last executing test programs:

8m37.800395139s ago: executing program 1 (id=1025):
prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nfsfs\x00')
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x434, 0xd, 0xa, 0x307, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x420, 0x3, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xf}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf4b}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xc, 0x6, 0x1, 0x0, "354afdefb3800ebf"}]}, {0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xbc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x75, 0x1, "1a35fae95519bbc6ec62a5e5e46c752938a3394ab069ce1c7ebaf4dcc55f9ef0eb6b1e4b88fcb81abc74fe94ed37c72de66b40006ead78999a0fe3589a96920755317e753eef392fde52d59bea3a049f77ec36706947cc20af840979f682884e6cfd96e5f8f41baddbacae1137d3c60f2f"}]}, @NFTA_SET_ELEM_USERDATA={0x34, 0x6, 0x1, 0x0, "0db03ab548bb13e53dedde2c604717bd0a6a9fa5424faa3e08fe755920595f104bd05def8a7d02e8f163d714e1532a80"}, @NFTA_SET_ELEM_DATA={0xa0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9b, 0x1, "d4333afe260a6c5e9f8e3895440be285d4857093880cc54f1d057d13cf303d3a30889e4d6f02e13560385ad975feffbbcb5cacd3ad934ca7588e453caed4f20da33eb50dd805a0cf022dc784d826e434e5252c98c92833dc4ff59ddf5bab678f9c76c0de6257fe6fcf357439e38e5d2d501c5829fba2557f1916346ed9743506fa99e4f7b71b47d722a6a6a5d17f5930bac5015b8abc63"}]}]}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xff, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, {0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "003e69f447e720fae26d9a1dd68ae74cdd7fa589c174d92c6414e2eff5de65ca3287135f51cfdb6a4a78a31a0d797f5858cae12db94388d90ce65b76ad520c4ddae22c8b90f95f7fa2d306a0bb90a4ce38"}, @NFTA_DATA_VALUE={0x4d, 0x1, "90a4a789cb517fa5dd8ece250d9de28a79ffbeab6157de5a8cf6ad7ff3dbc50a1d24878ef1d0816eca9b777627548f77aa0f5aee01aeb83d4b8a4cdea4b00121248178687badfcd56d"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}]}, 0x434}, 0x1, 0x0, 0x0, 0x44880}, 0x44800)
syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=<r7=>0x0, &(0x7f00000005c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8054})
io_uring_enter(r6, 0x47bc, 0xdc7, 0x31, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000480)={{0x2, 0x6, @empty}, {0x306, @broadcast}, 0x8, {0x2, 0x4e24, @local}, 'veth0_virt_wifi\x00'})
mmap(&(0x7f00003d2000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x13, r0, 0x0)

8m34.462460368s ago: executing program 1 (id=1036):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000050005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e34000000000000000000000000020001000000000000000a1600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424"], 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000082505a1a440000102030109023b000101068004090400dd02020600"], 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x14f7d802}, 0x1c)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0)

8m32.582379406s ago: executing program 1 (id=1043):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10ab, &(0x7f00000000c0)={0x0, 0x7496, 0x0, 0x1, 0x3b6}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0/file0/..\x00', r2, 0x1000, 0x1})
io_uring_enter(r3, 0x351a, 0x0, 0x0, 0x0, 0x0)

8m29.737413903s ago: executing program 1 (id=1051):
r0 = socket(0xa, 0x3, 0x87)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r6 = open_tree(r5, &(0x7f0000000040)='./file0\x00', 0x81001)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000002240)='./file0\x00', 0x2)
r7 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}})
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000240)={0x80001a, 0x1, 0x1, "3a8e07ca5de21f00713c8fa98601acc620004b0000002100", 0x3231564e})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
lseek(r1, 0x7fff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c050}, 0x4800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'})

8m28.685834455s ago: executing program 1 (id=1055):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0xfff5, 0x0, {0x7}}}, 0x48}}, 0x0)

8m28.466589653s ago: executing program 1 (id=1057):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801)
write$evdev(r2, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000180)=0x7)

8m27.488741227s ago: executing program 32 (id=1057):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801)
write$evdev(r2, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000180)=0x7)

13.130349991s ago: executing program 4 (id=2856):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404)
exit(0xfe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00')
getdents(r2, &(0x7f0000000000)=""/43, 0x2b)
getdents64(r2, 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c)
r5 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
kcmp(r5, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
pread64(r6, 0x0, 0x3, 0x0)

9.243192977s ago: executing program 4 (id=2865):
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0})
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0xffffffffffffffdb}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0)
r5 = socket$inet6(0xa, 0x5, 0xf0bd)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1)
set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0)
r6 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
writev(r6, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0), 0x38}], 0x2)
r7 = syz_open_procfs(0x0, 0x0)
pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0xadc)
r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)

8.228614194s ago: executing program 3 (id=2868):
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000008c0)={0x0, @reserved})

7.785528868s ago: executing program 3 (id=2870):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000140)="0b00dd0f0f3ce54a", 0xfdef, 0x0, &(0x7f0000000340)={0x2, 0xe803, @loopback}, 0x10)

7.321780597s ago: executing program 3 (id=2871):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000240)="951f53", 0x3}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)

7.057854807s ago: executing program 3 (id=2874):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x4e22, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={r6, 0xe}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000002440)={r6, 0x14d, "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"}, &(0x7f0000000540)=0x155)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000002200)={0x0, 0x780e})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100001000000000000000000fe80000000000000000000000000003aff02000000000000000000000000000100000000200000000000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bbffffffff6c000000ac14141f00000000000000000000000000000000000000000000000000000000000000000000000003000000f8ffffff09000000000000000000000000000000fdffffffffffff0f0000000000000000000000000000000004000000000000000000000000000000000000000000000000000000002000000000000000000000000000000a0001060000000000000000480003006409fb6c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r8, &(0x7f0000006340)={0x2020, 0x0, <r9=>0x0}, 0x2058)
write$FUSE_INIT(r8, &(0x7f0000002180)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50)
read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020)
write$FUSE_IOCTL(r8, &(0x7f0000002140)={0x20, 0x0, r9, {0x403, 0x4, 0x8, 0xfff}}, 0x20)

6.865040265s ago: executing program 4 (id=2876):
r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$inet6(0x2d, 0x806, 0x0)
socket(0x25, 0x80000, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x9, @sliced={0x1, [0x52e, 0x1fd5, 0x7, 0x2, 0xfff9, 0x80, 0x8000, 0x9, 0x44b, 0x743, 0x6, 0x8, 0x5, 0x1aa, 0x8, 0x2, 0x8001, 0x0, 0x5, 0x401, 0x6, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0x5, 0x2, 0x400, 0x0, 0xfffb, 0x2, 0x66, 0x4, 0xb, 0x4, 0x2, 0xff, 0x8, 0x39, 0x100, 0x1, 0xe05, 0x7, 0x6, 0x80], 0x2}}, 0x6b})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x22020600)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
renameat2(r4, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f00000003c0)='./bus\x00', 0x0)
sendmmsg$inet6(r3, 0x0, 0x0, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001", @ANYRESHEX, @ANYBLOB="785454f63ace2532535fe418e26a717fb1f470cbce39e577ca8ca7fd3ef37ed255183ecb"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9)
r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, 0x0)
syz_usb_connect(0x5, 0x48, &(0x7f0000000580)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023600010d019002090432a70201039e08098508061000060408042387ac0725010305f80409050702"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})

6.801985151s ago: executing program 5 (id=2877):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404)
exit(0xfe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00')
getdents(r2, &(0x7f0000000000)=""/43, 0x2b)
getdents64(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c)
r5 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
kcmp(r5, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
pread64(r6, 0x0, 0x3, 0x0)

5.710854657s ago: executing program 2 (id=2881):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000ffff2d6cffaf91b85cf063fbf5a69e7bc4bc069efd5f5dc4ef87df2500003a1a", @ANYRES32=0x0, @ANYBLOB="2100000004030000380012800b0001006772657461700000280002800800050008000000060011004e21000008000600e00000020400120006000e0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8c851}, 0x40040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x800000080000000)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3})
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0x2, 0x4e1c, @rand_addr=0x64010102}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000300)="68c8c93db5b301aebaa186356ea6417ed8897b1eed42c34ed2b09582f70dc4d267742411bbda2e925c699ffbe1bf8b3c814e7e0908b9665b6352c1ff1c6b3b5dbe862ae8326cd6d3c27e9100a4d4950ca4f696f3942c0b5ecc1dbddb74573a4d856c253cc3753c5d873428c35e30b77415f2bf274a56549c183c2582eb60d22a4678cfe1844db41061282a6f35c0b7ac3a760ad3e2e77b33704df0883e6425c7dce33807bf5618844969", 0xaa}, {&(0x7f00000003c0)="f0ce6b4c85a66d8cf056a51594e08cfa6b82e4fc44385c8ab28a2bfa60825e26e8fc220dc98c3726f8db1613fb9dab54d67d38acf9333df720d2e9ff86706be2a6e90b2b054abdbc068110009a594e3b32e9ba12f7fcbc8d6b1d5ed5b127669648929aaf882f2b4358f34321f8b1d39b766fd499b16937ddb272c64e958d274e707214bd796e8d38b6e1333c07204849f364fbaaba067dc3cb40288117f362e7891242031977a20e5aea827959897d208f769cb1ea62b9fdbc429088037639560c44296e9387909e7445b046", 0xcc}, {&(0x7f00000004c0)="79f6743b646df12c853feaaf928cf39d5f519e7908e8c75bc95eaf017b2ebba752d57777cb2c40af3e1227e75c76defb348977061994200cc5a5a34e9d49a3f7b223c130a9ac6cb92e6ac6ffd1af82281f72d1a731dd11023d72e4f78963dc11e3dd6bb43bcd6b9b08a1d51b5ae3017bfdee1e5e8ab2cd43e3af8beeaf5e", 0x7e}, {&(0x7f0000000540)="4f37e72c5e72266420dd82555a3862d64609e83fe2d9198648afa8a46c9f38c7b03b67dc1d04d2159b83dadb041144475f547d59b98e4120ac93364091b7017e33c8fb6a9dbe98ba39d5a46418903da8ac835a93368d35174a9db032d698c0fa0b347b0acd562d560f09a423008ff723610e4f262c", 0x75}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="998549522a9cd5d32b6e9336a7018f64e6036e8759aace44d5deb92f9b250b1fdcf94b0144a93a2e8d8ea300ddb090603bc526141c66f5b6749a1bddb27677d4df54b222abcb088a4feff3839306cf1b1d911fdaf9f87c53a85f97984490facf6f57c6b149733c4585f79ba4fc44149559f6fa329a6b2f9491bf286ba500e75d88f5fef2fe75dc5b25e7481156d26bf5df60ab6c31bb4745a1c95729cf8f61cf7f313d4ad11efb886cdbc9756430d98cfb69dcb997a2995e06a69f015ce33e797cd5b008fc0de539ada38c770e169b045ecba00c0c7ad7f4ac53392321b444d0da35ede245f0a9c972e9df4f6b5273dbbf9b7cbea0307720", 0xf8}, {&(0x7f00000007c0)="7aa6782ba9796450de4ddf029303e044f48101070c0e3509242d2fad191a8ac21190618fd1859296a5c7ea61cfc208a6b59a39e4a3da16cef0655c3a78d73912fd93143ec6788662d747f2feb6b17fce96e77fcda42bee5e5646ab5a00aeb1fd43aac00f2017dd9c341a177fea9bc43e4235d7353d393d5f69", 0x79}], 0x7}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000900)="3f9d2c6e856cd7d1e225272770720ba43bd70dc9647fb8f240d229d19f724c0e9a9810a0559c0e604550803468cd972afdafd574a098cd04919b7e71bbf68ed407e8f943b6215da2d5c96e58f629b0e0f60a482d32a254b7e987e2a0e57557e717d4cf093465e46ed169d669c23ad5ab61d1b6a463bc3e1e72f1796170d5d616abed973c7fa71db88e758bd7f9e675a9c7b4c7b38d25ea5631d7ffe7a0faa6de1335e022c4881d5915327827286279e7fb772a489ab64f9460421561a42e24c305e869a1a84f23075967ad2fd539a12e2dbe3e24b1992178662a754188f31b7f866e41e7a5443925f6238564f5dee95b54c954f4d96841", 0xf7}, {&(0x7f0000000a00)="853ea312065d4466268a0841be3ff8d4a15aadaf2aa46cdab80a20fbe3acb137d74ad33b7a95f32bcb915d6b4fd40fd1f104cb98efa0", 0x36}], 0x2}}], 0x2, 0x2400c080)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x5, 0xffffffff})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000))

4.90227339s ago: executing program 5 (id=2882):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xd931d3864d39dce2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r3 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000800)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000180))
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4001)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0)
ftruncate(r0, 0x2)
write$binfmt_elf32(r0, &(0x7f0000004000)={{0x7f, 0x45, 0x4c, 0x46, 0x68, 0x6, 0x4, 0x9, 0xc3, 0x3, 0x3, 0x7, 0x193, 0x38, 0xb5, 0x845, 0xfa, 0x20, 0x1, 0x3, 0x2, 0xfad}, [{0x2, 0x814, 0x4, 0x1, 0x148, 0x2, 0xff000000, 0x7f}], "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", ['\x00', '\x00']}, 0x1158)
unshare(0x22020400)
memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r6, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r6, 0x5501)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x50, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x80)

4.541232061s ago: executing program 5 (id=2884):
set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x202000)

4.209742856s ago: executing program 5 (id=2887):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket(0xa, 0x3, 0x87)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000200"/29], 0x54, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x80000001})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000000, 0xfa11, 0xffffffff}, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6})
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r7 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
eventfd2(0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500))

3.523145263s ago: executing program 3 (id=2889):
semget$private(0x0, 0x6, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e34000000000000000000000000020001000000000000000a1600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000380)={0x0, 0x1, @raw_data=[0x92a9, 0x5, 0xfffffff7, 0x9, 0x1, 0x1000, 0x2, 0x5, 0x67c8, 0x7, 0x3, 0x1, 0x9, 0xa8, 0x7, 0x400]})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424"], 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x1)
creat(&(0x7f0000000100)='./file1/file0\x00', 0x0)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x6, 0x20, @buffer={0x0, 0x2c, 0x0}, &(0x7f00000001c0)="bf274c199f6e", 0x0, 0x1000000c, 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, 0x0, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000)
socket$netlink(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r7, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)

3.522962229s ago: executing program 0 (id=2890):
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20142, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x52, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0)
capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40c0)
fallocate(r2, 0x20, 0xffffffffffffffc9, 0x7)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x40005)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.993248754s ago: executing program 4 (id=2891):
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x8000000000000000, 0x5d, 0x0, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/242, 0xf2}]}, &(0x7f0000000200)="9dfe770a0a96ed19b534cf6a1c29d79f43dd0cdafad3417aa3c938044dea07fbbcfff278d49805d682d9dbc58ff31e2fe6d67d0c8a1cdfe4ee38e27f30dd477a2abd188885f5197944b17760d4bcf759a66051d4027fd663d9324215f9", 0x0, 0xc0000001, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$inet6(0xa, 0x80002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x800)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200010a27bd7000fddbdf251d0000ed3f26cc0464bee079c80114ea83726b91a57bd41981d1d5926225b074a3c32775ccb4c9fe2aa47178f5d790851fac5259bd8abb"], 0x14}}, 0x24040000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x600180, 0x0)

2.838078495s ago: executing program 0 (id=2892):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000001ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b0009446100"/212, 0xd4, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2a, 0x0, &(0x7f0000000040))
r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0), 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0)
sendmsg$inet6(r5, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000900)="8d", 0x0, 0xf21bb4d410ace81, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x7}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))

2.640073663s ago: executing program 4 (id=2893):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
fchdir(r1)
write$cgroup_int(r0, &(0x7f0000000040)=0x800000000001c8, 0x12)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x820}, 0x20000040)

2.410736458s ago: executing program 5 (id=2894):
syz_usb_connect$midi(0x0, 0x38, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x8, 0xe0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xa, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x3, 0x9, 0x81, {0x5, 0x25, 0x1, 0x1, "c3"}}}]}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000016c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0x40}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680))
set_robust_list(&(0x7f00000000c0)={0x0, 0xfffffffffffff8d6}, 0x18)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x10000, 0x0, <r2=>0xffffffffffffffff})
r3 = syz_clone(0x2000, &(0x7f00000000c0)="b4b9", 0x2, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="60f956138b4149030f8b564d275fa259999af5bbc4d58e174230760a997ee27b4607f84b32765184a0825c8d15d367eb3e6d09d7")
sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x40)
prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x2, &(0x7f0000000200))
getpeername$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14)

2.359093966s ago: executing program 4 (id=2895):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xd931d3864d39dce2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r3 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000800)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000180))
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4001)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0)
ftruncate(r0, 0x2)
write$binfmt_elf32(r0, &(0x7f0000004000)={{0x7f, 0x45, 0x4c, 0x46, 0x68, 0x6, 0x4, 0x9, 0xc3, 0x3, 0x3, 0x7, 0x193, 0x38, 0xb5, 0x845, 0xfa, 0x20, 0x1, 0x3, 0x2, 0xfad}, [{0x2, 0x814, 0x4, 0x1, 0x148, 0x2, 0xff000000, 0x7f}], "88893f9797f79419da37fc7218a93c4d9c9023ff321b0a0135a80621fa7a85d6f0927dd8d487b05749847a1739c41835016d9f6f3146985255836d91eb906007d422576eacde0210d864fa95a0e091b6dbde9dd233e7ad532ce018f34223914148fc32a2aea3d106fdd6cf101b2a47931c0aea2901e38a9121afb8e0a2c40b5fb13d18b147a8d178695a581a8e88ca530d5011f36a073a65c58035dfee571faca825ed2f1910de4aa69e1a151e5cf65309d1f21617e559581e202d1e7cd8757d279f0246a48d7b55152f7d2959c03ea05184bea3a4a17ebfa863e50d9fd26774f72bb35040b6df2c09a82e1f97f063aa04f515d858ba5b5b2d7eaa8217efef0ee830948709a99f6c34ea8d51a1bdc5a0a220b00f2f20c51bcf299d93eb64805d5c8cb02b170d293948ae09d32f141975750a245da21aacfcae1e62e27d78266d971a78b8b566f05715c5e96d13a28d2fece4a5f481d27d95ea6c7c8227fae25a83619638f623861d5593ca7b39ebb084c9c77376b63de1e1942af8090c9348a79f5c70b1d03b16c1d03668771e9c9895e4dbf0802c5f47adde798ea04020b95f82332dbc24478124bb38b5118ad4b9e8d39bb77e3a3ae8dfea803b910ef77c37e66c26c98d822529fbe6e30f5153ace0aaf604154f051fc770df57467f2cf59310eff7fd4ae738dd34885d71cd843f6a22ce7a09b9f54724cd2a5c5d9a419ced25b8f417fb119a24c4621898a5ce9c5a03c61f30758c55a0d85466de53ef1ee04a5756646b49a51dd95fdaba00a9799d972bb7d2a03508542dff5c855b9f6c5e272bf2543d1610c0b20136cc8b632504044bd424504b5f56c578686a383f9516b82b7b3cec16eb58cde7df942c64487feaa660c8530024bbc65cb4c4f6bfc1a01647a047fd67952b660e4131ce24c849153fcba2f8688e6c453dc854077ea46db83b499d5e2e701f11d90e2f81d1d6953e1f0561a3d29bad04d32cf8351c1602e5053e65210b40e6b5b99057bc558b9841d19528ac171447d9b4c686d35cb35d1ec2a84cbe217d8821c8f9e6ce497f02e321e26205854dfd5d69674cc8ed31e88f0ffd941a9840edc3e83f7aba9094a5be18cf0cfc546ab845f18194701a4bc3fa060cc4bdf1e26acf557ebf9e928f6f6508fafa06ea084d81be6c7a8d681e71c84a7bf8887f6111fd5b1ef475bf4970533c034b0e98723d3e5d834ebc7b720e3599d3ddcdefb8934153ca0927fddf3736683baa5db232bb816a7bcaf9adc1a50b9bd277d57c396d69cf2fe4d90f3437ab3ba44262a963434ac8f0bfaaf4925f638df78109e9c0a3322eabdbf795ad90515d30cb6fdbc45a8c8e5c362a632c59f6d457fc842aeff141cf4f66e3e5a0dfc9587bf4a303edd410aec39dea04fd2bf4b2826563c2d9e57d422ce4226cf197380f43d4ac05ce5c01b068390688a9013611dd07aa87a90836127bf22082d60483468e38ce03772b6dff7a4d7236c77b11e4e15c8e227e659f2800d2e81dfbf6b9fe1c5cc9dcb8524a279bfdeb94259f5e5d0645e13fc73cd5df2f3afecdd2403f425435edcfa42f3c59b9b83611ac6f294854ff5da9bd36a056f6291c58d676d454c9486a239090e8a7311df845de2a8f8ccda7f302d00b1a5c247c74724a58d0c36d72added1676cc6548b84456d5c629e8fe2597269164481947c22cff896ab38b248cd683f851c9a98e41a8cab65bccc9a1ce25b3391426b22889a72e31600579cabfca8e6b54df6934525a486b62669a0795c382e53e352df91c1b34e136ac0557bcef12e1e2245973463c7d9a9d282aca1031c25e03510dfea0bdd1de7213b7281d94535aedc630ab00e3784bb0ac1acaf430fe92de5fe5637a3fdce094ca70c8d74a369581965afd42e9b7a19b9624bda7e4665da1a430d6a476b9709c140bf0ccb2e3d25a63d2bf8272fb562503dd76ecd2ebd67187bd47348cbb76b88f8545154c762022821eb6743681bd07de118873a4d8e60e66666d0b088b443338a87d492fc4f51ca87d6b1e492e312a34cbbf5f20ff0cec38abbca4bceb5c19966e99e7acbb0a774c8cf50f895dd2d307e16803885fc80d8e6a3c0e1fac4e2cef777f7cf1416b5fcbd361b355c18efb1d3cf7228361550857cda6d5559dc31f1cbac0322bf7c781bd41189865313b2a162425f648e95604dce218ec910572a06034d1c7cc777b16e9146094e373714bc7937f6abc836767d2bc9ed96ae164d1486b650b331e4fadba89b413ba128c3bccf0c70504d88e79b454ad1402032b328fc37f7e04ca3668a837d14f2f06dcd1a9e4769947437733821304c7bfd3338a8de75a67245592b6793c947a91046c84f6a54e373d32c012b29f4d3843e5ed5cf993de164f29fd88882645264d62713a039d069135a392531f9c1d47eb7d22355f882a9c5963f2c287c43f1dcf73ddf09ed664748380251fe6af1eba9cf0bb282fac781a3c916e4270a049c05bf24546f9c9f6bfa9f1f31112139aa8e80b5e9b21f467c50f99e8117da085eb2c2b63fd081ad05758cd5c0fab05134597eeabeeb53ab10c8a314b1fbe6b33c1b757614f7a0202f77b059b91c911ae17c314e376c5825349e917e836d1171ee921c653db7b5ff1289e184c74dba395df48ab49384124adb627f6cab2d3279ad9819c90535d59d3a14052cd8776a6d88f110d88e088d2020afc92313d742d23e84ffb93efa558eb9b55c733e2abeca6c44781a936f5cf8c987dc2c4667dafd236eff5717381a73bb28c9ccb91c96ecabbdfbdfe95360469b97507fdf625df2e903341923612d6750d882fd57a8fcf08bbd9362c6d75d3fba0eaa3a2a73e9d13454c5a089939b8101ce3129fc4b8edab424ba0357def67031674af1e9b9e7d21e3c729358366e14388b40c8610cd2a4532c68844fa5ba1f28d126344988c90149ca36ac1b3d01d3e396c424ed979ea69437df57450c6e98ef448e65557753ad503d9420000b3bcb4d6bb4e10300487fc6486f4e570963b822d2055aa09c5f44bfb1073d55f6c771af6af7e0b97a4ec043bef044d00983f11a028bb69b6abd73bbc0292594084083cbe9e540a13fa03068ed9a4dcec4b0a541ea9a574ee7c5ff060e6d3cd7627ccd481610c4c78cb2ac3d43a1b280146f125408cb30573c99aadf9c2ac8fa879bc9db10cfc4b70192a96de7376cc201d6d3d99532ae65eb7143999c035cb2302c40b28d3bac665367bc5673b39a6f22d17ce5f36d0ab27fafe13f8a4ccda391ae5f838ba07023e37bbb51d50f95e851b817d9ceca6df1de4fc4814b6a478d3d0b016761d37732b479b5ab19d5e92f15048277acaca84cf79b3bac545b33c6e1abda938f64c07677b1fd3bd0f27ed31f51b81b470935f8dd09a63289feae1ed8b7692eafa7c55451ed949d3e9cc628a9a1d739537ea8db9f2d8bdbb834053b7029b369ca5c45d32c849ff0ec0e6191ed2d75225d6769aeb2b08fc38553d80483c3c32e236f62a4092023f491c201c0e9ad582fc882bbf1f9066045570da7e756b1aa265935a4a7c1aa229cef75b9d187a7bc78a533e29bfad3d12d6da0756717909089350870d823b5de8812b796cc0f29f5c88fb9821340518a2b55cbcbd38a968da5aec02726486b5b9f3b6a352103d84af7d40a80d280d664bf85ef32f616b808ef5ccc2215edcedb8115ae311feb7cc610129bfeea1b86ae0970b95f7cca960650a9d6a9f4dad2505f6657b312bd52dc41dd814e795d4ad03aad634bb4413389435c106b42cb825dd39a0d4e54d8f8e03a54e3f14d1d52365ed4ebb704297d846dfd776b407946c2c2bb107911aa0918f7f730b2bd26d9d4dc840d0e6ccdb87ae0d63f6b6af63176d832d3aae2683ce695347e0ffe044de0d4fcce18f7885a5dc226a83c3640ba491e359bddb06b47cbacb110d00f643565e2c61509c1120b73a55ee5d4213c2a3cbfc8ba6e3a17bcd27a238c57589e23bcecf64e8ef949dc710cd853810ec6ec8fcecd084cdf429cea9571de1864c0f34af8ca0464bdbdcdb35ac698c2816529444bf7f2b134cde9919e210a310d86316777857160624b2c2f544cbe015151d8dc21bd0b28814e477cfabeb38828a3bc11dbac34fb45c11dd567e24da431f4199ba549434c9d6c590d570eca0149919004a83ee29a8b5fd960410dcb16a5c7d3fe4f34bd1acc09acf4311aa6c363dcb5f2171eefd75bbc849ca85bb7a6296e2415a5cf03e02ebd85d4c2ea0c3849739d63ffd7e0f1839ad26a953df9d260eb98eb1f70c3f7c1985f93b040cf83dc64cb9502523ad74ed91eb09609f7e3fc93042552f127a6f7ee872dd10dc89487d1cceec112a1bff2fedbebf5e985316079c1174daef70f77a7a10b3a8f94457a152631e6db74efa290ecc243cb1585da0ee2903a6d83d6ec657946588ea934bc553757b1ec6c59c8c55d72c7a792e354c364ba7a2f1c3e708b41f4be0eced242a3dc0432ed88deb317dbec2abbe5dad194ff5c4c45e156ff1d0b15a9726220240859d821957c3a625575496a2331dfef176c1219566f02850726ea72dd0cb5322b75dd6e09933ae4630ffd9e08c39a9e352c15596fd10194ad98c67a2aa93104733e5ec3081bb7226246c930d2554f03ccd070fe0c2534c97c7a0cbf792e47f0b321f6bf0a28c7213e1dcd9127ac0ffd22268d5112cc4c8257f215a8c6bbb40ad668e1aa5f009373af6968041078338ab948a42094bd84282ee4701f74f98335ae5995131cc6ee97d1046332e2cbca85345e456782b8245ae95c9974549b24ea0f73c556507745e8f7d81fa53e62cb70e791f6206c5aa7718597d89554feea81777f51b0c8bd15874cfd4dcc128fdd982e32aad13a3967205002715d09d34a9ac4dff82650a99f14ccd165dc4234e4864e4da4d01446b1074be7146b75553f66207fe4978bb7d14eb1377a3631df5d070a08979a793114882bdf0abb5190ec3e5b4607c18e6b17c2b28200a9c8cedb251d0fe4a80654b8247c6f9ed7fad39ee094d079afe1a6b094a3dcbc1a8a8fd40ec3b1712a7d24f5d1cd334fe738eb0febb2153eac40ea270806f49b71606de4232eec0eb1ad402e51f9842b521148c2a6271d477b0186401efa997aad1946596ece997906d7138787f765b4a40165a82f50ca6197a25a06fe799af3a36c3798b8ef35c6b67df66f347025aa2d6dd2e99c3cd55208c22c4da54c708dc11b855f64428fccffa7d834bd285837dd605709f2bf601986462adbf80d12463c738fae587c551a65aa2696048e132af48576f139bda6fe903d6e0e7664beaebbfe58aa02cbdbf913b3c9275c8fa6f58804032100e40f3a842257e52c63180ac5a12b62803eb7934ca3e56a35cec72c720ce9f3e47ef631792440b60e99c5dac209dac2b54da6e9d01ee32cb8bb8d4f992640c1ff84a1207abdb70958", ['\x00', '\x00']}, 0x1158)
unshare(0x22020400)
memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r6, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r6, 0x5501)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x50, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x80)

2.281957686s ago: executing program 2 (id=2896):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt(r1, 0x84, 0x7d, &(0x7f0000000440)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8)

2.153334231s ago: executing program 2 (id=2897):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}})

2.052741838s ago: executing program 2 (id=2899):
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000008c0)={0x0, @reserved})

1.870615826s ago: executing program 0 (id=2900):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0x6, 0x0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x29, 0x7}, 'port0\x00', 0x20, 0x111444, 0x7, 0x1000, 0xfffffffa, 0x6, 0x7, 0x0, 0x5, 0x6})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r2)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0x10, {0x7, 0x2b, 0x7ff7ffff, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @remote, 0x5}, 0x1c)
r7 = dup2(r6, r6)
r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x0, 0x18, 0x4, 0x0, 0x7, 0x3, 0x2}})
sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890)

1.834905216s ago: executing program 2 (id=2901):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800f0001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

1.533273462s ago: executing program 2 (id=2902):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r1=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
shutdown(r4, 0x0)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, &(0x7f0000000180))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x276, 0x0, 0xe6}]})
getpriority(0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000)
r9 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r9, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x780, 0x3c0, 0x0, @discrete={0x1ff, 0xf}})

842.181242ms ago: executing program 0 (id=2903):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)="41a01c1a2cb2a0e78a4c41f53f296148adc02445af8cba9696e01b61b64682920757cd23d3013f1890", 0x29)
socket(0x840000000002, 0x3, 0xfa)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000004c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0})

418.952574ms ago: executing program 5 (id=2904):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket(0xa, 0x3, 0x87)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000200"/29], 0x54, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x80000001})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000000, 0xfa11, 0xffffffff}, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6})
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r7 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
eventfd2(0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500))

249.568607ms ago: executing program 0 (id=2905):
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)

108.612103ms ago: executing program 3 (id=2906):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000ffff2d6cffaf91b85cf063fbf5a69e7bc4bc069efd5f5dc4ef87df2500003a1a", @ANYRES32=0x0, @ANYBLOB="2100000004030000380012800b0001006772657461700000280002800800050008000000060011004e21000008000600e00000020400120006000e0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8c851}, 0x40040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x800000080000000)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3})
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0x2, 0x4e1c, @rand_addr=0x64010102}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000300)="68c8c93db5b301aebaa186356ea6417ed8897b1eed42c34ed2b09582f70dc4d267742411bbda2e925c699ffbe1bf8b3c814e7e0908b9665b6352c1ff1c6b3b5dbe862ae8326cd6d3c27e9100a4d4950ca4f696f3942c0b5ecc1dbddb74573a4d856c253cc3753c5d873428c35e30b77415f2bf274a56549c183c2582eb60d22a4678cfe1844db41061282a6f35c0b7ac3a760ad3e2e77b33704df0883e6425c7dce33807bf5618844969", 0xaa}, {&(0x7f00000003c0)="f0ce6b4c85a66d8cf056a51594e08cfa6b82e4fc44385c8ab28a2bfa60825e26e8fc220dc98c3726f8db1613fb9dab54d67d38acf9333df720d2e9ff86706be2a6e90b2b054abdbc068110009a594e3b32e9ba12f7fcbc8d6b1d5ed5b127669648929aaf882f2b4358f34321f8b1d39b766fd499b16937ddb272c64e958d274e707214bd796e8d38b6e1333c07204849f364fbaaba067dc3cb40288117f362e7891242031977a20e5aea827959897d208f769cb1ea62b9fdbc429088037639560c44296e9387909e7445b046", 0xcc}, {&(0x7f00000004c0)="79f6743b646df12c853feaaf928cf39d5f519e7908e8c75bc95eaf017b2ebba752d57777cb2c40af3e1227e75c76defb348977061994200cc5a5a34e9d49a3f7b223c130a9ac6cb92e6ac6ffd1af82281f72d1a731dd11023d72e4f78963dc11e3dd6bb43bcd6b9b08a1d51b5ae3017bfdee1e5e8ab2cd43e3af8beeaf5e", 0x7e}, {&(0x7f0000000540)="4f37e72c5e72266420dd82555a3862d64609e83fe2d9198648afa8a46c9f38c7b03b67dc1d04d2159b83dadb041144475f547d59b98e4120ac93364091b7017e33c8fb6a9dbe98ba39d5a46418903da8ac835a93368d35174a9db032d698c0fa0b347b0acd562d560f09a423008ff723610e4f262c", 0x75}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="998549522a9cd5d32b6e9336a7018f64e6036e8759aace44d5deb92f9b250b1fdcf94b0144a93a2e8d8ea300ddb090603bc526141c66f5b6749a1bddb27677d4df54b222abcb088a4feff3839306cf1b1d911fdaf9f87c53a85f97984490facf6f57c6b149733c4585f79ba4fc44149559f6fa329a6b2f9491bf286ba500e75d88f5fef2fe75dc5b25e7481156d26bf5df60ab6c31bb4745a1c95729cf8f61cf7f313d4ad11efb886cdbc9756430d98cfb69dcb997a2995e06a69f015ce33e797cd5b008fc0de539ada38c770e169b045ecba00c0c7ad7f4ac53392321b444d0da35ede245f0a9c972e9df4f6b5273dbbf9b7cbea0307720", 0xf8}, {&(0x7f00000007c0)="7aa6782ba9796450de4ddf029303e044f48101070c0e3509242d2fad191a8ac21190618fd1859296a5c7ea61cfc208a6b59a39e4a3da16cef0655c3a78d73912fd93143ec6788662d747f2feb6b17fce96e77fcda42bee5e5646ab5a00aeb1fd43aac00f2017dd9c341a177fea9bc43e4235d7353d393d5f69", 0x79}], 0x7}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000900)="3f9d2c6e856cd7d1e225272770720ba43bd70dc9647fb8f240d229d19f724c0e9a9810a0559c0e604550803468cd972afdafd574a098cd04919b7e71bbf68ed407e8f943b6215da2d5c96e58f629b0e0f60a482d32a254b7e987e2a0e57557e717d4cf093465e46ed169d669c23ad5ab61d1b6a463bc3e1e72f1796170d5d616abed973c7fa71db88e758bd7f9e675a9c7b4c7b38d25ea5631d7ffe7a0faa6de1335e022c4881d5915327827286279e7fb772a489ab64f9460421561a42e24c305e869a1a84f23075967ad2fd539a12e2dbe3e24b1992178662a754188f31b7f866e41e7a5443925f6238564f5dee95b54c954f4d96841", 0xf7}, {&(0x7f0000000a00)="853ea312065d4466268a0841be3ff8d4a15aadaf2aa46cdab80a20fbe3acb137d74ad33b7a95f32bcb915d6b4fd40fd1f104cb98efa0", 0x36}], 0x2}}], 0x2, 0x2400c080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0xfffffffffffffefe}, 0x1, 0x0, 0x0, 0x40d4}, 0x2402c0c5)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000))

0s ago: executing program 0 (id=2907):
unshare(0x22020600)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
timer_settime(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRES32=r0, @ANYRES16, @ANYRESHEX, @ANYRES64=r0, @ANYRES64=r0], 0x0)

kernel console output (not intermixed with test programs):

raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.421610][ T6802] usb 3-1: USB disconnect, device number 104
[  779.445526][ T6521] udevd[6521]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  779.456565][ T6521] udevd[6521]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  779.485046][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.503628][T14914] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2558'.
[  779.623696][  T982] usb 5-1: new low-speed USB device number 96 using dummy_hcd
[  779.804062][  T982] usb 5-1: config 0 has no interfaces?
[  779.809635][  T982] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  779.820125][   T30] audit: type=1800 audit(1772417329.616:941): pid=14925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2560" name="bus" dev="tmpfs" ino=2705 res=0 errno=0
[  779.845530][  T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.866915][  T982] usb 5-1: config 0 descriptor??
[  780.531051][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.180257][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.367763][T14563] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  781.537308][T14563] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  781.556954][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.565493][T14563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  781.576888][T14563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  781.586991][T14563] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  781.600558][T14563] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  781.615028][T14563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.634987][T14563] usb 3-1: config 0 descriptor??
[  782.357196][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.677878][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.789102][ T5908] usb 5-1: USB disconnect, device number 96
[  782.866169][T14955] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2567'.
[  782.915954][T14957] loop2: detected capacity change from 0 to 7
[  782.946849][T14955] kvm: user requested TSC rate below hardware speed
[  783.062809][T14957] Dev loop2: unable to read RDB block 7
[  783.101169][T14957]  loop2: unable to read partition table
[  783.187663][T14957] loop2: partition table beyond EOD, truncated
[  783.220144][T14957] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  783.266617][ T5908] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  783.443172][ T5908] usb 4-1: Using ep0 maxpacket: 8
[  783.461920][ T5908] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  783.480523][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  783.503176][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  783.527674][ T5908] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  783.607677][ T5908] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  783.671400][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.716198][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.991789][ T5908] usb 4-1: GET_CAPABILITIES returned 0
[  784.011807][ T5908] usbtmc 4-1:16.0: can't read capabilities
[  784.094627][T14563] usbhid 3-1:0.0: can't add hid device: -71
[  784.154433][T14563] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  784.183949][T14563] usb 3-1: USB disconnect, device number 105
[  784.194464][ T5857] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  784.267104][T14955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  784.278872][T14955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  784.395222][ T5857] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  784.427281][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  784.475241][ T5857] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  784.501789][ T5857] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  784.526671][ T5857] usb 5-1: Manufacturer: syz
[  784.561581][ T5857] usb 5-1: config 0 descriptor??
[  784.714854][ T5857] rc_core: IR keymap rc-hauppauge not found
[  784.723240][ T5857] Registered IR keymap rc-empty
[  784.732908][ T5857] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  784.755007][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.782977][T14963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  784.806020][T14963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  784.829686][ T5857] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input93
[  784.868523][T14977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2576'.
[  784.881525][ T5857] usb 5-1: USB disconnect, device number 97
[  785.234924][ T6802] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  785.394821][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.456293][ T6802] usb 3-1: Using ep0 maxpacket: 32
[  785.515646][ T6802] usb 3-1: config 0 has an invalid interface number: 23 but max is 0
[  785.525633][ T6802] usb 3-1: config 0 has no interface number 0
[  785.541018][ T6802] usb 3-1: config 0 interface 23 has no altsetting 0
[  785.565608][T14984] syzkaller0: entered promiscuous mode
[  785.571461][T14984] syzkaller0: entered allmulticast mode
[  785.587052][ T6802] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf
[  785.600956][ T6802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.615622][ T6802] usb 3-1: Product: syz
[  785.622863][ T6802] usb 3-1: Manufacturer: syz
[  785.662258][ T6802] usb 3-1: SerialNumber: syz
[  785.731025][ T6802] usb 3-1: config 0 descriptor??
[  785.793072][ T5857] usb 4-1: USB disconnect, device number 82
[  785.817155][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.006604][T14991] xt_time: invalid argument - start or stop time greater than 23:59:59
[  786.215441][T14998] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.28.0.0
[  786.222377][T14998] PKCS7: Only support pkcs7_signedData type
[  786.834727][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.974257][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.170236][ T6802] usb 3-1: USB disconnect, device number 106
[  788.434846][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.714253][ T5857] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  788.833025][   T30] audit: type=1326 audit(1772417338.646:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15007 comm="syz.2.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  788.858995][   T30] audit: type=1326 audit(1772417338.646:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15007 comm="syz.2.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f632c95cfce code=0x7ffc0000
[  788.884565][   T30] audit: type=1326 audit(1772417338.646:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15007 comm="syz.2.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  788.931126][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  788.944677][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  788.971160][   T30] audit: type=1326 audit(1772417338.646:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15007 comm="syz.2.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  788.993961][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.005171][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  789.023614][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  789.037197][   T30] audit: type=1326 audit(1772417338.646:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15007 comm="syz.2.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  789.112399][ T5857] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  789.162180][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.206677][ T5857] usb 5-1: config 0 descriptor??
[  789.223204][   T30] audit: type=1326 audit(1772417338.646:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15007 comm="syz.2.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  790.037118][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.760907][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.083842][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.113733][  T982] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  791.298310][  T982] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  791.307230][  T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  791.329098][  T982] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  791.338721][  T982] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  791.346936][  T982] usb 3-1: Manufacturer: syz
[  791.354873][  T982] usb 3-1: config 0 descriptor??
[  791.475238][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.484613][  T982] rc_core: IR keymap rc-hauppauge not found
[  791.490647][  T982] Registered IR keymap rc-empty
[  791.509461][  T982] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  791.523325][  T982] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input94
[  791.591074][T15025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  791.602782][T15025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  791.645552][  T982] usb 3-1: USB disconnect, device number 107
[  792.031426][ T5857] usbhid 5-1:0.0: can't add hid device: -71
[  792.037880][ T5857] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  792.063342][ T5857] usb 5-1: USB disconnect, device number 98
[  792.113891][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.246001][T15043] loop2: detected capacity change from 0 to 7
[  792.255114][T15043] Dev loop2: unable to read RDB block 7
[  792.260736][T15043]  loop2: unable to read partition table
[  792.268181][T15043] loop2: partition table beyond EOD, truncated
[  792.276663][T15043] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  792.445798][ T6802] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  792.491680][T15047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2593'.
[  792.521988][T15047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2593'.
[  792.616372][ T6802] usb 6-1: Using ep0 maxpacket: 16
[  792.629895][ T6802] usb 6-1: unable to get BOS descriptor or descriptor too short
[  792.640779][ T6802] usb 6-1: config 13 has an invalid interface number: 50 but max is 0
[  792.649556][ T6802] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  792.661182][ T6802] usb 6-1: config 13 has no interface number 0
[  792.724558][ T6802] usb 6-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  792.767665][ T6802] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  792.780769][ T6802] usb 6-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  792.797199][ T6802] usb 6-1: config 13 interface 50 has no altsetting 0
[  792.878986][ T6802] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  792.892064][ T6802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.908528][ T6802] usb 6-1: Product: syz
[  792.912909][ T6802] usb 6-1: Manufacturer: syz
[  792.920551][ T6802] usb 6-1: SerialNumber: syz
[  793.154818][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.194085][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.516621][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.157845][ T6802] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  795.200201][ T6802] usb 6-1: MIDIStreaming interface descriptor not found
[  795.234341][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.304021][T15069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2599'.
[  795.440156][ T6802] usb 6-1: USB disconnect, device number 54
[  795.513977][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  795.803112][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2602'.
[  795.868409][T15079] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2602'.
[  796.198079][T15082] C: renamed from team_slave_0 (while UP)
[  796.231313][T15082] netlink: 'syz.5.2603': attribute type 4 has an invalid length.
[  796.268199][T15082] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2603'.
[  796.278216][T15082] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  796.294936][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.494029][ T5857] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  796.554697][T15092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.564964][T15092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.575163][T15092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.584446][  T982] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  796.597547][T15092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.606126][T15092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.774095][  T982] usb 5-1: Using ep0 maxpacket: 8
[  796.781404][  T982] usb 5-1: config 0 has an invalid interface number: 122 but max is 0
[  796.793983][  T982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  796.849558][T15097] Invalid logical block size (3)
[  796.897730][ T5857] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  796.906632][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  796.923213][  T982] usb 5-1: config 0 has no interface number 0
[  796.937747][  T982] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  796.959858][  T982] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  796.976983][  T982] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023
[  796.999776][ T5857] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  797.017974][  T982] usb 5-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  797.033626][ T5857] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  797.046697][ T5857] usb 3-1: Manufacturer: syz
[  797.051472][  T982] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  797.077337][ T5857] usb 3-1: config 0 descriptor??
[  797.084723][  T982] usb 5-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[  797.135537][  T982] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  797.146502][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.174347][  T982] usb 5-1: Product: syz
[  797.178670][  T982] usb 5-1: Manufacturer: syz
[  797.188905][  T982] usb 5-1: SerialNumber: syz
[  797.313894][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.326170][T15086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  797.345124][T15086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  797.384183][  T982] usb 5-1: config 0 descriptor??
[  797.406088][T15087] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  797.413570][T15087] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  797.476445][ T5857] rc_core: IR keymap rc-hauppauge not found
[  797.482465][ T5857] Registered IR keymap rc-empty
[  797.501329][ T5857] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  797.556470][ T5857] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input95
[  797.616219][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.662501][ T5857] usb 3-1: USB disconnect, device number 108
[  798.208018][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.554544][T15111] dummy0: left allmulticast mode
[  798.595694][T15118] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2614'.
[  798.749124][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  798.788935][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  798.984730][ T5908] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  799.033652][ T5857] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  799.165244][ T5908] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  799.179870][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.194733][ T5857] usb 4-1: Using ep0 maxpacket: 16
[  799.207172][ T5857] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  799.218661][ T5857] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  799.252737][ T5908] usb 3-1: config 0 descriptor??
[  799.280932][ T5857] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  799.299194][ T5908] cp210x 3-1:0.0: cp210x converter detected
[  799.318365][  T982] usb 5-1: NFC: intf ffff88802a3e3000 id ffffffff8f1d1600
[  799.379915][ T5857] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  799.390614][  T982] nfcmrvl 5-1:0.122: NFC: registered with nci successfully
[  799.430244][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  799.460382][  T982] usb 5-1: USB disconnect, device number 99
[  799.468734][ T5857] usb 4-1: SerialNumber: syz
[  799.527086][  T982] usb 5-1: NFC: intf ffff88802a3e3000
[  799.537890][T15111] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  799.824654][ T5908] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  799.874878][ T5857] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  800.023102][ T5857] usb 4-1: USB disconnect, device number 83
[  800.266769][   T30] audit: type=1326 audit(1772417350.056:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  800.438229][   T30] audit: type=1326 audit(1772417350.056:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c5af5cfce code=0x7ffc0000
[  800.560228][   T30] audit: type=1326 audit(1772417350.056:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  800.638493][   T30] audit: type=1326 audit(1772417350.056:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  800.741489][   T30] audit: type=1326 audit(1772417350.066:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  800.840763][   T30] audit: type=1326 audit(1772417350.066:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  801.254464][ T5915] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  801.426375][ T5915] usb 4-1: device descriptor read/64, error -71
[  801.474213][ T5857] net_ratelimit: 6 callbacks suppressed
[  801.474236][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.674677][ T5915] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  801.706631][ T5908] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71
[  801.715472][ T5908] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  801.749689][ T5908] usb 3-1: cp210x converter now attached to ttyUSB0
[  801.800501][ T5908] usb 3-1: USB disconnect, device number 109
[  801.834681][ T5915] usb 4-1: device descriptor read/64, error -71
[  801.845481][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  801.871396][ T5908] cp210x 3-1:0.0: device disconnected
[  801.944415][ T5915] usb usb4-port1: attempt power cycle
[  802.054001][ T5857] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  802.225847][ T5857] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  802.237723][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  802.255029][ T5857] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  802.272228][ T5857] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  802.284653][ T5915] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  802.294777][ T5857] usb 5-1: Manufacturer: syz
[  802.318004][ T5857] usb 5-1: config 0 descriptor??
[  802.335663][ T5915] usb 4-1: device descriptor read/8, error -71
[  802.452912][T15154] syzkaller0: entered promiscuous mode
[  802.485621][T15154] syzkaller0: entered allmulticast mode
[  802.515653][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.524271][ T5857] rc_core: IR keymap rc-hauppauge not found
[  802.538084][ T5857] Registered IR keymap rc-empty
[  802.545349][T15144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  802.575564][ T5915] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  802.577657][ T5857] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  802.612378][T15144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  802.621152][ T5857] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input96
[  802.629001][ T5915] usb 4-1: device descriptor read/8, error -71
[  802.662005][T15160] Invalid logical block size (3)
[  802.745587][ T5915] usb usb4-port1: unable to enumerate USB device
[  802.757188][ T5857] usb 5-1: USB disconnect, device number 100
[  803.564236][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.718982][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.897655][T15174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2626'.
[  803.969869][T15177] FAULT_INJECTION: forcing a failure.
[  803.969869][T15177] name failslab, interval 1, probability 0, space 0, times 0
[  803.985291][T15177] CPU: 0 UID: 0 PID: 15177 Comm: syz.3.2628 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  803.985319][T15177] Tainted: [L]=SOFTLOCKUP
[  803.985325][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  803.985334][T15177] Call Trace:
[  803.985341][T15177]  <TASK>
[  803.985347][T15177]  dump_stack_lvl+0xe8/0x150
[  803.985376][T15177]  should_fail_ex+0x412/0x560
[  803.985398][T15177]  ? alloc_inode+0x6a/0x1b0
[  803.985420][T15177]  should_failslab+0xa8/0x100
[  803.985439][T15177]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  803.985459][T15177]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  803.985481][T15177]  alloc_inode+0x6a/0x1b0
[  803.985501][T15177]  new_inode+0x22/0x170
[  803.985543][T15177]  __debugfs_create_file+0xb8/0x400
[  803.985567][T15177]  debugfs_create_file_full+0x3f/0x60
[  803.985590][T15177]  bdi_register_va+0x2d5/0x770
[  803.985615][T15177]  super_setup_bdi_name+0xf8/0x210
[  803.985636][T15177]  ? __pfx_super_setup_bdi_name+0x10/0x10
[  803.985657][T15177]  ? do_raw_spin_unlock+0xf5/0x210
[  803.985677][T15177]  fuse_fill_super_common+0x680/0x1270
[  803.985704][T15177]  ? __pfx_fuse_fill_super_common+0x10/0x10
[  803.985724][T15177]  ? __init_swait_queue_head+0xa9/0x150
[  803.985758][T15177]  ? shrinker_register+0x16b/0x230
[  803.985781][T15177]  ? sget_fc+0x962/0xa40
[  803.985805][T15177]  fuse_fill_super+0x176/0x1f0
[  803.985824][T15177]  ? __pfx_fuse_fill_super+0x10/0x10
[  803.985843][T15177]  get_tree_nodev+0xbb/0x150
[  803.985860][T15177]  fuse_get_tree+0x2fb/0x4f0
[  803.985883][T15177]  vfs_get_tree+0x92/0x2a0
[  803.985900][T15177]  do_new_mount+0x341/0xd30
[  803.985919][T15177]  ? apparmor_capable+0x126/0x170
[  803.985946][T15177]  ? __pfx_do_new_mount+0x10/0x10
[  803.985966][T15177]  ? ns_capable+0x89/0xe0
[  803.985987][T15177]  ? path_mount+0x690/0x10e0
[  803.986011][T15177]  ? user_path_at+0xd4/0x160
[  803.986027][T15177]  __se_sys_mount+0x31d/0x420
[  803.986052][T15177]  ? __pfx___se_sys_mount+0x10/0x10
[  803.986077][T15177]  ? __x64_sys_mount+0x20/0xc0
[  803.986099][T15177]  do_syscall_64+0x14d/0xf80
[  803.986116][T15177]  ? trace_irq_disable+0x3b/0x150
[  803.986138][T15177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.986155][T15177]  ? clear_bhb_loop+0x40/0x90
[  803.986173][T15177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.986188][T15177] RIP: 0033:0x7fdbfab9da0a
[  803.986203][T15177] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  803.986216][T15177] RSP: 002b:00007fdbf8df5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  803.986232][T15177] RAX: ffffffffffffffda RBX: 00007fdbf8df5ee0 RCX: 00007fdbfab9da0a
[  803.986243][T15177] RDX: 0000200000002d00 RSI: 0000200000000140 RDI: 0000000000000000
[  803.986255][T15177] RBP: 0000200000002d00 R08: 00007fdbf8df5ee0 R09: 0000000000000000
[  803.986266][T15177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140
[  803.986275][T15177] R13: 00007fdbf8df5ea0 R14: 0000000000000000 R15: 00002000000000c0
[  803.986298][T15177]  </TASK>
[  804.054655][ T5857] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  804.058534][T15177] debugfs: out of free dentries, can not create file 'wb_stats'
[  804.256177][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  804.362062][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  804.451642][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  804.519586][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  804.574730][ T5857] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  804.623391][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.633863][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.686850][ T5857] usb 5-1: config 0 descriptor??
[  804.838780][T15192] xt_hashlimit: max too large, truncated to 1048576
[  804.856546][T15192] No such timeout policy "syz1"
[  805.605649][T14563] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  805.637525][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.768457][T14563] usb 4-1: Using ep0 maxpacket: 8
[  805.784975][T14563] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  805.801033][T14563] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  805.813279][T14563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  805.833211][T14563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  805.852993][T14563] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  805.886474][T14563] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  805.896794][T14563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  805.908753][T14563] usb 4-1: Product: syz
[  805.913037][T14563] usb 4-1: Manufacturer: syz
[  805.927715][T14563] usb 4-1: SerialNumber: syz
[  805.935851][T14563] usb 4-1: config 0 descriptor??
[  806.158507][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.168092][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.181051][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.190415][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.200817][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.211118][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.223768][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.248221][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.460347][T14563] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110
[  806.471901][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.481223][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.490083][T14563] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[  806.526793][T14563] usb 4-1: USB disconnect, device number 88
[  806.674457][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.754618][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.272869][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2634'.
[  807.733813][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.621286][ T5857] usbhid 5-1:0.0: can't add hid device: -71
[  808.627480][ T5857] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  808.646832][ T5857] usb 5-1: USB disconnect, device number 101
[  808.677065][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  808.683449][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  808.708737][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'.
[  808.755053][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.340981][T15236] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2643'.
[  809.374773][ T5894] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  809.432205][T15229] kvm: user requested TSC rate below hardware speed
[  809.575936][ T5894] usb 5-1: Using ep0 maxpacket: 16
[  809.602360][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short
[  809.613318][ T5894] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  809.623002][ T5894] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  809.677703][ T5894] usb 5-1: config 13 has no interface number 0
[  809.690967][ T5894] usb 5-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  809.734415][  T982] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  809.766177][ T5894] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  809.794336][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.812817][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.828937][ T5894] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  809.914947][ T5857] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  809.938133][ T5894] usb 5-1: config 13 interface 50 has no altsetting 0
[  809.953766][  T982] usb 6-1: Using ep0 maxpacket: 8
[  809.959496][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.016793][  T982] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  810.069069][ T5894] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  810.080513][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.089949][  T982] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  810.115682][ T5857] usb 1-1: Using ep0 maxpacket: 8
[  810.124626][ T5857] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  810.137871][  T982] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  810.155273][ T5857] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  810.189988][  T982] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  810.203399][ T5894] usb 5-1: Product: syz
[  810.203425][ T5894] usb 5-1: Manufacturer: syz
[  810.219556][ T5857] usb 1-1: config 0 interface 0 has no altsetting 0
[  810.243623][ T5857] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  810.258629][ T5894] usb 5-1: SerialNumber: syz
[  810.297782][  T982] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  810.337655][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.378326][  T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.450385][ T5857] usb 1-1: config 0 descriptor??
[  810.734862][  T982] usb 6-1: GET_CAPABILITIES returned 0
[  810.740568][  T982] usbtmc 6-1:16.0: can't read capabilities
[  810.834210][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.995532][ T5857] mcp2221 0003:04D8:00DD.0025: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  811.123618][  T982] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  811.225379][T15246] sit1: entered promiscuous mode
[  811.263765][  T982] usb 3-1: device descriptor read/64, error -71
[  811.564794][  T982] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  811.720344][  T982] usb 3-1: device descriptor read/64, error -71
[  811.874800][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.915146][  T982] usb usb3-port1: attempt power cycle
[  811.965280][ T5894] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  811.981501][ T5894] usb 5-1: MIDIStreaming interface descriptor not found
[  812.263622][  T982] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  812.286510][  T982] usb 3-1: device descriptor read/8, error -71
[  812.356806][ T5894] usb 5-1: USB disconnect, device number 102
[  812.418913][ T5933] usb 1-1: reset high-speed USB device number 99 using dummy_hcd
[  812.575029][  T982] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  812.633131][   T30] audit: type=1326 audit(1772417362.376:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15251 comm="syz.3.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  812.677484][  T982] usb 3-1: device descriptor read/8, error -71
[  812.744663][   T30] audit: type=1326 audit(1772417362.376:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15251 comm="syz.3.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdbfab5cfce code=0x7ffc0000
[  812.807520][  T982] usb usb3-port1: unable to enumerate USB device
[  812.838374][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.868147][   T30] audit: type=1326 audit(1772417362.386:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15251 comm="syz.3.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  812.915585][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.967088][   T30] audit: type=1326 audit(1772417362.386:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15251 comm="syz.3.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  813.043301][ T5894] usb 6-1: USB disconnect, device number 55
[  813.085329][   T30] audit: type=1326 audit(1772417362.386:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15251 comm="syz.3.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  813.397794][   T30] audit: type=1326 audit(1772417362.386:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15251 comm="syz.3.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  813.615784][T15266] ������5g�Q[�: renamed from lo (while UP)
[  813.954050][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.998824][   T30] audit: type=1326 audit(1772417363.806:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15263 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2bd9c799 code=0x7ffc0000
[  814.055132][   T30] audit: type=1326 audit(1772417363.806:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15263 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b2bd5cfce code=0x7ffc0000
[  814.087134][ T5857] usb 1-1: USB disconnect, device number 99
[  814.185158][T15273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2654'.
[  814.222486][   T30] audit: type=1326 audit(1772417363.806:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15263 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2bd9c799 code=0x7ffc0000
[  814.643598][ T5857] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  814.764950][   T30] audit: type=1326 audit(1772417363.806:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15263 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f8b2bd9c799 code=0x7ffc0000
[  814.960634][T15281] netlink: 'syz.4.2656': attribute type 16 has an invalid length.
[  814.969485][T15281] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.2656'.
[  814.991145][ T5857] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  815.037576][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.078365][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  815.111317][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  815.141642][ T5857] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  815.154799][ T5857] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  815.163955][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.205143][ T5857] usb 6-1: config 0 descriptor??
[  815.544795][ T5933] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  815.726486][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  815.738509][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  815.782157][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  815.817681][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  815.861728][ T5933] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  815.874803][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.903862][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.960233][ T5933] usb 5-1: config 0 descriptor??
[  816.114178][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.218896][T15289] IPv6: Can't replace route, no match found
[  816.271176][T15291] netlink: 'syz.3.2658': attribute type 12 has an invalid length.
[  816.404243][ T5933] plantronics 0003:047F:FFFF.0026: ignoring exceeding usage max
[  816.656025][T15282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  816.681377][T15282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  816.724262][T15295] netlink: 'syz.0.2659': attribute type 7 has an invalid length.
[  816.785649][ T5933] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  816.811595][T15296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2659'.
[  816.959614][ T5857] usbhid 6-1:0.0: can't add hid device: -71
[  817.032908][ T5857] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  817.246592][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.259221][ T5857] usb 6-1: USB disconnect, device number 56
[  817.724558][ T5857] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  817.914411][ T5857] usb 6-1: Using ep0 maxpacket: 16
[  817.955390][ T5857] usb 6-1: unable to get BOS descriptor or descriptor too short
[  817.966092][ T5857] usb 6-1: config 13 has an invalid interface number: 50 but max is 0
[  817.996534][ T5857] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  818.054803][ T5857] usb 6-1: config 13 has no interface number 0
[  818.073148][ T5857] usb 6-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  818.127031][ T5857] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  818.144179][ T5894] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  818.179507][ T5857] usb 6-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  818.221179][ T5857] usb 6-1: config 13 interface 50 has no altsetting 0
[  818.226360][ T6802] usb 5-1: reset high-speed USB device number 103 using dummy_hcd
[  818.255292][T15306] syzkaller1: entered promiscuous mode
[  818.260892][T15306] syzkaller1: entered allmulticast mode
[  818.275270][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.296707][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  818.317262][ T5894] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  818.341229][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.389954][ T5857] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  818.399987][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.412621][ T5894] usb 3-1: config 0 descriptor??
[  818.452704][ T5894] option 3-1:0.0: GSM modem (1-port) converter detected
[  818.462752][ T5857] usb 6-1: Product: syz
[  818.501108][ T5857] usb 6-1: Manufacturer: syz
[  818.525962][ T5857] usb 6-1: SerialNumber: syz
[  818.655302][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'.
[  818.668237][ T5894] usb 3-1: USB disconnect, device number 114
[  818.680157][ T5894] option 3-1:0.0: device disconnected
[  818.917458][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.276541][ T5908] usb 5-1: USB disconnect, device number 103
[  819.331342][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.471266][T15318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2666'.
[  819.555246][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.286632][ T5857] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  820.312831][ T5857] usb 6-1: MIDIStreaming interface descriptor not found
[  820.354706][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.451321][T15330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2668'.
[  820.483207][T15330] kvm: user requested TSC rate below hardware speed
[  820.618813][ T5857] usb 6-1: USB disconnect, device number 57
[  820.742852][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  820.793690][ T5933] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  820.921180][T15335] openvswitch: netlink: Flow key attr not present in new flow.
[  821.025043][ T5933] usb 3-1: Using ep0 maxpacket: 8
[  821.091445][ T5933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  821.112419][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  821.152910][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  821.207402][ T5933] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  821.254024][ T5857] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  821.292740][ T5933] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  821.333143][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.396497][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.443662][ T5857] usb 6-1: Using ep0 maxpacket: 32
[  821.454800][ T5857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  821.478400][ T5857] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  821.497926][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.533551][ T5857] usb 6-1: Product: syz
[  821.548915][ T5857] usb 6-1: Manufacturer: syz
[  821.572422][ T5933] usb 3-1: GET_CAPABILITIES returned 0
[  821.586447][ T5857] usb 6-1: SerialNumber: syz
[  821.592472][ T5933] usbtmc 3-1:16.0: can't read capabilities
[  821.618385][ T5857] usb 6-1: config 0 descriptor??
[  821.650557][ T5857] usb 6-1: bad CDC descriptors
[  821.664800][ T5857] usb 6-1: unsupported MDLM descriptors
[  821.841940][ T5857] usb 6-1: USB disconnect, device number 58
[  821.954863][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.428341][T15350] netlink: 'syz.4.2672': attribute type 7 has an invalid length.
[  822.445742][T15350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2672'.
[  822.728175][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.866634][T15352] Invalid argument reading file caps for ./file0
[  822.877557][T15352] netlink: 'syz.5.2674': attribute type 1 has an invalid length.
[  823.794114][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.086535][T15367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2678'.
[  824.174092][ T5933] usb 3-1: USB disconnect, device number 115
[  824.786416][ T5894] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  824.840147][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.984120][ T5894] usb 5-1: Using ep0 maxpacket: 16
[  825.000449][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short
[  825.015015][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.038551][ T5894] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  825.069198][ T5894] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  825.119320][ T5894] usb 5-1: config 13 has no interface number 0
[  825.142765][ T5894] usb 5-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  825.187396][ T5894] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  825.237724][ T5894] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  825.297506][ T5894] usb 5-1: config 13 interface 50 has no altsetting 0
[  825.498442][ T5894] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  825.508726][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.518804][ T5894] usb 5-1: Product: syz
[  825.523085][ T5894] usb 5-1: Manufacturer: syz
[  825.531792][ T5894] usb 5-1: SerialNumber: syz
[  825.723954][ T5933] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  825.874972][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.906665][ T5933] usb 3-1: too many configurations: 47, using maximum allowed: 8
[  825.950595][ T5933] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  825.959862][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.968024][ T5933] usb 3-1: Product: syz
[  825.972221][ T5933] usb 3-1: Manufacturer: syz
[  825.984271][ T5933] usb 3-1: SerialNumber: syz
[  826.015185][ T5933] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  826.099849][T14563] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  826.925483][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.123870][T15404] netlink: 'syz.3.2689': attribute type 7 has an invalid length.
[  827.298280][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2689'.
[  827.380732][ T5894] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  827.499225][T14563] usb 3-1: Service connection timeout for: 256
[  827.590245][T14563] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  827.696491][T14563] ath9k_htc: Failed to initialize the device
[  827.720686][ T5894] usb 5-1: MIDIStreaming interface descriptor not found
[  827.751633][T14563] usb 3-1: ath9k_htc: USB layer deinitialized
[  827.955773][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.041224][ T6804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.599404][ T5894] usb 5-1: USB disconnect, device number 104
[  829.054289][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.165637][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.499869][ T5857] usb 3-1: USB disconnect, device number 116
[  829.887715][T15421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2693'.
[  830.118920][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.302960][T15430] FAULT_INJECTION: forcing a failure.
[  830.302960][T15430] name failslab, interval 1, probability 0, space 0, times 0
[  830.324669][T15430] CPU: 1 UID: 0 PID: 15430 Comm: syz.3.2697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  830.324704][T15430] Tainted: [L]=SOFTLOCKUP
[  830.324713][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  830.324725][T15430] Call Trace:
[  830.324734][T15430]  <TASK>
[  830.324743][T15430]  dump_stack_lvl+0xe8/0x150
[  830.324782][T15430]  should_fail_ex+0x412/0x560
[  830.324805][T15430]  should_failslab+0xa8/0x100
[  830.324826][T15430]  __kmalloc_cache_noprof+0x88/0x660
[  830.324843][T15430]  ? nft_delrule+0x57/0xba0
[  830.324932][T15430]  ? __lock_acquire+0x6b5/0x2cf0
[  830.324955][T15430]  nft_delrule+0x57/0xba0
[  830.324970][T15430]  ? __asan_memset+0x22/0x50
[  830.324993][T15430]  ? __nla_validate_parse+0x2480/0x2dc0
[  830.325021][T15430]  nft_flush_table+0x269/0x18e0
[  830.325040][T15430]  ? nft_pernet+0x23/0x240
[  830.325074][T15430]  ? nft_pernet+0x23/0x240
[  830.325092][T15430]  nf_tables_deltable+0x5d2/0xe80
[  830.325120][T15430]  ? __pfx_nf_tables_deltable+0x10/0x10
[  830.325142][T15430]  ? nfnl_pernet+0x23/0x240
[  830.325165][T15430]  ? __nla_parse+0x40/0x60
[  830.325191][T15430]  nfnetlink_rcv+0x1240/0x27b0
[  830.325231][T15430]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  830.325259][T15430]  ? ref_tracker_free+0x693/0x840
[  830.325298][T15430]  ? __netlink_deliver_tap+0x807/0x850
[  830.325319][T15430]  ? netlink_deliver_tap+0x2e/0x1b0
[  830.325349][T15430]  netlink_unicast+0x80f/0x9b0
[  830.325372][T15430]  ? __pfx_netlink_unicast+0x10/0x10
[  830.325390][T15430]  ? netlink_sendmsg+0x650/0xb40
[  830.325407][T15430]  ? skb_put+0x11b/0x210
[  830.325432][T15430]  netlink_sendmsg+0x813/0xb40
[  830.325458][T15430]  ? __pfx_netlink_sendmsg+0x10/0x10
[  830.325480][T15430]  ? aa_sock_msg_perm+0xf1/0x1b0
[  830.325499][T15430]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  830.325518][T15430]  ? __pfx_netlink_sendmsg+0x10/0x10
[  830.325536][T15430]  ____sys_sendmsg+0xa68/0xad0
[  830.325573][T15430]  ? __pfx_____sys_sendmsg+0x10/0x10
[  830.325602][T15430]  ? import_iovec+0x73/0xa0
[  830.325627][T15430]  ___sys_sendmsg+0x2a5/0x360
[  830.325653][T15430]  ? __pfx____sys_sendmsg+0x10/0x10
[  830.325702][T15430]  ? __fget_files+0x2a/0x420
[  830.325722][T15430]  ? __fget_files+0x3a0/0x420
[  830.325751][T15430]  __x64_sys_sendmsg+0x1bd/0x2a0
[  830.325776][T15430]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  830.325805][T15430]  ? __pfx_ksys_write+0x10/0x10
[  830.325829][T15430]  do_syscall_64+0x14d/0xf80
[  830.325844][T15430]  ? trace_irq_disable+0x3b/0x150
[  830.325866][T15430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.325882][T15430]  ? clear_bhb_loop+0x40/0x90
[  830.325900][T15430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.325915][T15430] RIP: 0033:0x7fdbfab9c799
[  830.325930][T15430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  830.325943][T15430] RSP: 002b:00007fdbf8df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  830.325960][T15430] RAX: ffffffffffffffda RBX: 00007fdbfae15fa0 RCX: 00007fdbfab9c799
[  830.325971][T15430] RDX: 0000000004000000 RSI: 0000200000000340 RDI: 0000000000000003
[  830.325982][T15430] RBP: 00007fdbf8df6090 R08: 0000000000000000 R09: 0000000000000000
[  830.325991][T15430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  830.326000][T15430] R13: 00007fdbfae16038 R14: 00007fdbfae15fa0 R15: 00007fdbfaf3fa48
[  830.326023][T15430]  </TASK>
[  830.672440][ T5857] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  830.832851][ T5857] usb 1-1: device descriptor read/64, error -71
[  831.073861][ T5857] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  831.076262][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.164237][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.365289][ T5857] usb 1-1: device descriptor read/64, error -71
[  831.372619][T15443] netlink: 'syz.5.2702': attribute type 7 has an invalid length.
[  831.503894][ T5857] usb usb1-port1: attempt power cycle
[  831.595376][ T6802] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  831.776224][ T6802] usb 4-1: Using ep0 maxpacket: 16
[  831.826396][T15449] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2703'.
[  831.856120][T15449] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2703'.
[  831.865231][ T5857] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  831.886305][ T5857] usb 1-1: device descriptor read/8, error -71
[  831.906346][ T6802] usb 4-1: unable to get BOS descriptor or descriptor too short
[  831.919839][ T6802] usb 4-1: config 13 has an invalid interface number: 50 but max is 0
[  831.929144][ T6802] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  831.941500][ T6802] usb 4-1: config 13 has no interface number 0
[  831.948527][ T6802] usb 4-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  831.986939][ T6802] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  832.015154][ T6802] usb 4-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  832.085763][ T6802] usb 4-1: config 13 interface 50 has no altsetting 0
[  832.152647][ T6802] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  832.162818][ T6802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.173613][ T5857] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  832.190274][ T6802] usb 4-1: Product: syz
[  832.204616][ T5857] usb 1-1: device descriptor read/8, error -71
[  832.212977][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.235345][ T6802] usb 4-1: Manufacturer: syz
[  832.266831][ T6802] usb 4-1: SerialNumber: syz
[  832.315631][ T5857] usb usb1-port1: unable to enumerate USB device
[  833.235110][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.118828][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.274239][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.292875][ T6802] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  834.326241][T15476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2710'.
[  834.344499][ T6802] usb 4-1: MIDIStreaming interface descriptor not found
[  834.627457][ T6802] usb 4-1: USB disconnect, device number 89
[  834.758424][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  834.883563][ T5857] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  835.063694][ T5857] usb 6-1: Using ep0 maxpacket: 16
[  835.108577][ T5857] usb 6-1: unable to get BOS descriptor or descriptor too short
[  835.133698][T15489] input: syz0 as /devices/virtual/input/input97
[  835.141798][ T5857] usb 6-1: config 1 has too many interfaces: 67, using maximum allowed: 32
[  835.154934][ T5857] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  835.173683][ T5857] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 67
[  835.268100][ T5857] usb 6-1: config 1 has no interface number 0
[  835.279305][ T5857] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  835.290869][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.302771][ T5857] usb 6-1: Product: syz
[  835.310176][ T5857] usb 6-1: Manufacturer: syz
[  835.316321][ T5857] usb 6-1: SerialNumber: syz
[  835.321128][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.473826][T14563] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  835.602721][T15497] netlink: 'syz.3.2715': attribute type 7 has an invalid length.
[  835.658424][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2705'.
[  835.864669][T14563] usb 1-1: config index 0 descriptor too short (expected 65183, got 72)
[  835.903016][T14563] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  835.931905][T14563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.948824][T14563] usb 1-1: Product: syz
[  835.962939][T14563] usb 1-1: Manufacturer: syz
[  835.973188][T14563] usb 1-1: SerialNumber: syz
[  835.983054][T14563] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  836.017970][ T5933] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  836.229805][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  836.335130][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  836.353918][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.409874][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  836.451427][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  836.496030][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  836.647950][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  836.816745][ T6802] usb 1-1: USB disconnect, device number 104
[  837.155188][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.631162][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.639554][ T5933] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  837.647281][ T5933] ath9k_htc: Failed to initialize the device
[  837.678809][ T6802] usb 1-1: ath9k_htc: USB layer deinitialized
[  838.036667][ T5857] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  838.096193][ T6802] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  838.222547][ T5857] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2
[  838.303295][ T5857] usb 6-1: USB disconnect, device number 59
[  838.316114][ T6802] usb 1-1: Using ep0 maxpacket: 32
[  838.344644][ T6802] usb 1-1: device descriptor read/all, error -71
[  838.441105][T15520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.458147][ T6521] udevd[6521]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  838.534352][T15520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.720254][ T6802] usb 1-1: new full-speed USB device number 106 using dummy_hcd
[  838.729394][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.755779][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.804230][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.943682][ T5857] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  840.090301][T15534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2723'.
[  840.103661][ T5857] usb 3-1: Using ep0 maxpacket: 16
[  840.144338][ T5857] usb 3-1: unable to get BOS descriptor or descriptor too short
[  840.153214][ T5857] usb 3-1: config 13 has an invalid interface number: 50 but max is 0
[  840.214503][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.215616][ T5857] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  840.233507][ T5857] usb 3-1: config 13 has no interface number 0
[  840.239848][ T5857] usb 3-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  840.250382][ T5857] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  840.260692][ T5857] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  840.274565][ T5857] usb 3-1: config 13 interface 50 has no altsetting 0
[  840.513101][ T5857] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  840.532903][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.555217][ T5857] usb 3-1: Product: syz
[  840.563343][ T5857] usb 3-1: Manufacturer: syz
[  840.578357][ T5857] usb 3-1: SerialNumber: syz
[  840.833918][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.331553][T15538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2724'.
[  841.532839][T15541] dummy0: left allmulticast mode
[  841.541634][T15541] dummy0: left promiscuous mode
[  841.550009][T15541] bridge0: port 3(dummy0) entered disabled state
[  841.579802][T15541] batman_adv: batadv0: Adding interface: dummy0
[  841.876779][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.897960][T15541] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  841.977919][ T5857] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  841.999448][ T5857] usb 3-1: MIDIStreaming interface descriptor not found
[  842.010194][T15541] batman_adv: batadv0: Interface activated: dummy0
[  842.350660][T15546] batadv0: mtu less than device minimum
[  842.395037][T15546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.407388][T15546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.419184][T15546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.510409][ T5857] usb 3-1: USB disconnect, device number 117
[  842.598488][T15564] netlink: 'syz.5.2729': attribute type 7 has an invalid length.
[  842.895926][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  842.916441][   T30] audit: type=1326 audit(1772417392.706:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  843.013278][   T30] audit: type=1326 audit(1772417392.706:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f632c95cfce code=0x7ffc0000
[  843.081768][T15570] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2730'.
[  843.111620][T15570] kvm: user requested TSC rate below hardware speed
[  843.416642][   T30] audit: type=1326 audit(1772417392.706:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  843.484424][ T6802] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  843.538627][   T30] audit: type=1326 audit(1772417392.706:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  843.714653][ T6802] usb 5-1: Using ep0 maxpacket: 8
[  843.722441][ T6802] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  843.744047][ T6802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  843.756063][   T30] audit: type=1326 audit(1772417392.716:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  843.867997][ T6802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  843.910606][   T30] audit: type=1326 audit(1772417392.716:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  843.992186][ T6802] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  844.078405][ T5857] net_ratelimit: 21 callbacks suppressed
[  844.078428][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.204800][ T6802] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  844.324420][ T6802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.744721][ T6802] usb 5-1: GET_CAPABILITIES returned 0
[  844.750324][ T6802] usbtmc 5-1:16.0: can't read capabilities
[  845.004099][T15570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.013424][T15570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.169860][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.473726][ T5933] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  845.542964][T15585] Invalid logical block size (3)
[  845.651549][ T5933] usb 6-1: Using ep0 maxpacket: 8
[  845.661702][ T5933] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  845.678348][ T5933] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  845.691028][ T5933] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  845.710799][ T5933] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  845.746333][ T5933] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  845.779163][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.031104][ T5933] usb 6-1: GET_CAPABILITIES returned 0
[  846.077686][ T5933] usbtmc 6-1:16.0: can't read capabilities
[  846.084923][   T30] audit: type=1326 audit(1772417395.886:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2bd9c799 code=0x7ffc0000
[  846.277051][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.288370][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.304892][   T30] audit: type=1326 audit(1772417395.886:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b2bd5cfce code=0x7ffc0000
[  846.339253][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.349289][   T30] audit: type=1326 audit(1772417395.886:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2bd9c799 code=0x7ffc0000
[  846.349828][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.385841][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.405091][   T30] audit: type=1326 audit(1772417395.896:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15586 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f8b2bd9c799 code=0x7ffc0000
[  846.410630][T15580] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90
[  846.492329][T15580] binder: BINDER_SET_CONTEXT_MGR already set
[  846.519209][T15580] binder: 15579:15580 ioctl 4018620d 200000000000 returned -16
[  846.577553][ T5894] usb 6-1: USB disconnect, device number 60
[  846.725952][ T5933] usb 5-1: USB disconnect, device number 105
[  847.324585][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.474434][  T982] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  847.491299][ T5894] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  847.663746][  T982] usb 4-1: Using ep0 maxpacket: 32
[  847.686929][  T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  847.732611][ T5894] usb 5-1: Using ep0 maxpacket: 16
[  847.741456][  T982] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  847.798981][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short
[  847.922620][  T982] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  847.937470][ T5894] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  847.989853][  T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.998282][ T5894] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  848.044818][  T982] usb 4-1: Product: syz
[  848.059809][  T982] usb 4-1: Manufacturer: syz
[  848.065392][ T5894] usb 5-1: config 13 has no interface number 0
[  848.074328][  T982] usb 4-1: SerialNumber: syz
[  848.272497][ T5894] usb 5-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  848.330987][ T5894] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  848.354200][T14363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.362699][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.390732][  T982] usb 4-1: config 0 descriptor??
[  848.444416][ T5894] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  848.459641][ T5894] usb 5-1: config 13 interface 50 has no altsetting 0
[  848.480337][ T5894] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  848.491242][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.500591][ T5894] usb 5-1: Product: syz
[  848.506119][ T5894] usb 5-1: Manufacturer: syz
[  848.514614][ T5894] usb 5-1: SerialNumber: syz
[  849.168428][T15615] kAFS: unable to lookup cell '�'
[  849.394643][  T982] net_ratelimit: 6 callbacks suppressed
[  849.394666][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.447145][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.144971][ T5894] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  850.156019][ T5894] usb 5-1: MIDIStreaming interface descriptor not found
[  850.361427][ T5894] usb 5-1: USB disconnect, device number 106
[  850.447013][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.461300][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  850.540523][ T6521] udevd[6521]: setting mode of /dev/snd/midiC3D0 to 020660 failed: No such file or directory
[  850.675724][ T6521] udevd[6521]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory
[  850.710057][ T6802] usb 4-1: USB disconnect, device number 90
[  851.114487][T15628] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0
[  851.121413][T15628] PKCS7: Only support pkcs7_signedData type
[  851.333599][ T5933] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  851.473776][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.493724][T14563] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  851.501402][ T5933] usb 1-1: device descriptor read/64, error -71
[  851.506498][ T6802] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  851.633869][T14563] usb 4-1: device descriptor read/64, error -71
[  851.653681][  T982] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  851.669205][ T6802] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  851.679361][ T6802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.814530][ T6802] usb 3-1: Product: syz
[  851.819055][ T6802] usb 3-1: Manufacturer: syz
[  851.828084][ T6802] usb 3-1: SerialNumber: syz
[  851.863594][ T5933] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  851.877144][  T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  851.889615][  T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  851.905385][  T982] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  851.918811][  T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.933651][T14563] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  851.949150][  T982] usb 5-1: config 0 descriptor??
[  851.994053][ T5933] usb 1-1: device descriptor read/64, error -71
[  852.083770][T14563] usb 4-1: device descriptor read/64, error -71
[  852.105218][ T5933] usb usb1-port1: attempt power cycle
[  852.177319][T15634] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  852.193962][T14563] usb usb4-port1: attempt power cycle
[  852.257942][T15637] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  852.267187][ T6802] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  852.280652][ T6802] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  852.297853][  T982] usbhid 5-1:0.0: can't add hid device: -71
[  852.304540][  T982] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  852.333706][  T982] usb 5-1: USB disconnect, device number 107
[  852.473622][ T5933] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  852.504339][ T5933] usb 1-1: device descriptor read/8, error -71
[  852.513921][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.522091][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.544170][T14563] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  852.564222][T14563] usb 4-1: device descriptor read/8, error -71
[  852.744201][ T5933] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  852.764941][ T5933] usb 1-1: device descriptor read/8, error -71
[  852.813928][T14563] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  852.836508][T14563] usb 4-1: device descriptor read/8, error -71
[  852.874985][ T5933] usb usb1-port1: unable to enumerate USB device
[  853.023301][T14563] usb usb4-port1: unable to enumerate USB device
[  853.538076][ T6802] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  853.555964][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.019884][T15656] netlink: 'syz.4.2754': attribute type 12 has an invalid length.
[  854.114821][T14363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.207211][ T6802] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  854.271655][ T6802] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  854.519689][ T6802] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  854.658877][ T6802] usb 3-1: USB disconnect, device number 118
[  854.927564][T15673] IPv6: Can't replace route, no match found
[  854.936268][T15673] netlink: 'syz.0.2758': attribute type 12 has an invalid length.
[  854.990799][T15672] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003
[  855.154151][ T5933] net_ratelimit: 4 callbacks suppressed
[  855.154167][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.417302][ T6802] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  855.554663][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.564359][ T5908] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  855.594497][ T6802] usb 3-1: Using ep0 maxpacket: 16
[  855.864531][ T5908] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 117, changing to 7
[  855.886900][ T5908] usb 4-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40
[  855.905328][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.929363][ T6802] usb 3-1: unable to get BOS descriptor or descriptor too short
[  856.014360][ T5908] usb 4-1: Product: 緉增㦯๮쎗挊렃ポׇ硃㗙楠ᅞ얈⤰䟂话쭶惃몁穓涳̗ﾇ蝊潹랁힢덈封㤱̐鲬偏톛쑖励䂨鷒獢蓫໹擅濠뛦졩֢໐췂濶鏨ܰ썼걗揖㺔ꬔ塵哪獤阚
[  856.074275][ T5908] usb 4-1: Manufacturer: ᱌
[  856.090056][ T5908] usb 4-1: SerialNumber: ࡠ
[  856.095473][ T6802] usb 3-1: config 13 has an invalid interface number: 50 but max is 0
[  856.104889][ T6802] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  856.124656][ T6802] usb 3-1: config 13 has no interface number 0
[  856.173200][ T6802] usb 3-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  856.195699][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.234013][ T6802] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  856.294406][ T6802] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  856.324765][ T6802] usb 3-1: config 13 interface 50 has no altsetting 0
[  856.357738][ T6802] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  856.374663][ T6802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.402836][ T5908] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  856.412508][ T6802] usb 3-1: Product: syz
[  856.417541][ T5908] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  856.477862][ T6802] usb 3-1: Manufacturer: syz
[  856.499337][ T6802] usb 3-1: SerialNumber: syz
[  856.644371][ T5908] usb 4-1: USB disconnect, device number 95
[  857.233867][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.839028][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  857.852668][   T30] audit: type=1326 audit(1772417407.656:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  857.891838][   T30] audit: type=1326 audit(1772417407.656:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdbfab5cfce code=0x7ffc0000
[  857.927572][   T30] audit: type=1326 audit(1772417407.656:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  857.999030][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.054429][ T6803] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  858.123706][ T5933] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  858.165193][ T6802] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  858.173425][ T6802] usb 3-1: MIDIStreaming interface descriptor not found
[  858.182414][   T30] audit: type=1326 audit(1772417407.666:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  858.228611][ T6803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  858.253382][ T6803] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  858.275549][ T5933] usb 5-1: device descriptor read/64, error -71
[  858.285231][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.298831][   T30] audit: type=1326 audit(1772417407.666:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  858.332839][ T6803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.369231][ T6802] usb 3-1: USB disconnect, device number 119
[  858.385185][ T6803] usb 6-1: config 0 descriptor??
[  858.399743][ T6803] smsusb:smsusb_probe: board id=8, interface number 0
[  858.427565][   T30] audit: type=1326 audit(1772417407.666:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.3.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfab9c799 code=0x7ffc0000
[  858.465228][ T6803] smsusb:smsusb_probe: Device initialized with return code -19
[  858.594483][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.689468][ T5933] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  858.758020][   T30] audit: type=1326 audit(1772417408.576:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  858.812314][   T30] audit: type=1326 audit(1772417408.576:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  858.902647][ T5933] usb 5-1: device descriptor read/64, error -71
[  858.978763][   T30] audit: type=1326 audit(1772417408.576:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  859.114469][ T5933] usb usb5-port1: attempt power cycle
[  859.169073][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  859.238063][   T30] audit: type=1326 audit(1772417408.576:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  859.314790][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.504777][ T5933] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  859.535493][ T5933] usb 5-1: device descriptor read/8, error -71
[  860.408874][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.420422][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.430837][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.547410][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.703610][ T5933] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  860.751123][ T5933] usb 5-1: device descriptor read/8, error -71
[  860.879357][ T5933] usb usb5-port1: unable to enumerate USB device
[  860.955134][ T5933] usb 6-1: USB disconnect, device number 61
[  861.494349][ T5908] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  861.523789][ T5933] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  861.553813][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.585682][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2781'.
[  861.618142][T15740] input: syz0 as /devices/virtual/input/input98
[  861.634360][ T6803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.664632][ T5908] usb 6-1: Using ep0 maxpacket: 16
[  861.683814][ T5933] usb 5-1: Using ep0 maxpacket: 16
[  861.691398][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  861.732091][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  861.778503][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  861.810557][ T5933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  861.821831][ T5908] usb 6-1: unable to get BOS descriptor or descriptor too short
[  861.861110][ T5908] usb 6-1: config 13 has an invalid interface number: 50 but max is 0
[  861.871994][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  861.911253][ T5908] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  861.931184][ T5933] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  861.957116][ T5908] usb 6-1: config 13 has no interface number 0
[  862.022462][ T5908] usb 6-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  862.044851][ T5908] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  862.074766][ T5933] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  862.079863][ T5908] usb 6-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  862.082867][ T5933] usb 5-1: Manufacturer: syz
[  862.123413][ T5908] usb 6-1: config 13 interface 50 has no altsetting 0
[  862.150557][ T5933] usb 5-1: config 0 descriptor??
[  862.159637][ T5908] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  862.170895][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.211588][ T5908] usb 6-1: Product: syz
[  862.228995][ T5908] usb 6-1: Manufacturer: syz
[  862.256527][ T5908] usb 6-1: SerialNumber: syz
[  862.348142][T15746] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.28.0.0
[  862.356344][T15746] PKCS7: Only support pkcs7_signedData type
[  862.605061][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.623623][ T5933] rc_core: IR keymap rc-hauppauge not found
[  862.641176][ T5933] Registered IR keymap rc-empty
[  862.824067][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  862.891189][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  862.927221][ T5933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  863.018544][ T5933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input99
[  863.213994][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.304700][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.485354][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.543621][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.617557][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.635696][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.703703][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.746489][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.804575][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.827541][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.881668][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  863.930668][ T5933] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  863.942893][ T5933] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  864.037923][ T5908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  864.061814][ T5908] usb 6-1: MIDIStreaming interface descriptor not found
[  864.091374][ T5933] usb 5-1: USB disconnect, device number 112
[  864.249917][T15762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2788'.
[  864.264213][T14563] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  864.379287][ T5908] usb 6-1: USB disconnect, device number 62
[  864.406064][T14563] usb 4-1: device descriptor read/64, error -71
[  864.674005][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.682193][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.712612][T14563] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  864.771721][T15771] netlink: 'syz.2.2787': attribute type 10 has an invalid length.
[  864.827441][T15769] netlink: 'syz.2.2787': attribute type 10 has an invalid length.
[  864.926823][T15771] bond0: (slave netdevsim0): Releasing backup interface
[  864.954412][T14563] usb 4-1: device descriptor read/64, error -71
[  864.967601][T15778] FAULT_INJECTION: forcing a failure.
[  864.967601][T15778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  865.013143][T15778] CPU: 0 UID: 0 PID: 15778 Comm: syz.0.2789 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  865.013170][T15778] Tainted: [L]=SOFTLOCKUP
[  865.013176][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  865.013185][T15778] Call Trace:
[  865.013191][T15778]  <TASK>
[  865.013198][T15778]  dump_stack_lvl+0xe8/0x150
[  865.013224][T15778]  should_fail_ex+0x412/0x560
[  865.013246][T15778]  _copy_from_user+0x2d/0xb0
[  865.013269][T15778]  ___sys_sendmsg+0x1c6/0x360
[  865.013300][T15778]  ? __pfx____sys_sendmsg+0x10/0x10
[  865.013346][T15778]  ? __fget_files+0x2a/0x420
[  865.013367][T15778]  ? __fget_files+0x3a0/0x420
[  865.013395][T15778]  __x64_sys_sendmsg+0x1bd/0x2a0
[  865.013457][T15778]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  865.013497][T15778]  ? __pfx_ksys_write+0x10/0x10
[  865.013529][T15778]  do_syscall_64+0x14d/0xf80
[  865.013549][T15778]  ? trace_irq_disable+0x3b/0x150
[  865.013577][T15778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  865.013598][T15778]  ? clear_bhb_loop+0x40/0x90
[  865.013623][T15778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  865.013643][T15778] RIP: 0033:0x7f8b2bd9c799
[  865.013670][T15778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  865.013684][T15778] RSP: 002b:00007f8b2ccf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  865.013699][T15778] RAX: ffffffffffffffda RBX: 00007f8b2c016090 RCX: 00007f8b2bd9c799
[  865.013711][T15778] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  865.013720][T15778] RBP: 00007f8b2ccf6090 R08: 0000000000000000 R09: 0000000000000000
[  865.013730][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  865.013739][T15778] R13: 00007f8b2c016128 R14: 00007f8b2c016090 R15: 00007f8b2c13fa48
[  865.013762][T15778]  </TASK>
[  865.197607][T14563] usb usb4-port1: attempt power cycle
[  865.209229][T15771] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  865.219244][T15771] team0: Port device netdevsim0 added
[  865.234004][T15769] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  865.536725][T15769] team0: Port device netdevsim0 removed
[  865.543756][T14563] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  865.557424][T15769] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  865.567193][T14563] usb 4-1: device descriptor read/8, error -71
[  865.715810][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.761546][T15784] loop3: detected capacity change from 0 to 7
[  865.780367][T15784] Dev loop3: unable to read RDB block 7
[  865.786113][T15784]  loop3: unable to read partition table
[  865.792165][T15784] loop3: partition table beyond EOD, truncated
[  865.798529][T15784] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  865.824393][T14563] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  866.020789][T14563] usb 4-1: device descriptor read/8, error -71
[  866.154083][T14563] usb usb4-port1: unable to enumerate USB device
[  866.298953][T14365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.308474][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.354528][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.371000][T15796] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.28.0.28
[  866.379338][T15796] PKCS7: Only support pkcs7_signedData type
[  866.817408][T15803] IPv6: Can't replace route, no match found
[  866.835709][T15803] netlink: 'syz.2.2795': attribute type 12 has an invalid length.
[  867.394906][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.554964][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.716970][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.829521][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2800'.
[  868.023960][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.033258][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.042099][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.044448][ T6802] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  869.254024][ T6802] usb 1-1: Using ep0 maxpacket: 16
[  869.508269][ T6802] usb 1-1: unable to get BOS descriptor or descriptor too short
[  869.562556][ T6802] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[  869.587534][ T6802] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  869.660021][ T6802] usb 1-1: config 13 has no interface number 0
[  869.693732][T15825] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2803'.
[  869.713633][ T6802] usb 1-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  869.771626][ T6802] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  869.818839][ T6802] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  869.857088][T15825] syzkaller1: entered promiscuous mode
[  869.915766][T15825] syzkaller1: entered allmulticast mode
[  870.034894][ T6802] usb 1-1: config 13 interface 50 has no altsetting 0
[  870.123292][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  870.126689][ T6802] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  870.129840][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  870.220107][ T6802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.290986][ T6802] usb 1-1: Product: syz
[  870.313342][ T6802] usb 1-1: Manufacturer: syz
[  870.352993][ T6802] usb 1-1: SerialNumber: syz
[  870.464649][ T5908] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  870.604620][ T5908] usb 3-1: device descriptor read/64, error -71
[  870.756700][ T6803] net_ratelimit: 1023 callbacks suppressed
[  870.756723][ T6803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.862676][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.934843][ T5908] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  870.996368][T15851] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2812'.
[  871.097240][ T5908] usb 3-1: device descriptor read/64, error -71
[  871.239264][ T5908] usb usb3-port1: attempt power cycle
[  871.557397][ T5933] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  871.594638][ T5908] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  871.647849][ T5908] usb 3-1: device descriptor read/8, error -71
[  871.726796][ T5933] usb 6-1: Using ep0 maxpacket: 8
[  871.735963][ T5933] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  871.746251][ T5933] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  871.756948][ T6802] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  871.918447][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  871.971026][ T5933] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  871.981170][ T5908] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  871.982151][ T5933] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  872.018128][ T5908] usb 3-1: device descriptor read/8, error -71
[  872.034985][T14365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.045030][ T6804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.057197][ T6802] usb 1-1: MIDIStreaming interface descriptor not found
[  872.064898][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.120422][ T5933] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  872.154572][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.155497][ T5908] usb usb3-port1: unable to enumerate USB device
[  872.443304][T15851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  872.453716][T15851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  872.479102][ T6802] usb 1-1: USB disconnect, device number 111
[  872.875614][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  872.977408][T15863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2816'.
[  873.083944][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.492342][T15867] syzkaller0: entered promiscuous mode
[  873.516986][T15867] syzkaller0: entered allmulticast mode
[  873.794827][ T6804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.113783][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.392555][T15885] loop2: detected capacity change from 0 to 7
[  874.402167][T15885] Dev loop2: unable to read RDB block 7
[  874.442432][T15885]  loop2: unable to read partition table
[  874.489099][T15886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2823'.
[  874.499344][T15886] netlink: 316 bytes leftover after parsing attributes in process `syz.4.2823'.
[  874.553807][T15885] loop2: partition table beyond EOD, truncated
[  874.570454][T15885] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  874.810421][ T5933] usb 6-1: usb_control_msg returned -71
[  874.830505][ T5933] usbtmc 6-1:16.0: can't read capabilities
[  874.981273][ T5933] usb 6-1: USB disconnect, device number 63
[  875.169674][  T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.446324][ T5933] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  875.603650][ T5933] usb 6-1: device descriptor read/64, error -71
[  875.629812][T15904] IPv6: Can't replace route, no match found
[  875.653056][T15904] netlink: 'syz.3.2829': attribute type 12 has an invalid length.
[  875.871511][ T5933] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  876.020131][ T5933] usb 6-1: device descriptor read/64, error -71
[  876.136633][ T5933] usb usb6-port1: attempt power cycle
[  876.242445][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.545122][ T5933] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  876.585904][ T5933] usb 6-1: device descriptor read/8, error -71
[  876.769173][T15911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2832'.
[  876.834985][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.895207][ T5933] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  876.966244][ T5933] usb 6-1: device descriptor read/8, error -71
[  877.111051][ T5933] usb usb6-port1: unable to enumerate USB device
[  877.155714][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.328599][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.611891][T15923] FAULT_INJECTION: forcing a failure.
[  877.611891][T15923] name failslab, interval 1, probability 0, space 0, times 0
[  877.632923][T15923] CPU: 1 UID: 0 PID: 15923 Comm: syz.4.2836 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  877.632954][T15923] Tainted: [L]=SOFTLOCKUP
[  877.632960][T15923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  877.632969][T15923] Call Trace:
[  877.632975][T15923]  <TASK>
[  877.632981][T15923]  dump_stack_lvl+0xe8/0x150
[  877.633007][T15923]  should_fail_ex+0x412/0x560
[  877.633029][T15923]  should_failslab+0xa8/0x100
[  877.633049][T15923]  __kmalloc_noprof+0xe8/0x760
[  877.633065][T15923]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  877.633089][T15923]  tomoyo_realpath_from_path+0xe3/0x5d0
[  877.633116][T15923]  ? tomoyo_path_number_perm+0x219/0x630
[  877.633131][T15923]  tomoyo_path_number_perm+0x246/0x630
[  877.633149][T15923]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  877.633166][T15923]  ? __lock_acquire+0x6b5/0x2cf0
[  877.633193][T15923]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  877.633222][T15923]  ? __fget_files+0x2a/0x420
[  877.633244][T15923]  ? __fget_files+0x2a/0x420
[  877.633263][T15923]  ? __fget_files+0x3a0/0x420
[  877.633282][T15923]  ? __fget_files+0x2a/0x420
[  877.633305][T15923]  security_file_ioctl+0xc3/0x2a0
[  877.633340][T15923]  __se_sys_ioctl+0x47/0x170
[  877.633360][T15923]  do_syscall_64+0x14d/0xf80
[  877.633374][T15923]  ? trace_irq_disable+0x3b/0x150
[  877.633395][T15923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.633411][T15923]  ? clear_bhb_loop+0x40/0x90
[  877.633430][T15923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.633485][T15923] RIP: 0033:0x7f7517d9c799
[  877.633505][T15923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  877.633523][T15923] RSP: 002b:00007f7515ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  877.633545][T15923] RAX: ffffffffffffffda RBX: 00007f7518015fa0 RCX: 00007f7517d9c799
[  877.633560][T15923] RDX: 0000200000000280 RSI: 00000000c0585609 RDI: 0000000000000003
[  877.633573][T15923] RBP: 00007f7515ff6090 R08: 0000000000000000 R09: 0000000000000000
[  877.633586][T15923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  877.633598][T15923] R13: 00007f7518016038 R14: 00007f7518015fa0 R15: 00007f751813fa48
[  877.633631][T15923]  </TASK>
[  877.862009][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.084193][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.107997][T15923] ERROR: Out of memory at tomoyo_realpath_from_path.
[  878.125837][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.375962][ T6802] usb 1-1: new low-speed USB device number 112 using dummy_hcd
[  878.525085][T15932] loop2: detected capacity change from 0 to 7
[  878.547854][T15932] Dev loop2: unable to read RDB block 7
[  878.556565][ T6802] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  878.565116][T15932]  loop2: unable to read partition table
[  878.565343][T15932] loop2: partition table beyond EOD, truncated
[  878.565379][T15932] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  878.604613][ T6802] usb 1-1: config 179 has no interface number 0
[  878.614910][ T6802] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  878.634821][ T6802] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  878.665963][ T6802] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  878.726347][ T6802] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  878.744619][ T6802] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  878.814673][ T6802] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  878.837149][ T6802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.883357][T15921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  878.896379][ T6802] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  878.986578][ T6802] xpad 1-1:179.65: probe with driver xpad failed with error -90
[  879.117082][ T5857] usb 1-1: USB disconnect, device number 112
[  879.153834][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.311232][T15949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2844'.
[  879.811569][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2849'.
[  879.877889][ T6804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.888638][ T6802] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  880.024104][ T6802] usb 5-1: device descriptor read/64, error -71
[  880.118570][T15968] netlink: 'syz.3.2848': attribute type 10 has an invalid length.
[  880.202930][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.277556][T15972] netlink: 'syz.3.2848': attribute type 10 has an invalid length.
[  880.286841][ T6802] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  880.474758][ T6802] usb 5-1: device descriptor read/64, error -71
[  880.606372][T15968] team0: Port device netdevsim0 added
[  880.645885][ T6802] usb usb5-port1: attempt power cycle
[  880.775918][T15972] team0: Port device netdevsim0 removed
[  880.800218][T15972] 
: (slave netdevsim0): Enslaving as an active interface with an up link
[  881.096044][ T6802] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  881.127875][ T6802] usb 5-1: device descriptor read/8, error -71
[  881.206581][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  881.206602][   T30] audit: type=1326 audit(1772417431.006:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  881.245223][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.298505][   T30] audit: type=1326 audit(1772417431.016:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f632c95cfce code=0x7ffc0000
[  881.374714][ T6802] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  881.413325][ T6802] usb 5-1: device descriptor read/8, error -71
[  881.574711][ T6802] usb usb5-port1: unable to enumerate USB device
[  881.594577][   T30] audit: type=1326 audit(1772417431.016:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  881.622455][   T30] audit: type=1326 audit(1772417431.016:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  881.651115][   T30] audit: type=1326 audit(1772417431.016:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  881.688002][   T30] audit: type=1326 audit(1772417431.016:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  881.723266][   T30] audit: type=1326 audit(1772417431.016:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632c99c799 code=0x7ffc0000
[  882.256725][T15988] loop2: detected capacity change from 0 to 7
[  882.273064][T15989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.282309][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.301151][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.374974][T15988] Dev loop2: unable to read RDB block 7
[  882.407963][T15988]  loop2: unable to read partition table
[  882.434955][T15988] loop2: partition table beyond EOD, truncated
[  882.461546][T15988] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  882.914432][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.083310][   T30] audit: type=1326 audit(1772417432.896:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15991 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7517d9c799 code=0x7ffc0000
[  883.176274][   T30] audit: type=1326 audit(1772417432.896:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15991 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7517d9c799 code=0x7ffc0000
[  883.262123][   T30] audit: type=1326 audit(1772417432.896:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15991 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7517d5cfce code=0x7ffc0000
[  883.315460][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.675550][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.685207][ T6804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.766223][T16004] netlink: 'syz.0.2858': attribute type 1 has an invalid length.
[  883.824659][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.900564][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.817403][ T6804] net_ratelimit: 4 callbacks suppressed
[  886.817427][ T6804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.009166][T16032] hub 1-0:1.0: USB hub found
[  887.024490][T16032] hub 1-0:1.0: 1 port detected
[  887.086559][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.113980][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.600026][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.734773][T16055] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2873'.
[  889.154215][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.185037][T16076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.208995][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  889.209018][   T30] audit: type=1326 audit(1772417439.016:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.5.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  889.325096][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.441416][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.457242][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.500796][   T30] audit: type=1326 audit(1772417439.016:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.5.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c5af5cfce code=0x7ffc0000
[  889.584384][ T6804] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  889.644550][   T30] audit: type=1326 audit(1772417439.016:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.5.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  889.744743][ T6804] usb 5-1: Using ep0 maxpacket: 16
[  889.762997][ T6804] usb 5-1: unable to get BOS descriptor or descriptor too short
[  889.777230][ T6804] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  889.786318][ T6804] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  889.797322][ T6804] usb 5-1: config 13 has no interface number 0
[  889.807420][ T6804] usb 5-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  889.849254][ T6804] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  889.852009][   T30] audit: type=1326 audit(1772417439.016:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.5.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  889.883000][ T6804] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  890.017419][ T6804] usb 5-1: config 13 interface 50 has no altsetting 0
[  890.067561][ T6804] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  890.094106][   T30] audit: type=1326 audit(1772417439.016:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.5.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  890.139996][ T6804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.163526][   T30] audit: type=1326 audit(1772417439.066:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.5.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5af9c799 code=0x7ffc0000
[  890.187563][ T6804] usb 5-1: Product: syz
[  890.207670][T16088] FAULT_INJECTION: forcing a failure.
[  890.207670][T16088] name failslab, interval 1, probability 0, space 0, times 0
[  890.221930][ T6804] usb 5-1: Manufacturer: syz
[  890.235691][ T6804] usb 5-1: SerialNumber: syz
[  890.263365][T16088] CPU: 0 UID: 0 PID: 16088 Comm: syz.0.2880 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  890.263392][T16088] Tainted: [L]=SOFTLOCKUP
[  890.263398][T16088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  890.263414][T16088] Call Trace:
[  890.263421][T16088]  <TASK>
[  890.263452][T16088]  dump_stack_lvl+0xe8/0x150
[  890.263487][T16088]  should_fail_ex+0x412/0x560
[  890.263520][T16088]  should_failslab+0xa8/0x100
[  890.263539][T16088]  ? skb_clone+0x212/0x3a0
[  890.263554][T16088]  kmem_cache_alloc_noprof+0x87/0x650
[  890.263575][T16088]  skb_clone+0x212/0x3a0
[  890.263592][T16088]  __netlink_deliver_tap+0x404/0x850
[  890.263622][T16088]  ? netlink_deliver_tap+0x2e/0x1b0
[  890.263641][T16088]  netlink_deliver_tap+0x19c/0x1b0
[  890.263660][T16088]  netlink_sendskb+0x68/0x140
[  890.263679][T16088]  netlink_unicast+0x3a3/0x9b0
[  890.263702][T16088]  ? __pfx_netlink_unicast+0x10/0x10
[  890.263725][T16088]  netlink_rcv_skb+0x2b6/0x4b0
[  890.263744][T16088]  ? __pfx_genl_rcv_msg+0x10/0x10
[  890.263769][T16088]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  890.263799][T16088]  ? down_read+0x272/0x2e0
[  890.263815][T16088]  ? genl_rcv+0xd/0x40
[  890.263838][T16088]  genl_rcv+0x28/0x40
[  890.263858][T16088]  netlink_unicast+0x80f/0x9b0
[  890.263881][T16088]  ? __pfx_netlink_unicast+0x10/0x10
[  890.263899][T16088]  ? netlink_sendmsg+0x650/0xb40
[  890.263918][T16088]  ? skb_put+0x11b/0x210
[  890.263941][T16088]  netlink_sendmsg+0x813/0xb40
[  890.263966][T16088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  890.263988][T16088]  ? aa_sock_msg_perm+0xf1/0x1b0
[  890.264009][T16088]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  890.264027][T16088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  890.264045][T16088]  ____sys_sendmsg+0xa68/0xad0
[  890.264075][T16088]  ? __pfx_____sys_sendmsg+0x10/0x10
[  890.264103][T16088]  ? import_iovec+0x73/0xa0
[  890.264128][T16088]  ___sys_sendmsg+0x2a5/0x360
[  890.264155][T16088]  ? __pfx____sys_sendmsg+0x10/0x10
[  890.264202][T16088]  ? __fget_files+0x2a/0x420
[  890.264223][T16088]  ? __fget_files+0x3a0/0x420
[  890.264279][T16088]  __x64_sys_sendmsg+0x1bd/0x2a0
[  890.264315][T16088]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  890.264354][T16088]  ? __pfx_ksys_write+0x10/0x10
[  890.264392][T16088]  do_syscall_64+0x14d/0xf80
[  890.264410][T16088]  ? trace_irq_disable+0x3b/0x150
[  890.264431][T16088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.264446][T16088]  ? clear_bhb_loop+0x40/0x90
[  890.264464][T16088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.264478][T16088] RIP: 0033:0x7f8b2bd9c799
[  890.264492][T16088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  890.264504][T16088] RSP: 002b:00007f8b2cd17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  890.264520][T16088] RAX: ffffffffffffffda RBX: 00007f8b2c015fa0 RCX: 00007f8b2bd9c799
[  890.264531][T16088] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  890.264559][T16088] RBP: 00007f8b2cd17090 R08: 0000000000000000 R09: 0000000000000000
[  890.264568][T16088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  890.264577][T16088] R13: 00007f8b2c016038 R14: 00007f8b2c015fa0 R15: 00007f8b2c13fa48
[  890.264601][T16088]  </TASK>
[  890.534209][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.872112][T16093] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2881'.
[  890.945723][T16093] kvm: user requested TSC rate below hardware speed
[  891.002432][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2882'.
[  891.021502][T16092] input: syz0 as /devices/virtual/input/input100
[  891.235307][ T5857] usb 3-1: new low-speed USB device number 124 using dummy_hcd
[  891.253514][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[  891.394499][ T5857] usb 3-1: device descriptor read/64, error -32
[  891.635347][ T5857] usb 3-1: new low-speed USB device number 125 using dummy_hcd
[  891.773566][ T5857] usb 3-1: device descriptor read/64, error -71
[  891.884128][ T5857] usb usb3-port1: attempt power cycle
[  892.007927][ T6804] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  892.133241][ T6804] usb 5-1: MIDIStreaming interface descriptor not found
[  892.456402][ T5857] usb 3-1: new low-speed USB device number 126 using dummy_hcd
[  892.508241][ T5857] usb 3-1: device descriptor read/8, error -71
[  892.582768][ T6804] usb 5-1: USB disconnect, device number 117
[  892.640676][ T5933] net_ratelimit: 2 callbacks suppressed
[  892.640695][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.753557][ T5857] usb 3-1: new low-speed USB device number 127 using dummy_hcd
[  892.796225][ T5857] usb 3-1: device descriptor read/8, error -71
[  892.925345][ T5857] usb usb3-port1: unable to enumerate USB device
[  893.027126][T16143] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  893.051265][T16143] bond2 (unregistering): Released all slaves
[  893.144597][T16147] block device autoloading is deprecated and will be removed.
[  893.207423][T16147] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  893.258917][T16147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  893.280282][T16147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2893'.
[  893.460575][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2895'.
[  893.478818][T16153] input: syz0 as /devices/virtual/input/input101
[  893.614966][ T6804] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  893.713772][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.774756][ T6804] usb 6-1: Using ep0 maxpacket: 32
[  893.819724][ T6804] usb 6-1: unable to get BOS descriptor or descriptor too short
[  893.861776][ T6804] usb 6-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  893.880774][ T6804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.921062][ T6804] usb 6-1: Product: syz
[  893.929860][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  893.936419][ T6804] usb 6-1: Manufacturer: syz
[  893.942157][ T6804] usb 6-1: SerialNumber: syz
[  893.948396][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  893.974651][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  893.998730][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  894.007352][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  894.115678][T16168] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2900'.
[  894.167297][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2894'.
[  894.557531][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'.
[  894.674830][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.753968][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.784945][T16167] chnl_net:caif_netlink_parms(): no params data found
[  895.075931][T14369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.085756][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.106496][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.351055][T16167] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.394637][T16167] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.444580][T16167] bridge_slave_0: entered allmulticast mode
[  895.455641][T16167] bridge_slave_0: entered promiscuous mode
[  895.495282][T16167] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.502477][T16167] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.631305][T16167] bridge_slave_1: entered allmulticast mode
[  895.662133][T16167] bridge_slave_1: entered promiscuous mode
[  895.727851][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.766939][T16194] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2906'.
[  895.865773][T16195] kvm: user requested TSC rate below hardware speed
[  896.115195][ T5840] Bluetooth: hci5: command tx timeout
[  896.133562][ T5933] usb 4-1: new low-speed USB device number 100 using dummy_hcd
[  896.163686][ T5857] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  896.224890][T16167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.238006][T16167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.273564][ T5933] usb 4-1: device descriptor read/64, error -71
[  896.293601][ T5857] usb 1-1: device descriptor read/64, error -71
[  896.359392][T16167] team0: Port device team_slave_0 added
[  896.379837][T14367] ------------[ cut here ]------------
[  896.386016][T14367] 1
[  896.386045][T14367] WARNING: net/netfilter/core.c:329 at nf_hook_entry_head+0x23e/0x2c0, CPU#1: kworker/u8:10/14367
[  896.399376][T14367] Modules linked in:
[  896.403826][T14367] CPU: 1 UID: 0 PID: 14367 Comm: kworker/u8:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  896.415151][T14367] Tainted: [L]=SOFTLOCKUP
[  896.419522][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  896.429761][T14367] Workqueue: netns cleanup_net
[  896.434880][T14367] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0
[  896.440792][T14367] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 8d cf 69 f8 4d 39 37 74 36 e8 03 91 ff f7 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e9
[  896.460613][T14367] RSP: 0018:ffffc9000528f820 EFLAGS: 00010293
[  896.466771][T14367] RAX: ffffffff89c6049b RBX: ffff8880693e4000 RCX: ffff88801df78000
[  896.474944][T14367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  896.482950][T14367] RBP: 0000000000000000 R08: ffff88801df78000 R09: 0000000000000006
[  896.491101][T14367] R10: 000000000000000a R11: 0000000000000000 R12: ffff888077b02640
[  896.499199][T14367] R13: 0000000000000005 R14: ffff888077b02640 R15: ffff8880693e4108
[  896.507237][T14367] FS:  0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000
[  896.516298][T14367] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  896.522915][T14367] CR2: 0000200000048030 CR3: 000000004e61e000 CR4: 00000000003526f0
[  896.530985][T14367] Call Trace:
[  896.534349][T14367]  <TASK>
[  896.537328][T14367]  __nf_unregister_net_hook+0x74/0x6f0
[  896.542847][T14367]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[  896.549308][T14367]  nf_tables_pre_exit_net+0x64a/0x900
[  896.554834][T14367]  ops_undo_list+0x187/0x940
[  896.559478][T14367]  ? __pfx_ops_undo_list+0x10/0x10
[  896.564709][T14367]  ? idr_destroy+0x218/0x290
[  896.569424][T14367]  ? do_raw_spin_unlock+0xf5/0x210
[  896.574649][T14367]  cleanup_net+0x56b/0x800
[  896.579122][T14367]  ? __pfx_cleanup_net+0x10/0x10
[  896.584153][T14367]  ? process_scheduled_works+0xa25/0x1830
[  896.589922][T14367]  ? process_scheduled_works+0xa25/0x1830
[  896.595776][T14367]  process_scheduled_works+0xb02/0x1830
[  896.601397][T14367]  ? __pfx_process_scheduled_works+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  896.607462][T14367]  ? assign_work+0x3d5/0x5e0
[  896.612098][T14367]  worker_thread+0xa50/0xfc0
[  896.616840][T14367]  kthread+0x388/0x470
[  896.620990][T14367]  ? __pfx_worker_thread+0x10/0x10
[  896.626200][T14367]  ? __pfx_kthread+0x10/0x10
[  896.630831][T14367]  ret_from_fork+0x51e/0xb90
[  896.635674][T14367]  ? __pfx_ret_from_fork+0x10/0x10
[  896.640838][T14367]  ? __switch_to+0xc7d/0x1450
[  896.646647][T14367]  ? __pfx_kthread+0x10/0x10
[  896.651295][T14367]  ret_from_fork_asm+0x1a/0x30
[  896.656196][T14367]  </TASK>
[  896.659273][T14367] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  896.666606][T14367] CPU: 1 UID: 0 PID: 14367 Comm: kworker/u8:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  896.677835][T14367] Tainted: [L]=SOFTLOCKUP
[  896.682190][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  896.692295][T14367] Workqueue: netns cleanup_net
[  896.697115][T14367] Call Trace:
[  896.700435][T14367]  <TASK>
[  896.703396][T14367]  vpanic+0x56c/0xa60
[  896.707460][T14367]  ? __pfx__printk+0x10/0x10
[  896.712093][T14367]  ? __pfx_vpanic+0x10/0x10
[  896.716653][T14367]  ? is_bpf_text_address+0x292/0x2b0
[  896.721984][T14367]  ? is_bpf_text_address+0x26/0x2b0
[  896.727233][T14367]  panic+0xc5/0xd0
[  896.731001][T14367]  ? __pfx_panic+0x10/0x10
[  896.735474][T14367]  ? ret_from_fork_asm+0x1a/0x30
[  896.740468][T14367]  __warn+0x315/0x4f0
[  896.744494][T14367]  ? nf_hook_entry_head+0x23e/0x2c0
[  896.749754][T14367]  ? nf_hook_entry_head+0x23e/0x2c0
[  896.755004][T14367]  __report_bug+0x29a/0x540
[  896.759674][T14367]  ? nf_hook_entry_head+0x23e/0x2c0
[  896.764930][T14367]  ? __pfx___report_bug+0x10/0x10
[  896.770005][T14367]  ? kfree+0x1c1/0x630
[  896.774124][T14367]  ? nf_flow_offload_xdp_setup+0x68a/0x690
[  896.779981][T14367]  ? nf_flow_offload_xdp_setup+0x68a/0x690
[  896.785850][T14367]  ? nf_hook_entry_head+0x23e/0x2c0
[  896.791097][T14367]  report_bug+0x16a/0x220
[  896.795481][T14367]  ? nf_hook_entry_head+0x23e/0x2c0
[  896.800726][T14367]  ? nf_hook_entry_head+0x240/0x2c0
[  896.805969][T14367]  handle_bug+0x9c/0x200
[  896.810252][T14367]  exc_invalid_op+0x1a/0x50
[  896.814782][T14367]  asm_exc_invalid_op+0x1a/0x20
[  896.819669][T14367] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0
[  896.825516][T14367] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 8d cf 69 f8 4d 39 37 74 36 e8 03 91 ff f7 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e9
[  896.845197][T14367] RSP: 0018:ffffc9000528f820 EFLAGS: 00010293
[  896.851307][T14367] RAX: ffffffff89c6049b RBX: ffff8880693e4000 RCX: ffff88801df78000
[  896.859338][T14367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  896.867353][T14367] RBP: 0000000000000000 R08: ffff88801df78000 R09: 0000000000000006
[  896.875354][T14367] R10: 000000000000000a R11: 0000000000000000 R12: ffff888077b02640
[  896.883356][T14367] R13: 0000000000000005 R14: ffff888077b02640 R15: ffff8880693e4108
[  896.891364][T14367]  ? nf_hook_entry_head+0x1fb/0x2c0
[  896.896611][T14367]  __nf_unregister_net_hook+0x74/0x6f0
[  896.902145][T14367]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[  896.908549][T14367]  nf_tables_pre_exit_net+0x64a/0x900
[  896.913979][T14367]  ops_undo_list+0x187/0x940
[  896.918613][T14367]  ? __pfx_ops_undo_list+0x10/0x10
[  896.923761][T14367]  ? idr_destroy+0x218/0x290
[  896.928393][T14367]  ? do_raw_spin_unlock+0xf5/0x210
[  896.933537][T14367]  cleanup_net+0x56b/0x800
[  896.937998][T14367]  ? __pfx_cleanup_net+0x10/0x10
[  896.942976][T14367]  ? process_scheduled_works+0xa25/0x1830
[  896.948723][T14367]  ? process_scheduled_works+0xa25/0x1830
[  896.954474][T14367]  process_scheduled_works+0xb02/0x1830
[  896.960086][T14367]  ? __pfx_process_scheduled_works+0x10/0x10
[  896.966159][T14367]  ? assign_work+0x3d5/0x5e0
[  896.970788][T14367]  worker_thread+0xa50/0xfc0
[  896.975470][T14367]  kthread+0x388/0x470
[  896.979571][T14367]  ? __pfx_worker_thread+0x10/0x10
[  896.984713][T14367]  ? __pfx_kthread+0x10/0x10
[  896.989341][T14367]  ret_from_fork+0x51e/0xb90
[  896.993970][T14367]  ? __pfx_ret_from_fork+0x10/0x10
[  896.999119][T14367]  ? __switch_to+0xc7d/0x1450
[  897.003832][T14367]  ? __pfx_kthread+0x10/0x10
[  897.008456][T14367]  ret_from_fork_asm+0x1a/0x30
[  897.013269][T14367]  </TASK>
[  897.016968][T14367] Kernel Offset: disabled
[  897.021321][T14367] Rebooting in 86400 seconds..