c0 93 dd 8b 4c 89 ef e8 98 ea 12 00
[  523.611906][T13572] RSP: 0018:ffffc90003bcf3b0 EFLAGS: 00010287
[  523.628053][T13572] RAX: 00000000000f1b84 RBX: 0000000000112cc0 RCX: ffffc9001a2e2000
[  523.645981][T13572] RDX: 0000000000100000 RSI: ffffffff825b1ae8 RDI: ffff888075b104c4
[  523.655113][T13572] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  523.664145][T13572] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002
[  523.672281][T13572] R13: ffffea0001cd7840 R14: 0000000000000000 R15: 0000000000000000
[  523.680736][T13572] FS:  00007fd12a85a6c0(0000) GS:ffff8881241e6000(0000) knlGS:0000000000000000
[  523.689990][T13572] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  523.698029][T13572] CR2: 0000200000030000 CR3: 0000000052d81000 CR4: 00000000003526f0
[  523.706206][T13572] Kernel panic - not syncing: Fatal exception
[  523.712466][T13572] Kernel Offset: disabled
[  523.716764][T13572] Rebooting in 86400 seconds..