last executing test programs:

26m49.547223169s ago: executing program 1 (id=1553):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='n`w default user:syz '], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x6b, {0x1a}}}, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000a80)={0xc, &(0x7f0000000a00)={0x20, 0x11, 0x6, {0x6, 0x22, "54aceed0"}}, &(0x7f0000000a40)={0x0, 0x3, 0x23, @string={0x23, 0x3, "841f4b9bb99ccb285f7bf2d18a28e2717e4707067ee72d983241ac4740c55d1f4a"}}}, &(0x7f0000001000)={0x10, &(0x7f0000000ac0)={0x40, 0x6, 0xba, "63997f44bc6370f96a4dfa73aaf02f6e7fb742a0543fd726c30388e4ea9b1f4f62eb7fc3f8a3f1eb96e33e80a42c0288162429aae7a27f51d3a72c9e86e5a412f314db3715ec6aa67659e75e9e036bfdfaa97096107e7b0a3c9468337a3c868f370187517873bb929f6c0d145bb87b2dd49e6ff6b7e5140d41e49bfa3d06c61f1eb5e85cdee4c896c565ebd0aa2c384227bb0aee6d6d74513d5634e18be372b9f6dfdaa5f1c8a8c9ea80facb118982d85b599e970358bbae66e9"}, &(0x7f0000000b80)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000fc0)={0x21, 0x0, 0x2, "b5dc"}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x3ff}}, './file0\x00'})
sendto$inet6(r1, &(0x7f00000010c0)="36d2ff8eb05ec3be371c61d7e577b272455d03beeab673036e0eec1fa16fdd5a3a997e2ab1c45b30122a9947c5fac25b4fafa0f34dbc3cee8ba7ec6131503c0a443d9ab0861d67bad0ca187453db285cc00878f113b469dba24c2b8feda83bb6cae3a5426c80a467892457f7c660217c20216141264b6ca98c56d01448615fd4b227ea91330a41b0ed934cb5d26b5edfea02f8c9b04f", 0x96, 0x4048000, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @local, 0xe0000000}, 0x1c)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f00000001c0), 0x4, 0x2000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x54)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x18, &(0x7f0000000200)={0x20, 0x30, 0x30, {0x30, 0xe, "9294fff29c3ae5e9f4ccb41e5d4dfde4805341a1bae906de8642c722adb8a7d88510ef5889c6f2d50d8b2f9ac552"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000001040)={0x0, 0xf, 0x79, {0x5, 0xf, 0x79, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x0, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3b2512cb7fafd661fb0bad396df38143"}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x8001, 0xf00, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0x0, 0xd, 0x80}, @ssp_cap={0x1c, 0x10, 0xa, 0xb, 0x4, 0x4, 0x0, 0x0, [0xc0, 0x3f00, 0xff0000, 0x3f0f]}, @generic={0x26, 0x10, 0x4, "1f36c39e3b332126b434846828fc55ff37b0a1b0b80542e7fbda1152fc3aba0a1043c8"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x58, 0x18, 0x8, 0x9b, "1bdc27ad", "aa742cd6"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x0, 0x0, 0x7, 0xf6, 0x6, 0x8}}}, &(0x7f0000000980)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="20063800000091baf1436192c90e72c088af7ea8a63e0666e404b9490e7ce870f6d1f9cd9d48ebb00584c0b3c59f548bee62e6238a12fbfbba3c1f568c75"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0xb, 0x2, "172f"}, &(0x7f0000000780)={0x40, 0xf, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @random="e3adfcdcc051"}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'm|'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x7}})
io_setup(0x6, &(0x7f0000000140)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x10000000000}])
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x4, &(0x7f0000000240)={0x1c, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}})

26m46.191981917s ago: executing program 1 (id=1566):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x6}, {0x4, 0xe}}}, 0x24}}, 0x40004)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32, @ANYRESOCT=r0], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

26m45.413890923s ago: executing program 1 (id=1570):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socket(0xb, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000000))
pipe2$watch_queue(0x0, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x100000000000f7)
keyctl$revoke(0x3, r3)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r5, 0x80044940, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94)
r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044560f, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e23, 0x3, 'sed\x00', 0x10, 0x60000000, 0xc}, {@empty, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x10001}}, 0x44)

26m43.938311385s ago: executing program 1 (id=1576):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x90000, 0x48)
r0 = msgget(0x3, 0x108)
msgsnd(r0, &(0x7f0000000340)={0x0, "70881a57e9e7793ecf16eda116799bdfda4fcd39f241c42cc8874577fe2eef74b20473bfc18012eccd7114b1b12b3bc26899615368d544f8f2a3f0a79e3e5387d8bb01cf076cde0146b03d0d3a4e08443534b0392e1cbabbf81cba490c5625584fe06ed71bf1ac80498f464590cad376a55b66c38ec5909f6ad79c2566eff90bb090999d4998849ef0d2a1117a87b22fe51ec98de3c432b59a74903d0d38ee3d7f1c16ba40da6b3eeb94"}, 0xae, 0x800)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1b6)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x4}, 0x8)
listen(r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18)
utimensat(r5, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={<r7=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, r7}}, 0x30)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
io_pgetevents(0x0, 0x10002, 0x0, 0x0, &(0x7f0000000700)={0x77359400}, 0x0)

26m43.540584568s ago: executing program 1 (id=1578):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x33565348, 0x5, 0x98, 0x3, 0x6, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}})

26m42.980586062s ago: executing program 1 (id=1581):
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x80102, 0x100)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d2060500423c3bb7232500182c00fe8000000000000000000000000000bbfe800000006202020000000500000000000000"], 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
io_setup(0x8, &(0x7f0000000040)=<r5=>0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"}}}}}, 0x0)
close(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
r7 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=r4, @ANYRES32=0x0], 0x2c2)
r8 = openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000000300))
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3e, 0x200, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}}, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00')
readahead(r10, 0x8, 0x9)

26m42.57246451s ago: executing program 32 (id=1581):
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x80102, 0x100)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d2060500423c3bb7232500182c00fe8000000000000000000000000000bbfe800000006202020000000500000000000000"], 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
io_setup(0x8, &(0x7f0000000040)=<r5=>0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"}}}}}, 0x0)
close(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
r7 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=r4, @ANYRES32=0x0], 0x2c2)
r8 = openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000000300))
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3e, 0x200, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}}, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00')
readahead(r10, 0x8, 0x9)

24m44.972624683s ago: executing program 0 (id=2173):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)=':/,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3/\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xaeqKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_\xc0\xe1\x9d><T+\xfe\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xaeP\f0\xf6Dfz\xf0.\xff\xc2a\x16\xd9\xdc1\xa4\xdf\xafZ\b\xb4IE\x1a\xb6\x8e\xa2\x1c}\x8d\x9e\x87\x96\xe41\xe2\xa3\x9ad\x90\x94\v\xcc', 0xfeffffff00000000)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
fchdir(r3)
exit(0xffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x10043b, 0x7fff, 0xfffffffa})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, 0x0)
fchmod(0xffffffffffffffff, 0x32)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setattr(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c})
ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$nci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3)

24m44.027722187s ago: executing program 0 (id=2179):
syz_emit_ethernet(0x5c, &(0x7f0000000240)={@multicast, @random="000803006600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x26, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "437d65c32f71"}]}}}}}}, 0x0)

24m43.937289115s ago: executing program 0 (id=2180):
process_vm_readv(0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000480)=""/152, 0xfffffffffffffd5a}], 0x2, &(0x7f0000000280)=[{&(0x7f0000000580)=""/209}, {&(0x7f0000000680)=""/226}, {&(0x7f00000001c0)=""/20}, {&(0x7f0000000880)=""/243}, {&(0x7f0000000980)=""/207}, {&(0x7f0000000200)}, {&(0x7f0000000f00)=""/174}], 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f00000005c0)=""/4142, 0x102e}, {&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x6}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xeb)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

24m43.641530217s ago: executing program 0 (id=2182):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="02031a00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

24m43.525716388s ago: executing program 0 (id=2183):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="02031a00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) (fail_nth: 2)

24m42.574225555s ago: executing program 0 (id=2186):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
r2 = syz_io_uring_setup(0x160d, &(0x7f0000000140)={0x0, 0xaa6a, 0x80}, &(0x7f0000000240)=<r3=>0x0, &(0x7f00000000c0))
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffff, 0x7c}}, 0x30)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=<r7=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001200)={{r1}, r7, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061067000000000000001"]}, @subvolid=0x8})
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r8, 0x107, 0x8, &(0x7f0000000000), 0x4)
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r10, 0x8b1b, &(0x7f0000000040))

24m27.096426471s ago: executing program 33 (id=2186):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
r2 = syz_io_uring_setup(0x160d, &(0x7f0000000140)={0x0, 0xaa6a, 0x80}, &(0x7f0000000240)=<r3=>0x0, &(0x7f00000000c0))
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffff, 0x7c}}, 0x30)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=<r7=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001200)={{r1}, r7, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061067000000000000001"]}, @subvolid=0x8})
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r8, 0x107, 0x8, &(0x7f0000000000), 0x4)
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r10, 0x8b1b, &(0x7f0000000040))

7m50.05861656s ago: executing program 2 (id=6251):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20)
close(r0)

7m49.89807516s ago: executing program 2 (id=6252):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x38, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x38}}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2e, 0x9, 0x7fff, {0xe, @esp_ip4_spec={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2fe, 0x8}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10, 0x8f75, [0x6, 0x3]}, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x30}, @empty, 0x2, 0x34}, {0x0, @empty, 0x8, 0xd, [0x7ff, 0x6f8]}, 0xffffffff7fffffff, 0x5}}})
syz_open_dev$dri(0x0, 0xffffffff, 0x200)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x30c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, 0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket(0xf, 0x6, 0xa0b)
sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40008c0}, 0xc0014)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendto$inet6(r8, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9ea685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902060f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa415ac4d31c4f7a1", 0x8b, 0x0, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x2c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r10, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)

7m48.186166312s ago: executing program 2 (id=6258):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r2=>0x0})
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300000000000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180))
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r0, r5, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x8008af26, &(0x7f00000000c0)={0x0, r5})

7m48.040511144s ago: executing program 2 (id=6259):
r0 = socket$kcm(0x11, 0x3, 0x0)
pipe2(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x380442, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000700)={0xa, 0x3, &(0x7f0000000180)=[0x401, 0x9, 0x9], &(0x7f0000000140), &(0x7f00000000c0), 0x0})
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2)

7m46.896566458s ago: executing program 2 (id=6264):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1a024)
fanotify_init(0x10, 0x2)
unshare(0x2c020400)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24060084}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8)
sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x18, 0xdd, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x2c}}, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3)
unshare(0x6000080)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x44, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x44}}, 0x40440d0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05707e7ee7a606522689611e7f937b43062618d8a80c389e572a48284d5dfc06f1223aaa2c99363036414689169285f897ed5b4fd45538c3b9efdd135a08811a249d05679e8323b7cc067c18a2bf6d29ae89adb2a2d2af8c9f2f89533c0a52acba8bd25b050db25dc538c338e216f4bca8e089b75add29b6938d5217965ebacd8a867a9dd2737dfb4ad5361b005a8b64eba471a2f414ad8559025068faf2c4e975ed3ab05a6d5aca736b45ec02"], 0x48}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x5)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7m46.579750278s ago: executing program 2 (id=6266):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x8, &(0x7f00000002c0)="59c163cc", 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x60}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xcc}}, 0x40814)

7m45.740092657s ago: executing program 34 (id=6266):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x8, &(0x7f00000002c0)="59c163cc", 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x60}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xcc}}, 0x40814)

8.34261314s ago: executing program 7 (id=8011):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd67, 0x0, 0x0, 0x0, 0x51}, 0x40408c5)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setstatus(r3, 0x4, 0x42800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}], 0x1, 0x100000c01, 0x38, 0x0, 0x42, 0x6e})
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x48001059, 0xffffffffffffffff, 0x0)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
unshare(0x68040200)
syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0)

7.708909422s ago: executing program 3 (id=8014):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fffffff}]})
getgid()
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x24000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendto$inet6(r7, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(r5)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x105400, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000180))
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)

5.350535032s ago: executing program 3 (id=8018):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x7}]}, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000580)="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", 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x20044884)

5.177895772s ago: executing program 3 (id=8020):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x7}]}, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000580)="a78303b59052e9e5027594875e1a6203730f662160d80d10116b5664e3e9bf83066ad72e220f3791a56e11246a9f216ff327d5290000000000000000c0132aa06ca890fb41f4b2dfd49de6cb41e6fcea4f6eed62c89873cdf738ba420f0c925e8049f2de499f186e48141eadcc9d4e084f33fd152bdd03fa70a1cd7b67c9989dd63da4797f004106c7587d10bc95e6fbd35618ea1fcdab4adf3bc9385dca8fa10ba0341b523dc65824605349d16b08741bab824608b95bb6248275c9feff0a40a1704f69e8590365df3c6b81e97f311eedf72f20398820ae5a109ce6b981008db8496ed42115dd2156ce9b64287cc055755374b6ad986b5aa1c002d545343874098fd201a9b2f172137c711c954f5789dbfb65cc80", 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x20044884)

5.090547598s ago: executing program 4 (id=8021):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

4.815308731s ago: executing program 3 (id=8024):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00)
mkdir(&(0x7f0000002b40)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{&(0x7f00000001c0)=@tipc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/98, 0x62}], 0x5, &(0x7f0000000540)=""/145, 0x91}, 0x4800}, {{&(0x7f0000000600)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/32, 0x20}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000001800)=""/81, 0x51}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/245, 0xf5}], 0x7}, 0xffffff15}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000066c0)=""/112, 0x70}, {&(0x7f0000002a00)=""/79, 0x4f}, {&(0x7f0000002980)=""/26, 0x1a}, {&(0x7f0000002ac0)=""/71, 0x47}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/212, 0xd4}, {&(0x7f0000002c80)=""/250, 0xfa}, {&(0x7f0000002d80)=""/50, 0x32}, {&(0x7f0000002dc0)=""/5, 0x5}], 0x9, &(0x7f0000002e80)=""/224, 0xe0}, 0x4}, {{&(0x7f0000002f80)=@hci, 0x80, &(0x7f0000004380)=[{&(0x7f0000003000)}, {&(0x7f0000003040)=""/206, 0xce}, {&(0x7f0000003140)=""/52, 0x34}, {&(0x7f00000029c0)=""/39, 0x27}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/10, 0xa}, {&(0x7f0000004200)=""/138, 0x8a}, {&(0x7f00000042c0)=""/174, 0xae}], 0x8, &(0x7f00000043c0)=""/4096, 0x1000}, 0x808b}, {{&(0x7f00000053c0)=@pptp, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005440)=""/64, 0x40}, {&(0x7f0000005480)=""/130, 0x82}, {&(0x7f0000005540)=""/92, 0x5c}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x4}, 0x81}], 0x5, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x80000042, 0xf5, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10)
fstat(0xffffffffffffffff, 0x0)
setreuid(0x0, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20050800)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x1f, 0x6, 0x0})

4.644592943s ago: executing program 5 (id=8025):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

4.644103621s ago: executing program 4 (id=8026):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3400df9aa474f8f98d539a76fc00c100090a000000000000000000000000000008000a40000000000900020073797a3100000000090001"], 0x5c}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0x215, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40020}, 0x4040000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}}, 0x0)

4.570393196s ago: executing program 3 (id=8027):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000303e1000004030704", @ANYRESDEC=0x0, @ANYRESOCT], &(0x7f0000000440)=ANY=[], 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)

4.430906102s ago: executing program 4 (id=8028):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x5)
getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4, 0x100})
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
sendmmsg$unix(r1, &(0x7f0000000300)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000440)="27e24c5495cc8b209507b6862ec5b77d76cfa730daf7c51c31adb0cbdae1549869f45e59d68d519adaa3467289e6f9cfbfe8981143712940e5c5c25acc780ca9383945aac1d8df7f9606902d0fbe1e5a430be08d31fd3b92cb1f465f966284a5c53f25015cc635057ba3fef16708bba1876c840cfc46c1837fc385c5287492dd0e6258f47aa59110af066f4dd710bbba2f80c822112c2d1113cf74ae2b4eca24ec959dcffc258b9720ddb87e44b90ab807b2bb124428966f129dc83f60826751b8ef52814b0dd6afba211f9f", 0xcc}, {&(0x7f00000001c0)="b5b41f488bc71549d90998439ac292493707353744b92d698c7213206d9a4b177d3623a3eb1d94a467b7d3c8f40a8626ea6522820ed55300aae7c63ae32d1c5de0292d9cba04dc5b31776129ca4a77261b2a748a5f337faf99140108ef5c1595812cbd63996baf4f2184176e214c088c906d79", 0x73}, {&(0x7f0000000540)="4beb279c4dc18ac74572e86f3673601ec2809f2bdebf918bc532ffcb2c7c5df7f0ad1e515c1e4b36d56e79f3b622927c844c086c504cc0769272b1d13954d5d100528e431c7bb5f6e58530455616456e94b28d10dfcad39227c5cf8b5124bb6f2acd641604d40d6acbbbd21eb2d6fb12ad4fb8d5d86ec2c1d5ee50da012993c7fd2a4895714bcebbc4a975", 0x8b}], 0x3, 0x0, 0x0, 0x40}}], 0x1, 0x8000)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))

4.383088639s ago: executing program 5 (id=8029):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00')
preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000840)=""/158, 0x9e}], 0x1, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300070400000000000a0000000010020017000000000000000002fffffffbbb9219816d50902c7e702d53aad8aa6dd1d384e0532b6e2f47187217844175739cf1d0c37472e5481e04f24971c82354a448122ea0920a1ec8dd6cb34cc1ed2af1240f600dbe5df5ddb1ef7c0ae45aaba1bbcac2cace64a575f8a5c81048ed59356e3c5a338ab843f87603a6bb42"], 0x20}}, 0x0)
socket(0x2b, 0x1, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

4.188360696s ago: executing program 7 (id=8030):
syz_open_dev$rtc(&(0x7f0000000300), 0x6, 0x440800)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xb00, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)

2.924655151s ago: executing program 5 (id=8034):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = epoll_create(0x752)
openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x100800, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100))

2.714016592s ago: executing program 6 (id=8036):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x20044884)

2.628705616s ago: executing program 5 (id=8037):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4100)

2.53281063s ago: executing program 6 (id=8038):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x632383, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000240)={0xd5, 0x0, 0x1b})
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x119601, 0x42)
fcntl$notify(r2, 0x402, 0x36)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000000)={@local, @initdev, @remote}, &(0x7f0000000080)=0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0xd34b, 0x114}, 0x10, 0x4})
listen(r4, 0x2)
r6 = fcntl$dupfd(r4, 0x406, r3)
recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x60000}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x632383, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000240)={0xd5, 0x0, 0x1b}) (async)
open(&(0x7f00000000c0)='./file1\x00', 0x119601, 0x42) (async)
fcntl$notify(r2, 0x402, 0x36) (async)
getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000000)={@local, @initdev, @remote}, &(0x7f0000000080)=0xc) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6(0xa, 0x5, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) (async)
write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0xd34b, 0x114}, 0x10, 0x4}) (async)
listen(r4, 0x2) (async)
fcntl$dupfd(r4, 0x406, r3) (async)
recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x60000}], 0x1, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)

2.280511515s ago: executing program 5 (id=8039):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3400df9aa474f8f98d539a76fc00c100090a000000000000000000000000000008000a40000000000900020073797a3100000000090001"], 0x5c}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0x215, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40020}, 0x4040000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}}, 0x0)

2.176384802s ago: executing program 6 (id=8040):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0xda, 0x2, 0x6, "7d9d618aa6d0261e4bbbda8618d214a12fc1b1b496ce4079df0f604118dceb3e", 0x47504a50})
write$binfmt_script(r5, &(0x7f0000000680)={'#! ', './file1/../file0', [{0x20, '\x80\xcf\x14\x95X\xe1\x1fD\xf7\x1c\x97\xee\xe1\xeb`\xdc\x18\xbej\xe4l\x95\x95\x00\x00\x01\x00\x00\x00\x00\x00\xb7\xd7\x90dS\xeb[\xcd\xef\xd23'}], 0xa, "0002783348b29e7bca0e0500000000000000b16e33ea96f57d49c226f35d0a5f5f940586de70739ae8f7d3d1d89797bfe64b9cd7e6225f9d05078b01"}, 0x7b)
write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})

1.980726754s ago: executing program 6 (id=8041):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file1/../file0', [{0x20, '\x80\xcf\x14\x95X\xe1\x1fD\xf7\x1c\x97\xee\xe1\xeb`\xdc\x18\xbej\xe4l\x95\x95\x00\x00\x01\x00\x00\x00\x00\x00\xb7\xd7\x90dS\xeb[\xcd\xef\xd23'}], 0xa, "0002783348b29e7bca0e0500000000000000b16e33ea96f57d49c226f35d0a5f5f940586de70739ae8f7d3d1d89797bfe64b9cd7e6225f9d05078b01"}, 0x7b)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x22, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})

1.883874273s ago: executing program 7 (id=8042):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="680000000201010200000000000000000a0000064c00198008000200410b0000080002001802000008000200380100000800010000040000000001002204000008000200000a000008000100880800000800010020000000080001005000000008001a4000000005"], 0x68}, 0x1, 0x0, 0x0, 0xc040}, 0x4004000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x10, 0x9, 0x20, 0x5}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socketpair$unix(0x1, 0xe276dda438ed6c14, 0x0, &(0x7f00000003c0))
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x13, 0x0, &(0x7f0000001940)) (async)
r5 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x202000, 0x0)
copy_file_range(r5, &(0x7f0000000040)=0x5, r1, 0x0, 0x7, 0x0) (async)
getsockopt$inet6_mreq(r2, 0x6, 0x1b, 0x0, &(0x7f0000001840))
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1000400a44000e800500010003000000040002000500010000000000050001000800000004000200040002000500010007000000050001000a00000004000200050001000e00000018000e800400020004000200050001000a00000004000200080007000900000008000100ffffffff08000b000300000008000d000900000028000e8005000100ad000000040002000500010005000000050001000600000005000100e1000000"], 0xc0}}, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) (async, rerun: 64)
r6 = socket$xdp(0x2c, 0x3, 0x0) (async)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006"], 0x70}}, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64)
socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 32)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (rerun: 32)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000380)="48000000150081fb0259ae08040204000aff0f110000000401d174a4ffa4d8643aec0caa94bd9a5f5901546fabca1b4e7d06a6bd7c493872f750375ed08a562af5740700b8c11941", 0x48}], 0x1}, 0x2000000) (async, rerun: 32)
shutdown(r8, 0x1) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000280)=0x84) (async, rerun: 32)
r10 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32)
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4)

1.820821693s ago: executing program 6 (id=8043):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfff7f236}, {0x6, 0xff}, {0x2, 0x1, 0xde, 0xffffffff}, {0x3256, 0x3, 0x7, 0x1}]}, 0x8)
sendmmsg$unix(r0, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="2200f355877332b96189bb2a2fc4d8a7a35635083ce95b1afabea83b8cf39841bda5934e", 0x24}], 0x1, 0x0, 0x0, 0x4000880}}], 0x1, 0x4002104)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r5, 0x541b, 0x0)
shutdown(r0, 0x1)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0xfa}, 0x2c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x0)

1.613445957s ago: executing program 7 (id=8044):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x7}]}, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000580)="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", 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x20044884)

1.603808275s ago: executing program 5 (id=8045):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
r1 = socket$inet(0xa, 0x801, 0x100)
listen(r1, 0x81)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x50})
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484)

1.48968944s ago: executing program 4 (id=8046):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/174, 0xae}], 0x1}, 0x6}], 0x1, 0x140, 0x0)

1.432119179s ago: executing program 6 (id=8047):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
write$tun(r0, 0x0, 0x96)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000)
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
close(0x3)
dup(r2)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000, 0x4000000}, &(0x7f00000000c0)={0x9, 0x0, 0x5, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)

1.382857828s ago: executing program 7 (id=8048):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "f2f3061871182c9d", "390db41cd06a5a72f16e2da02153604facdb9df844437cf4e020addaacf66dfd", "0733378d", "edaac78e052664c0"}, 0x38)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0)

1.248465242s ago: executing program 4 (id=8049):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [], [0x9, 0x0, 0xfffffffe], [0xfffffffffffffffc]})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6})
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x3, 0x400000006]})
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmod00000000000240000,user_id=\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r7])
read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffffc000, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88306, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, 0x0)
write$FUSE_INIT(r8, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50)

681.975179ms ago: executing program 3 (id=8050):
r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$netlink(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x2000)
readv(r4, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
r5 = socket(0x10, 0x80002, 0x0)
bind$netlink(r5, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="020028bd7000fddbdf250800000008000400ff020000000000dff1049780000000000000e291f193000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x80)
r8 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@newtfilter={0x4c4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x368, 0x6, 0x5, 0x5f, 0x81, 0xe6, 0x5, 0x10, 0x4, 0x2, 0x4, 0x84, 0x9, 0x7, 0x17ee, 0x8001, 0x2, 0x6, 0x1, 0x0, 0xb, 0x1, 0xffffffff, 0x35ab, 0x4, 0xddc, 0x1, 0xa, 0x0, 0x2, 0x1, 0xffffffff, 0x3, 0x72820263, 0x9, 0x7, 0x0, 0x5, 0x7, 0x0, 0xfffffff9, 0x4, 0x7, 0x6, 0xc, 0xfff, 0x5, 0x5a9, 0x7fff, 0x49d2, 0xa, 0x100, 0x1b, 0x0, 0x3, 0x9, 0x28000000, 0x0, 0x8, 0x6, 0xf, 0x2735, 0x7ff, 0x0, 0x80, 0x101, 0x7f, 0x8, 0x1, 0x8, 0x9d, 0x391, 0x7, 0x6, 0x7, 0x6, 0xc4, 0xb, 0xec0, 0x40, 0x8, 0x8001, 0x2, 0x40, 0x7, 0x8, 0x7566, 0xb, 0x1, 0x4, 0x6, 0x10, 0x9, 0xc054, 0x6, 0xfffffff9, 0x4, 0x4, 0x8, 0x4, 0xea, 0x3, 0x3, 0x0, 0x9843, 0xb9a, 0x40, 0x2, 0x3, 0x0, 0x4, 0x2, 0xa94, 0x7, 0x0, 0x6, 0x0, 0x8000c, 0x1, 0x3, 0x0, 0xfffffff8, 0xd7, 0x80000001, 0x40, 0xfff, 0x4, 0x9, 0x9, 0xaa, 0x7fffffff, 0x9, 0x0, 0x80, 0x3ff, 0x6, 0x3, 0x800, 0xc9, 0x1, 0x2, 0xe, 0x1, 0x8001, 0x7ff, 0x40, 0x4, 0x100, 0x8, 0x1, 0x1, 0xae0c, 0x1df, 0x6, 0x7, 0x1, 0x6, 0x0, 0x200, 0x7, 0x200, 0x9, 0xffff, 0x2f, 0x0, 0xffffffff, 0x7ff, 0x6, 0xb029, 0x8, 0x2, 0x2, 0x80, 0x100000, 0x2, 0x6, 0x20000, 0x10001, 0x5, 0x4, 0x400, 0x58a2, 0x1ff, 0xff, 0x8, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3, 0x81, 0xff, 0x6, 0xffffffff, 0x5, 0xfffffff8, 0x1, 0x10000, 0xd, 0x2, 0x0, 0x8, 0x5c8d, 0x5, 0x1385, 0x800, 0x9, 0x8, 0x80, 0x836, 0x8c66, 0x8, 0x1, 0x8, 0x3, 0xe8c, 0x47c4, 0x9f, 0x4, 0x2, 0x8, 0x7, 0xa6f, 0x9, 0x1, 0x2000000c, 0x5, 0x7, 0x40, 0x5, 0x4a5e, 0xd32c, 0x1000, 0x4c, 0xfffffffc, 0x1, 0x442, 0x1000, 0x1, 0x7, 0x8, 0x8, 0x9, 0x8000, 0x51c, 0x7, 0x3, 0x5, 0x3, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x874}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)

570.545304ms ago: executing program 7 (id=8051):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000480)={0x0, 0xfffe, 0x30, 0x20000000000005, 0x3b0000}, &(0x7f00000009c0)=0x18)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x80800)
io_setup(0x42, &(0x7f0000000100)=<r7=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0)
pipe2(&(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
ioctl$VIDIOC_G_AUDOUT(r10, 0x80345631, &(0x7f0000000040))
splice(r10, 0x0, r9, 0x0, 0x4, 0x0)
syz_clone(0x4020000, 0x0, 0x0, 0x0, 0x0, 0x0)
dup3(r8, r11, 0x0)
sendmmsg$alg(r6, 0x0, 0x0, 0x5)
io_submit(r7, 0x0, &(0x7f0000000580))

0s ago: executing program 4 (id=8052):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0xf00}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

kernel console output (not intermixed with test programs):

042645][T32081] tunl0: left allmulticast mode
[ 1948.094293][T32081] gre0: left allmulticast mode
[ 1948.152181][T32081] gretap0: left allmulticast mode
[ 1948.165228][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1948.201348][T32081] erspan0: left allmulticast mode
[ 1948.213986][T32081] ip_vti0: left allmulticast mode
[ 1948.230077][T32081] ip6_vti0: left allmulticast mode
[ 1948.242611][T32081] sit0: left allmulticast mode
[ 1948.260455][T32081] ip6tnl0: left allmulticast mode
[ 1948.266985][T32081] ip6gre0: left allmulticast mode
[ 1948.283196][T32081] syz_tun: left allmulticast mode
[ 1948.295014][T32081] ip6gretap0: left allmulticast mode
[ 1948.311166][T32081] vcan0: left allmulticast mode
[ 1948.317144][T32081] bond0: left allmulticast mode
[ 1948.322615][T32081] bridge0: left allmulticast mode
[ 1948.332259][T32081] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1948.340933][T32081] team0: left allmulticast mode
[ 1948.348053][T19565] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1948.360698][T32081] 8021q: adding VLAN 0 to HW filter on device team0
[ 1948.368938][T32081] dummy0: left allmulticast mode
[ 1948.379608][T32081] nlmon0: left allmulticast mode
[ 1948.391512][T32081] caif0: left allmulticast mode
[ 1948.399004][T32081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1948.519796][T19565] usb 4-1: Using ep0 maxpacket: 32
[ 1948.530745][T19565] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1948.555446][T19565] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1948.583300][T19565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1948.608328][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1948.623735][T19565] usb 4-1: config 0 descriptor??
[ 1948.634537][T19565] dvb-usb: found a 'TeVii S662' in warm state.
[ 1948.643835][T19565] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1948.651689][T19565] dvb-usb: bulk message failed: -22 (2/0)
[ 1948.668965][T19565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1948.708751][T19565] dvbdev: DVB: registering new adapter (TeVii S662)
[ 1948.725149][T19565] usb 4-1: media controller created
[ 1948.747679][T19565] dvb-usb: bulk message failed: -22 (6/0)
[ 1948.770297][T19565] dw2102: i2c transfer failed.
[ 1948.787717][T19565] dvb-usb: bulk message failed: -22 (6/0)
[ 1948.794011][T19565] dw2102: i2c transfer failed.
[ 1948.837402][T32083] dvb-usb: bulk message failed: -22 (4/0)
[ 1948.862547][T32083] dw2102: i2c transfer failed.
[ 1948.871721][T19565] dvb-usb: bulk message failed: -22 (6/0)
[ 1948.890671][T19565] dw2102: i2c transfer failed.
[ 1948.895500][T19565] dvb-usb: bulk message failed: -22 (6/0)
[ 1948.902414][T19565] dw2102: i2c transfer failed.
[ 1948.907212][T19565] dvb-usb: bulk message failed: -22 (6/0)
[ 1948.913466][T19565] dw2102: i2c transfer failed.
[ 1948.918720][T19565] dvb-usb: bulk message failed: -22 (6/0)
[ 1948.924766][T19565] dw2102: i2c transfer failed.
[ 1948.976924][T32106] debugfs: '!' already exists in 'ieee80211'
[ 1949.007038][T32107] input: syz1 as /devices/virtual/input/input350
[ 1949.016596][T19565] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1949.074156][T19565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1949.137282][T19565] dvb-usb: bulk message failed: -22 (3/0)
[ 1949.324894][T19565] dw2102: command 0x0e transfer failed.
[ 1949.356679][T19565] dvb-usb: bulk message failed: -22 (3/0)
[ 1949.379814][T19565] dw2102: command 0x0e transfer failed.
[ 1949.422875][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1949.577648][T27726] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1949.747654][T19565] dvb-usb: bulk message failed: -22 (3/0)
[ 1949.753538][T19565] dw2102: command 0x0e transfer failed.
[ 1949.774297][T19565] dvb-usb: bulk message failed: -22 (3/0)
[ 1949.781675][T19565] dw2102: command 0x0e transfer failed.
[ 1949.797981][T19565] dvb-usb: bulk message failed: -22 (1/0)
[ 1949.817664][T19565] dw2102: command 0x51 transfer failed.
[ 1949.851176][T19565] dvb-usb: bulk message failed: -22 (5/0)
[ 1949.857654][T27726] usb 7-1: Using ep0 maxpacket: 8
[ 1949.888066][T27726] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1949.925049][T19565] dw2102: i2c probe for address 0x68 failed.
[ 1949.937666][T19565] dvb-usb: bulk message failed: -22 (5/0)
[ 1949.946609][T27726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1949.970344][T27726] usb 7-1: Product: syz
[ 1949.974724][T27726] usb 7-1: Manufacturer: syz
[ 1949.979766][T19565] dw2102: i2c probe for address 0x69 failed.
[ 1949.979786][T19565] dvb-usb: bulk message failed: -22 (5/0)
[ 1949.979822][T19565] dw2102: i2c probe for address 0x6a failed.
[ 1949.979833][T19565] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1949.979845][T19565] dvb-usb: no frontend was attached by 'TeVii S662'
[ 1950.152517][T27726] usb 7-1: SerialNumber: syz
[ 1950.167768][T19565] rc_core: IR keymap rc-tt-1500 not found
[ 1950.170467][T27726] usb 7-1: config 0 descriptor??
[ 1950.197930][T19565] Registered IR keymap rc-empty
[ 1950.225707][T19565] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[ 1950.254011][T19565] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input351
[ 1950.303693][T19565] dvb-usb: schedule remote query interval to 250 msecs.
[ 1950.330197][T19565] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1950.346779][T19565] dvb-usb: TeVii S662 successfully initialized and connected.
[ 1950.410157][T19565] usb 4-1: USB disconnect, device number 58
[ 1950.417819][T27726] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1950.484130][T32125] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7626'.
[ 1950.584097][T19565] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[ 1950.729845][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1950.801729][T32132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1951.094470][T32133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1951.095562][T32133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1951.255900][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1951.778408][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1951.907710][ T5947] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1951.927858][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1952.037804][ T5947] usb 4-1: device descriptor read/64, error -71
[ 1952.278073][ T5947] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1952.353995][T32153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7636'.
[ 1952.397374][T27726] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1952.417906][ T5947] usb 4-1: device descriptor read/64, error -71
[ 1952.448555][T27726] usb 7-1: USB disconnect, device number 2
[ 1952.529635][ T5947] usb usb4-port1: attempt power cycle
[ 1953.222054][ T2994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1953.222908][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1953.258024][ T5947] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1953.278231][ T5947] usb 4-1: device descriptor read/8, error -71
[ 1953.427923][T32164] debugfs: '!' already exists in 'ieee80211'
[ 1953.547990][ T5947] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1953.628538][ T5947] usb 4-1: device descriptor read/8, error -71
[ 1953.668825][T32164] input: syz1 as /devices/virtual/input/input353
[ 1953.714747][T32173] netlink: 277 bytes leftover after parsing attributes in process `syz.7.7641'.
[ 1953.740746][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1953.762435][ T5947] usb usb4-port1: unable to enumerate USB device
[ 1953.769886][T32173] netlink: 277 bytes leftover after parsing attributes in process `syz.7.7641'.
[ 1953.873480][T32176] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7643'.
[ 1954.383885][T32181] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1954.777850][T19565] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1954.857853][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1954.947677][T19565] usb 6-1: Using ep0 maxpacket: 8
[ 1954.954346][T19565] usb 6-1: config 0 has an invalid interface number: 170 but max is 0
[ 1954.975435][T19565] usb 6-1: config 0 has no interface number 0
[ 1954.997614][T19565] usb 6-1: config 0 interface 170 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[ 1955.012058][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1955.067641][T19565] usb 6-1: config 0 interface 170 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88
[ 1955.117598][T19565] usb 6-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024
[ 1955.164892][T32190] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[ 1955.197669][T19565] usb 6-1: config 0 interface 170 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024
[ 1955.248234][T19565] usb 6-1: config 0 interface 170 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 1955.297708][T19565] usb 6-1: config 0 interface 170 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8
[ 1955.321774][T19565] usb 6-1: config 0 interface 170 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5
[ 1955.382910][T19565] usb 6-1: New USB device found, idVendor=7366, idProduct=f8cb, bcdDevice=3a.11
[ 1955.407798][T19565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1955.416423][T19565] usb 6-1: Product: syz
[ 1955.460749][T19565] usb 6-1: Manufacturer: syz
[ 1955.465434][T19565] usb 6-1: SerialNumber: syz
[ 1955.500487][T19565] usb 6-1: config 0 descriptor??
[ 1955.519310][T32183] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1955.562849][T32183] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1955.811311][T32201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7651'.
[ 1956.046413][T19565] usb 6-1: USB disconnect, device number 58
[ 1956.178487][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1956.957799][T19565] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1957.009339][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1957.138174][T19565] usb 6-1: Using ep0 maxpacket: 16
[ 1957.161373][T19565] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1957.193937][T19565] usb 6-1: config 0 has no interface number 0
[ 1957.229518][T19565] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1957.248733][T19565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1957.256866][T19565] usb 6-1: Product: syz
[ 1957.293890][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1957.318040][T19565] usb 6-1: Manufacturer: syz
[ 1957.322715][T19565] usb 6-1: SerialNumber: syz
[ 1957.342941][T19565] usb 6-1: config 0 descriptor??
[ 1957.380515][T19565] hub 6-1:0.132: bad descriptor, ignoring hub
[ 1957.386660][T19565] hub 6-1:0.132: probe with driver hub failed with error -5
[ 1957.453456][T19565] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input354
[ 1957.514905][T32229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7661'.
[ 1957.822509][T32234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7655'.
[ 1957.937377][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1957.961825][T32237] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1958.479428][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1958.896367][T32241] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[ 1958.928617][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1958.939055][T25877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1959.738617][T32261] FAULT_INJECTION: forcing a failure.
[ 1959.738617][T32261] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1959.754443][T32261] CPU: 0 UID: 0 PID: 32261 Comm: syz.4.7670 Not tainted syzkaller #0 PREEMPT(full) 
[ 1959.754477][T32261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1959.754490][T32261] Call Trace:
[ 1959.754498][T32261]  <TASK>
[ 1959.754507][T32261]  dump_stack_lvl+0x189/0x250
[ 1959.754537][T32261]  ? __pfx____ratelimit+0x10/0x10
[ 1959.754559][T32261]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1959.754581][T32261]  ? __pfx__printk+0x10/0x10
[ 1959.754600][T32261]  ? fs_reclaim_acquire+0x7d/0x100
[ 1959.754628][T32261]  should_fail_ex+0x414/0x560
[ 1959.754660][T32261]  prepare_alloc_pages+0x213/0x610
[ 1959.754694][T32261]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1959.754718][T32261]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1959.754747][T32261]  ? policy_nodemask+0x27c/0x720
[ 1959.754771][T32261]  ? load_gs_index+0x169/0x190
[ 1959.754793][T32261]  alloc_pages_mpol+0x232/0x4a0
[ 1959.754822][T32261]  vma_alloc_folio_noprof+0xe4/0x200
[ 1959.754850][T32261]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1959.754888][T32261]  folio_prealloc+0x30/0x180
[ 1959.754915][T32261]  do_wp_page+0x1231/0x5800
[ 1959.754958][T32261]  ? __pfx_do_wp_page+0x10/0x10
[ 1959.754978][T32261]  ? do_raw_spin_lock+0x121/0x290
[ 1959.755003][T32261]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1959.755035][T32261]  __handle_mm_fault+0x1033/0x5440
[ 1959.755081][T32261]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1959.755124][T32261]  ? find_vma+0xe7/0x160
[ 1959.755146][T32261]  ? __pfx_find_vma+0x10/0x10
[ 1959.755170][T32261]  handle_mm_fault+0x40a/0x8e0
[ 1959.755204][T32261]  do_user_addr_fault+0x764/0x1390
[ 1959.755240][T32261]  exc_page_fault+0x76/0xf0
[ 1959.755262][T32261]  asm_exc_page_fault+0x26/0x30
[ 1959.755280][T32261] RIP: 0010:__put_user_4+0xd/0x20
[ 1959.755300][T32261] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 45 03 00 90 90 90 90 90 90 90 90 90 90
[ 1959.755316][T32261] RSP: 0018:ffffc90003c1fbb8 EFLAGS: 00050206
[ 1959.755334][T32261] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000000080002000
[ 1959.755347][T32261] RDX: 0000000000000000 RSI: ffffffff8d71699d RDI: ffffffff8b9e6fe0
[ 1959.755359][T32261] RBP: ffffc90003c1fed0 R08: 0000000000000000 R09: ffffffff8209f780
[ 1959.755372][T32261] R10: dffffc0000000000 R11: ffffed100ffe92df R12: 0000000080000000
[ 1959.755385][T32261] R13: 1ffff92000783f90 R14: 0000000000000000 R15: 00000000fffffff2
[ 1959.755404][T32261]  ? __might_fault+0xb0/0x130
[ 1959.755436][T32261]  __se_sys_move_pages+0xc7f/0x16a0
[ 1959.755459][T32261]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1959.755495][T32261]  ? __pfx___se_sys_move_pages+0x10/0x10
[ 1959.755514][T32261]  ? ksys_write+0x1cb/0x250
[ 1959.755542][T32261]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1959.755563][T32261]  ? __pfx_vfs_write+0x10/0x10
[ 1959.755588][T32261]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1959.755612][T32261]  ? __fget_files+0x3a0/0x420
[ 1959.755653][T32261]  ? __ia32_sys_move_pages+0x21/0xf0
[ 1959.755675][T32261]  __do_fast_syscall_32+0xb6/0x2b0
[ 1959.755696][T32261]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1959.755719][T32261]  do_fast_syscall_32+0x34/0x80
[ 1959.755739][T32261]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1959.755759][T32261] RIP: 0023:0xf7f82539
[ 1959.755774][T32261] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1959.755788][T32261] RSP: 002b:00000000f545555c EFLAGS: 00000206 ORIG_RAX: 000000000000013d
[ 1959.755805][T32261] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064
[ 1959.755816][T32261] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[ 1959.755828][T32261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1959.755839][T32261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1959.755849][T32261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1959.755872][T32261]  </TASK>
[ 1960.254568][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1960.397898][ T5947] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1960.567980][ T5947] usb 4-1: Using ep0 maxpacket: 16
[ 1960.580526][ T5947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1960.605468][ T5947] usb 4-1: config 0 has no interfaces?
[ 1960.619616][ T5947] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[ 1960.634180][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1960.645001][ T5947] usb 4-1: config 0 descriptor??
[ 1961.009751][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1961.111638][ T5930] usb 4-1: USB disconnect, device number 63
[ 1961.449746][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1961.705210][T32270] FAULT_INJECTION: forcing a failure.
[ 1961.705210][T32270] name failslab, interval 1, probability 0, space 0, times 0
[ 1961.718839][T32270] CPU: 1 UID: 0 PID: 32270 Comm: syz.3.7674 Not tainted syzkaller #0 PREEMPT(full) 
[ 1961.718865][T32270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1961.718878][T32270] Call Trace:
[ 1961.718886][T32270]  <TASK>
[ 1961.718895][T32270]  dump_stack_lvl+0x189/0x250
[ 1961.718922][T32270]  ? __pfx____ratelimit+0x10/0x10
[ 1961.718943][T32270]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1961.718964][T32270]  ? __pfx__printk+0x10/0x10
[ 1961.718988][T32270]  ? __pfx___might_resched+0x10/0x10
[ 1961.719006][T32270]  ? fs_reclaim_acquire+0x7d/0x100
[ 1961.719031][T32270]  should_fail_ex+0x414/0x560
[ 1961.719063][T32270]  should_failslab+0xa8/0x100
[ 1961.719097][T32270]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1961.719120][T32270]  ? nl80211_get_station+0x1aa/0x5d0
[ 1961.719143][T32270]  nl80211_get_station+0x1aa/0x5d0
[ 1961.719164][T32270]  ? trace_contention_end+0x39/0x120
[ 1961.719184][T32270]  ? __pfx_nl80211_get_station+0x10/0x10
[ 1961.719199][T32270]  ? __mutex_lock+0x335/0x1350
[ 1961.719262][T32270]  ? nl80211_pre_doit+0x4f1/0x930
[ 1961.719291][T32270]  genl_family_rcv_msg_doit+0x212/0x300
[ 1961.719323][T32270]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1961.719370][T32270]  genl_rcv_msg+0x60e/0x790
[ 1961.719399][T32270]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1961.719421][T32270]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1961.719440][T32270]  ? __pfx_nl80211_get_station+0x10/0x10
[ 1961.719453][T32270]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1961.719477][T32270]  ? __asan_memcpy+0x40/0x70
[ 1961.719497][T32270]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1961.719523][T32270]  netlink_rcv_skb+0x208/0x470
[ 1961.719541][T32270]  ? __lock_acquire+0xab9/0xd20
[ 1961.719558][T32270]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1961.719584][T32270]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1961.719623][T32270]  ? down_read+0x1ad/0x2e0
[ 1961.719647][T32270]  genl_rcv+0x28/0x40
[ 1961.719667][T32270]  netlink_unicast+0x82c/0x9e0
[ 1961.719695][T32270]  ? __pfx_netlink_unicast+0x10/0x10
[ 1961.719715][T32270]  ? netlink_sendmsg+0x642/0xb30
[ 1961.719732][T32270]  ? skb_put+0x11b/0x210
[ 1961.719758][T32270]  netlink_sendmsg+0x805/0xb30
[ 1961.719787][T32270]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1961.719811][T32270]  ? __import_iovec+0x5d4/0x7f0
[ 1961.719828][T32270]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1961.719845][T32270]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1961.719865][T32270]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1961.719885][T32270]  __sock_sendmsg+0x21c/0x270
[ 1961.719906][T32270]  ____sys_sendmsg+0x505/0x830
[ 1961.719934][T32270]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1961.719973][T32270]  ___sys_sendmsg+0x21f/0x2a0
[ 1961.719997][T32270]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1961.720056][T32270]  ? __fget_files+0x2a/0x420
[ 1961.720079][T32270]  ? __fget_files+0x3a0/0x420
[ 1961.720107][T32270]  __sys_sendmsg+0x164/0x220
[ 1961.720130][T32270]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1961.720168][T32270]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1961.720192][T32270]  __do_fast_syscall_32+0xb6/0x2b0
[ 1961.720213][T32270]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1961.720234][T32270]  do_fast_syscall_32+0x34/0x80
[ 1961.720255][T32270]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1961.720276][T32270] RIP: 0023:0xf7f51539
[ 1961.720292][T32270] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1961.720308][T32270] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1961.720327][T32270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[ 1961.720340][T32270] RDX: 0000000020000810 RSI: 0000000000000000 RDI: 0000000000000000
[ 1961.720351][T32270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1961.720361][T32270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1961.720372][T32270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1961.720400][T32270]  </TASK>
[ 1962.101901][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1962.365349][T19565] usb 6-1: USB disconnect, device number 59
[ 1962.600659][T32283] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1962.619983][T32283] CPU: 1 UID: 0 PID: 32283 Comm: syz.6.7678 Not tainted syzkaller #0 PREEMPT(full) 
[ 1962.620009][T32283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1962.620020][T32283] Call Trace:
[ 1962.620035][T32283]  <TASK>
[ 1962.620044][T32283]  dump_stack_lvl+0x189/0x250
[ 1962.620076][T32283]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1962.620099][T32283]  ? __pfx__printk+0x10/0x10
[ 1962.620119][T32283]  ? __rcu_read_unlock+0x84/0xe0
[ 1962.620145][T32283]  ? kernfs_path_from_node+0x2f/0x290
[ 1962.620167][T32283]  ? kernfs_path_from_node+0x250/0x290
[ 1962.620186][T32283]  ? kernfs_path_from_node+0x2f/0x290
[ 1962.620211][T32283]  sysfs_warn_dup+0x8e/0xa0
[ 1962.620233][T32283]  sysfs_do_create_link_sd+0xc0/0x110
[ 1962.620256][T32283]  device_add_class_symlinks+0x1cf/0x240
[ 1962.620284][T32283]  device_add+0x475/0xb50
[ 1962.620312][T32283]  wiphy_register+0x1ba6/0x28d0
[ 1962.620350][T32283]  ? __pfx_wiphy_register+0x10/0x10
[ 1962.620370][T32283]  ? minstrel_ht_alloc+0x6dd/0x7e0
[ 1962.620403][T32283]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[ 1962.620433][T32283]  ieee80211_register_hw+0x3484/0x4100
[ 1962.620473][T32283]  ? ieee80211_register_hw+0x1491/0x4100
[ 1962.620508][T32283]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1962.620536][T32283]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1962.620563][T32283]  ? __hrtimer_setup+0x187/0x210
[ 1962.620581][T32283]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1962.620604][T32283]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[ 1962.620659][T32283]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1962.620680][T32283]  ? trace_kmalloc+0x1f/0xd0
[ 1962.620699][T32283]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[ 1962.620721][T32283]  ? kstrndup+0xbf/0x160
[ 1962.620749][T32283]  hwsim_new_radio_nl+0xea4/0x1b10
[ 1962.620779][T32283]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1962.620814][T32283]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1962.620855][T32283]  ? __nla_parse+0x40/0x60
[ 1962.620879][T32283]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1962.620914][T32283]  genl_family_rcv_msg_doit+0x212/0x300
[ 1962.620947][T32283]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1962.620984][T32283]  ? bpf_lsm_capable+0x9/0x20
[ 1962.621000][T32283]  ? security_capable+0x7e/0x2e0
[ 1962.621019][T32283]  genl_rcv_msg+0x60e/0x790
[ 1962.621044][T32283]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1962.621057][T32283]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1962.621081][T32283]  netlink_rcv_skb+0x208/0x470
[ 1962.621091][T32283]  ? __lock_acquire+0xab9/0xd20
[ 1962.621102][T32283]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1962.621116][T32283]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1962.621137][T32283]  ? down_read+0x1ad/0x2e0
[ 1962.621150][T32283]  genl_rcv+0x28/0x40
[ 1962.621162][T32283]  netlink_unicast+0x82c/0x9e0
[ 1962.621177][T32283]  ? __pfx_netlink_unicast+0x10/0x10
[ 1962.621188][T32283]  ? netlink_sendmsg+0x642/0xb30
[ 1962.621198][T32283]  ? skb_put+0x11b/0x210
[ 1962.621211][T32283]  netlink_sendmsg+0x805/0xb30
[ 1962.621228][T32283]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1962.621240][T32283]  ? __import_iovec+0x5d4/0x7f0
[ 1962.621252][T32283]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1962.621263][T32283]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1962.621274][T32283]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1962.621286][T32283]  __sock_sendmsg+0x21c/0x270
[ 1962.621298][T32283]  ____sys_sendmsg+0x505/0x830
[ 1962.621315][T32283]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1962.621331][T32283]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1962.621350][T32283]  ___sys_sendmsg+0x21f/0x2a0
[ 1962.621364][T32283]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1962.621396][T32283]  ? __fget_files+0x2a/0x420
[ 1962.621405][T32283]  ? __fget_files+0x3a0/0x420
[ 1962.621420][T32283]  __sys_sendmsg+0x164/0x220
[ 1962.621434][T32283]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1962.621456][T32283]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1962.621468][T32283]  __do_fast_syscall_32+0xb6/0x2b0
[ 1962.621481][T32283]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1962.621493][T32283]  do_fast_syscall_32+0x34/0x80
[ 1962.621505][T32283]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1962.621517][T32283] RIP: 0023:0xf7f04539
[ 1962.621527][T32283] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1962.621537][T32283] RSP: 002b:00000000f53b455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1962.621548][T32283] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040
[ 1962.621556][T32283] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000
[ 1962.621562][T32283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1962.621568][T32283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1962.621574][T32283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1962.621590][T32283]  </TASK>
[ 1963.086534][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1963.144924][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1963.200988][T32283] input: syz1 as /devices/virtual/input/input355
[ 1963.368263][ T5947] usb 6-1: new low-speed USB device number 60 using dummy_hcd
[ 1963.490313][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1963.606957][ T5947] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1963.643647][T32295] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7680'.
[ 1963.658201][ T5947] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1963.677770][ T5947] usb 6-1: can't read configurations, error -71
[ 1963.703969][T32297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7681'.
[ 1964.033732][T32302] FAULT_INJECTION: forcing a failure.
[ 1964.033732][T32302] name failslab, interval 1, probability 0, space 0, times 0
[ 1964.048364][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1964.056526][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1964.138422][T32302] CPU: 1 UID: 0 PID: 32302 Comm: syz.4.7685 Not tainted syzkaller #0 PREEMPT(full) 
[ 1964.138448][T32302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1964.138460][T32302] Call Trace:
[ 1964.138468][T32302]  <TASK>
[ 1964.138476][T32302]  dump_stack_lvl+0x189/0x250
[ 1964.138501][T32302]  ? __pfx____ratelimit+0x10/0x10
[ 1964.138519][T32302]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1964.138538][T32302]  ? __pfx__printk+0x10/0x10
[ 1964.138560][T32302]  ? __pfx___might_resched+0x10/0x10
[ 1964.138577][T32302]  ? fs_reclaim_acquire+0x7d/0x100
[ 1964.138600][T32302]  should_fail_ex+0x414/0x560
[ 1964.138630][T32302]  should_failslab+0xa8/0x100
[ 1964.138658][T32302]  __kmalloc_noprof+0xcb/0x4f0
[ 1964.138679][T32302]  ? kfree+0x4d/0x440
[ 1964.138696][T32302]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1964.138719][T32302]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1964.138740][T32302]  ? tomoyo_domain+0xd9/0x130
[ 1964.138763][T32302]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1964.138786][T32302]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1964.138812][T32302]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1964.138852][T32302]  ? __lock_acquire+0xab9/0xd20
[ 1964.138888][T32302]  ? __fget_files+0x2a/0x420
[ 1964.138910][T32302]  ? __fget_files+0x3a0/0x420
[ 1964.138924][T32302]  ? __fget_files+0x2a/0x420
[ 1964.138952][T32302]  security_file_ioctl_compat+0xcb/0x2d0
[ 1964.138977][T32302]  __ia32_compat_sys_ioctl+0x128/0x840
[ 1964.139003][T32302]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1964.139025][T32302]  ? __fget_files+0x3a0/0x420
[ 1964.139047][T32302]  ? fput+0xa0/0xd0
[ 1964.139068][T32302]  ? ksys_write+0x22a/0x250
[ 1964.139100][T32302]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1964.139122][T32302]  __do_fast_syscall_32+0xb6/0x2b0
[ 1964.139142][T32302]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1964.139164][T32302]  do_fast_syscall_32+0x34/0x80
[ 1964.139184][T32302]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1964.139204][T32302] RIP: 0023:0xf7f82539
[ 1964.139219][T32302] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1964.139234][T32302] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1964.139253][T32302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008922
[ 1964.139265][T32302] RDX: 0000000080000b00 RSI: 0000000000000000 RDI: 0000000000000000
[ 1964.139275][T32302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1964.139286][T32302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1964.139296][T32302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1964.139322][T32302]  </TASK>
[ 1964.139331][T32302] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1964.639807][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1964.721045][T32307] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[ 1964.728727][T25881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1964.804870][T32311] FAULT_INJECTION: forcing a failure.
[ 1964.804870][T32311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1964.822863][T32313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7688'.
[ 1964.846756][T32311] CPU: 0 UID: 0 PID: 32311 Comm: syz.4.7687 Not tainted syzkaller #0 PREEMPT(full) 
[ 1964.846779][T32311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1964.846787][T32311] Call Trace:
[ 1964.846793][T32311]  <TASK>
[ 1964.846798][T32311]  dump_stack_lvl+0x189/0x250
[ 1964.846816][T32311]  ? __pfx____ratelimit+0x10/0x10
[ 1964.846834][T32311]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1964.846846][T32311]  ? __pfx__printk+0x10/0x10
[ 1964.846861][T32311]  should_fail_ex+0x414/0x560
[ 1964.846880][T32311]  _copy_to_user+0x31/0xb0
[ 1964.846896][T32311]  simple_read_from_buffer+0xe1/0x170
[ 1964.846914][T32311]  proc_fail_nth_read+0x1b3/0x220
[ 1964.846929][T32311]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1964.846943][T32311]  ? rw_verify_area+0x2a6/0x4d0
[ 1964.846956][T32311]  ? __lock_acquire+0xab9/0xd20
[ 1964.846964][T32311]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1964.846976][T32311]  vfs_read+0x1fd/0xa30
[ 1964.846989][T32311]  ? fdget_pos+0x247/0x320
[ 1964.847001][T32311]  ? __pfx___mutex_lock+0x10/0x10
[ 1964.847013][T32311]  ? __pfx_vfs_read+0x10/0x10
[ 1964.847027][T32311]  ? __fget_files+0x2a/0x420
[ 1964.847038][T32311]  ? __fget_files+0x3a0/0x420
[ 1964.847046][T32311]  ? __fget_files+0x2a/0x420
[ 1964.847059][T32311]  ksys_read+0x145/0x250
[ 1964.847074][T32311]  ? __pfx_ksys_read+0x10/0x10
[ 1964.847089][T32311]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1964.847101][T32311]  __do_fast_syscall_32+0xb6/0x2b0
[ 1964.847113][T32311]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1964.847125][T32311]  do_fast_syscall_32+0x34/0x80
[ 1964.847137][T32311]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1964.847148][T32311] RIP: 0023:0xf7f82539
[ 1964.847158][T32311] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1964.847167][T32311] RSP: 002b:00000000f5476590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1964.847178][T32311] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5476620
[ 1964.847185][T32311] RDX: 000000000000000f RSI: 00000000f7415ff4 RDI: 0000000000000000
[ 1964.847190][T32311] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1964.847196][T32311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1964.847202][T32311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1964.847216][T32311]  </TASK>
[ 1965.146934][T32313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7688'.
[ 1965.156355][T32313] netlink: 288 bytes leftover after parsing attributes in process `syz.3.7688'.
[ 1965.165852][T32313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7688'.
[ 1965.377747][ T5930] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1965.507676][ T5930] usb 6-1: device descriptor read/64, error -71
[ 1965.535178][T32338] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1965.668360][T32341] netlink: 'syz.3.7696': attribute type 1 has an invalid length.
[ 1965.717350][T32341] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1965.826082][T32341] vlan3: entered promiscuous mode
[ 1965.831426][T32341] bond2: entered promiscuous mode
[ 1965.837208][T32341] vlan3: entered allmulticast mode
[ 1965.842648][T32341] bond2: entered allmulticast mode
[ 1965.848268][ T5930] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1965.931697][T32344] bond2: (slave gretap1): making interface the new active one
[ 1966.000383][ T5930] usb 6-1: device descriptor read/64, error -71
[ 1966.012912][T32344] gretap1: entered promiscuous mode
[ 1966.028394][T32344] gretap1: entered allmulticast mode
[ 1966.080653][T32344] bond2: (slave gretap1): Enslaving as an active interface with an up link
[ 1966.118262][ T5930] usb usb6-port1: attempt power cycle
[ 1966.132749][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1966.617155][T32347] netlink: 'syz.3.7698': attribute type 4 has an invalid length.
[ 1966.638015][ T5930] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1966.668870][ T5930] usb 6-1: device descriptor read/8, error -71
[ 1966.703767][T32347] futex_wake_op: syz.3.7698 tries to shift op by -1; fix this program
[ 1966.907688][ T5930] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1966.928567][ T5930] usb 6-1: device descriptor read/8, error -71
[ 1966.947902][   T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1966.969434][T32357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7700'.
[ 1966.984442][T32357] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1967.038090][ T5930] usb usb6-port1: unable to enumerate USB device
[ 1967.091677][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1967.109960][   T43] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1967.120758][   T43] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1967.132285][   T43] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1967.148908][   T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1967.159100][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1967.170540][   T43] usb 7-1: Product: syz
[ 1967.174916][   T43] usb 7-1: Manufacturer: syz
[ 1967.180372][   T43] usb 7-1: SerialNumber: syz
[ 1967.401299][   T43] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1967.478261][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1968.219012][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1968.618139][T27726] usb 6-1: new low-speed USB device number 66 using dummy_hcd
[ 1968.670540][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1968.747911][T27726] usb 6-1: device descriptor read/64, error -71
[ 1969.007812][T27726] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[ 1969.089686][T32375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7705'.
[ 1969.137816][T27726] usb 6-1: device descriptor read/64, error -71
[ 1969.276283][T27726] usb usb6-port1: attempt power cycle
[ 1969.617776][T27726] usb 6-1: new low-speed USB device number 68 using dummy_hcd
[ 1969.650943][T27726] usb 6-1: device descriptor read/8, error -71
[ 1969.726324][   T43] usb 7-1: USB disconnect, device number 3
[ 1969.738651][   T43] usblp0: removed
[ 1969.809532][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1969.828522][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1969.890275][T27726] usb 6-1: new low-speed USB device number 69 using dummy_hcd
[ 1969.918680][T27726] usb 6-1: device descriptor read/8, error -71
[ 1970.049352][T27726] usb usb6-port1: unable to enumerate USB device
[ 1970.128939][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1970.268277][   T43] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[ 1970.318382][T32388] netlink: 'syz.3.7710': attribute type 1 has an invalid length.
[ 1970.442649][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1970.448416][T25879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1970.462184][   T43] usb 7-1: not running at top speed; connect to a high speed hub
[ 1970.489515][   T43] usb 7-1: config 17 has an invalid interface number: 8 but max is 1
[ 1970.564351][T32396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7711'.
[ 1970.573693][T32396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7711'.
[ 1970.939067][   T43] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1970.958568][T32388] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1970.992341][   T43] usb 7-1: config 17 has no interface number 0
[ 1971.012816][   T43] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 1971.062930][   T43] usb 7-1: config 17 interface 8 has no altsetting 0
[ 1971.101278][T32389] vlan4: entered promiscuous mode
[ 1971.107143][T32389] bond3: entered promiscuous mode
[ 1971.112723][   T43] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1971.127474][T32389] vlan4: entered allmulticast mode
[ 1971.133108][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1971.133134][   T43] usb 7-1: Product: syz
[ 1971.133147][   T43] usb 7-1: Manufacturer: syz
[ 1971.133159][   T43] usb 7-1: SerialNumber: syz
[ 1971.166572][T32389] bond3: entered allmulticast mode
[ 1971.262100][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1971.325560][T32404] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1971.451158][   T43] usb 7-1: selecting invalid altsetting 0
[ 1971.473542][   T43] usb 7-1: 8:6 : no UAC_FORMAT_TYPE desc
[ 1971.499715][   T43] usb 7-1: selecting invalid altsetting 0
[ 1971.593216][   T43] usb 7-1: USB disconnect, device number 4
[ 1971.817794][ T5930] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1971.999778][ T5930] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1972.011519][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1972.022829][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1972.128159][T21454] usb 4-1: new low-speed USB device number 64 using dummy_hcd
[ 1972.146014][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1972.179154][ T5930] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1972.198047][ T5930] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1972.206908][ T5930] usb 6-1: Manufacturer: syz
[ 1972.216767][ T5930] usb 6-1: config 0 descriptor??
[ 1972.331687][T21454] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1972.370200][T21454] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1972.433066][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1972.441947][T21454] usb 4-1: can't read configurations, error -71
[ 1972.644507][ T5930] appleir 0003:05AC:8243.0064: unknown main item tag 0x0
[ 1972.712219][ T5930] appleir 0003:05AC:8243.0064: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 1973.231821][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1973.648973][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1973.859963][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1974.049511][T32445] netlink: 'syz.4.7724': attribute type 1 has an invalid length.
[ 1974.291156][T32445] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1974.434101][T32450] vlan3: entered promiscuous mode
[ 1974.449741][T32450] bond3: entered promiscuous mode
[ 1974.460118][T32450] vlan3: entered allmulticast mode
[ 1974.465533][T32450] bond3: entered allmulticast mode
[ 1974.654070][T32454] bond3: (slave gretap1): making interface the new active one
[ 1974.673375][T32454] gretap1: entered promiscuous mode
[ 1974.678969][T32454] gretap1: entered allmulticast mode
[ 1974.711677][T32454] bond3: (slave gretap1): Enslaving as an active interface with an up link
[ 1974.806847][T32439] usb 6-1: USB disconnect, device number 70
[ 1974.877726][   T93] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1975.068081][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1975.128125][   T93] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1975.277011][   T93] usb 7-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[ 1975.571722][T25879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1975.838190][   T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1975.859822][   T93] usb 7-1: config 0 descriptor??
[ 1976.230735][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.240975][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.292618][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1976.328335][   T93] wacom 0003:056A:00C6.0065: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.6-1/input0
[ 1976.347283][T32485] bridge0: port 3(batadv0) entered disabled state
[ 1976.354567][T32485] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1976.362129][T32485] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1976.416646][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1976.425847][T25877] batman_adv: batadv0: IGMP Querier appeared
[ 1976.431991][T25877] batman_adv: batadv0: MLD Querier appeared
[ 1976.509672][   T93] usb 7-1: USB disconnect, device number 5
[ 1976.825856][T32487] fido_id[32487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1976.963243][T32498] input: syz1 as /devices/virtual/input/input359
[ 1977.190711][T32506] netlink: 'syz.6.7740': attribute type 1 has an invalid length.
[ 1977.266751][T32506] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1977.302098][T32507] vlan2: entered promiscuous mode
[ 1977.307329][T32507] bond4: entered promiscuous mode
[ 1977.317954][T32507] vlan2: entered allmulticast mode
[ 1977.324693][T32507] bond4: entered allmulticast mode
[ 1977.395777][T32506] bond4: (slave gretap1): making interface the new active one
[ 1977.413002][T32506] gretap1: entered promiscuous mode
[ 1977.424318][T32506] gretap1: entered allmulticast mode
[ 1977.436932][T32506] bond4: (slave gretap1): Enslaving as an active interface with an up link
[ 1977.559398][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1977.585687][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7744'.
[ 1978.325266][T32525] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1979.042863][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1979.328218][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1979.408074][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1979.530890][T32537] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7749'.
[ 1979.553821][T32536] mac80211_hwsim hwsim76 wlan1: left allmulticast mode
[ 1979.586679][T32536] netlink: 'syz.6.7750': attribute type 10 has an invalid length.
[ 1979.603080][T32536] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1980.075287][T32546] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1980.218642][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1981.040591][ T5930] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1981.332422][T26606] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1981.347953][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1982.401128][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1982.566471][T32580] could not allocate digest TFM handle sha384-neon
[ 1982.591822][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1983.443071][T32593] FAULT_INJECTION: forcing a failure.
[ 1983.443071][T32593] name failslab, interval 1, probability 0, space 0, times 0
[ 1983.548186][T32593] CPU: 0 UID: 0 PID: 32593 Comm: syz.6.7764 Not tainted syzkaller #0 PREEMPT(full) 
[ 1983.548212][T32593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1983.548222][T32593] Call Trace:
[ 1983.548230][T32593]  <TASK>
[ 1983.548237][T32593]  dump_stack_lvl+0x189/0x250
[ 1983.548264][T32593]  ? __pfx____ratelimit+0x10/0x10
[ 1983.548284][T32593]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1983.548305][T32593]  ? __pfx__printk+0x10/0x10
[ 1983.548328][T32593]  ? __pfx___might_resched+0x10/0x10
[ 1983.548346][T32593]  ? fs_reclaim_acquire+0x7d/0x100
[ 1983.548376][T32593]  should_fail_ex+0x414/0x560
[ 1983.548406][T32593]  ? nf_hook_entries_grow+0x27c/0x710
[ 1983.548425][T32593]  should_failslab+0xa8/0x100
[ 1983.548452][T32593]  __kvmalloc_node_noprof+0x161/0x5f0
[ 1983.548477][T32593]  ? nf_hook_entries_grow+0x27c/0x710
[ 1983.548502][T32593]  nf_hook_entries_grow+0x27c/0x710
[ 1983.548536][T32593]  __nf_register_net_hook+0x2c9/0x930
[ 1983.548562][T32593]  ? nf_register_net_hook+0xc8/0x190
[ 1983.548585][T32593]  nf_register_net_hook+0xb2/0x190
[ 1983.548609][T32593]  nf_register_net_hooks+0x44/0x1b0
[ 1983.548633][T32593]  nf_ct_netns_do_get+0x3bf/0x5a0
[ 1983.548657][T32593]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[ 1983.548677][T32593]  ? nft_parse_register_load+0x31e/0x3b0
[ 1983.548701][T32593]  ? nft_nat_init+0x505/0x6c0
[ 1983.548723][T32593]  nf_tables_newrule+0x178c/0x2890
[ 1983.548768][T32593]  ? __pfx_nf_tables_newrule+0x10/0x10
[ 1983.548792][T32593]  ? nfnl_pernet+0x23/0x240
[ 1983.548827][T32593]  ? __nla_parse+0x40/0x60
[ 1983.548851][T32593]  nfnetlink_rcv+0x1132/0x2520
[ 1983.548903][T32593]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1983.548937][T32593]  ? ref_tracker_free+0x63a/0x7d0
[ 1983.548979][T32593]  ? __netlink_deliver_tap+0x807/0x850
[ 1983.548997][T32593]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1983.549030][T32593]  netlink_unicast+0x82c/0x9e0
[ 1983.549057][T32593]  ? __pfx_netlink_unicast+0x10/0x10
[ 1983.549076][T32593]  ? netlink_sendmsg+0x642/0xb30
[ 1983.549094][T32593]  ? skb_put+0x11b/0x210
[ 1983.549118][T32593]  netlink_sendmsg+0x805/0xb30
[ 1983.549148][T32593]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1983.549169][T32593]  ? __import_iovec+0x5d4/0x7f0
[ 1983.549189][T32593]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1983.549209][T32593]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1983.549228][T32593]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1983.549249][T32593]  __sock_sendmsg+0x21c/0x270
[ 1983.549268][T32593]  ____sys_sendmsg+0x505/0x830
[ 1983.549295][T32593]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1983.549334][T32593]  ___sys_sendmsg+0x21f/0x2a0
[ 1983.549358][T32593]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1983.549419][T32593]  ? __fget_files+0x2a/0x420
[ 1983.549435][T32593]  ? __fget_files+0x3a0/0x420
[ 1983.549459][T32593]  __sys_sendmsg+0x164/0x220
[ 1983.549483][T32593]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1983.549521][T32593]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1983.549543][T32593]  __do_fast_syscall_32+0xb6/0x2b0
[ 1983.549563][T32593]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1983.549585][T32593]  do_fast_syscall_32+0x34/0x80
[ 1983.549604][T32593]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1983.549625][T32593] RIP: 0023:0xf7f04539
[ 1983.549640][T32593] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1983.549655][T32593] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1983.549674][T32593] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[ 1983.549686][T32593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1983.549696][T32593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1983.549707][T32593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1983.549718][T32593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1983.549745][T32593]  </TASK>
[ 1983.926527][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1983.940341][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1984.154420][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1984.529186][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1984.599132][T32616] vivid-001: =================  START STATUS  =================
[ 1984.617250][T32616] vivid-001: FM Deviation: 75000
[ 1984.625229][T32616] vivid-001: ==================  END STATUS  ==================
[ 1984.688165][   T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1984.738157][ T5930] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1984.918209][ T5930] usb 7-1: Using ep0 maxpacket: 8
[ 1984.925498][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1984.936684][   T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1984.978954][ T5930] usb 7-1: config 8 has an invalid interface number: 205 but max is 3
[ 1984.987182][ T5930] usb 7-1: config 8 has an invalid interface number: 253 but max is 3
[ 1984.996387][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1985.057480][ T5930] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 1985.127625][ T5930] usb 7-1: config 8 has an invalid interface number: 222 but max is 3
[ 1985.156606][   T24] usb 4-1: config 0 descriptor??
[ 1985.161783][ T5930] usb 7-1: config 8 has an invalid interface number: 68 but max is 3
[ 1985.173107][ T5930] usb 7-1: config 8 has 5 interfaces, different from the descriptor's value: 4
[ 1985.185237][ T5930] usb 7-1: config 8 has no interface number 0
[ 1985.193209][ T5930] usb 7-1: config 8 has no interface number 2
[ 1985.199537][ T5930] usb 7-1: config 8 has no interface number 3
[ 1985.206106][ T5930] usb 7-1: config 8 has no interface number 4
[ 1985.216256][ T5930] usb 7-1: config 8 interface 205 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 8
[ 1985.247414][ T5930] usb 7-1: config 8 interface 205 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 16
[ 1985.284145][ T5930] usb 7-1: config 8 interface 205 altsetting 5 endpoint 0x88 has an invalid bInterval 64, changing to 10
[ 1985.358323][ T5930] usb 7-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0xE, skipping
[ 1985.390714][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1985.408385][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1985.427718][ T5930] usb 7-1: config 8 interface 253 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1985.439104][ T5930] usb 7-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[ 1985.451073][ T5930] usb 7-1: config 8 interface 253 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 1985.463240][ T5930] usb 7-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[ 1985.474804][ T5930] usb 7-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[ 1985.488002][ T5930] usb 7-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[ 1985.508478][ T5930] usb 7-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[ 1985.531339][ T5930] usb 7-1: config 8 interface 1 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[ 1985.552748][ T5930] usb 7-1: config 8 interface 1 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[ 1985.576745][ T5930] usb 7-1: too many endpoints for config 8 interface 222 altsetting 178: 201, using maximum allowed: 30
[ 1985.595822][ T5930] usb 7-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0xE, skipping
[ 1985.617111][ T5930] usb 7-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0x6, skipping
[ 1985.628876][   T24] ath6kl: Unsupported hardware version: 0x0
[ 1985.658661][   T24] ath6kl: Failed to init ath6kl core: -22
[ 1985.688097][   T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22
[ 1985.708126][ T5930] usb 7-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0x1, skipping
[ 1985.753524][ T5930] usb 7-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0x1, skipping
[ 1985.774708][ T5930] usb 7-1: config 8 interface 222 altsetting 178 has an endpoint descriptor with address 0x99, changing to 0x89
[ 1985.789844][ T5930] usb 7-1: config 8 interface 222 altsetting 178 endpoint 0x89 has an invalid bInterval 221, changing to 11
[ 1985.806195][ T5930] usb 7-1: config 8 interface 222 altsetting 178 endpoint 0x89 has invalid maxpacket 1945, setting to 1024
[ 1985.820158][ T5930] usb 7-1: config 8 interface 222 altsetting 178 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 1985.846004][T21454] usb 4-1: USB disconnect, device number 67
[ 1985.877762][ T5930] usb 7-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0xA, skipping
[ 1985.900507][ T5930] usb 7-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0xB, skipping
[ 1985.918345][ T5930] usb 7-1: config 8 interface 222 altsetting 178 has 8 endpoint descriptors, different from the interface descriptor's value: 201
[ 1985.936585][ T5930] usb 7-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0xB, skipping
[ 1985.962852][ T5930] usb 7-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0xB, skipping
[ 1985.987239][ T5930] usb 7-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x1, skipping
[ 1985.998823][ T5930] usb 7-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x7, skipping
[ 1986.010234][ T5930] usb 7-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x9, skipping
[ 1986.021350][ T5930] usb 7-1: config 8 interface 68 altsetting 16 bulk endpoint 0x2 has invalid maxpacket 64
[ 1986.032615][ T5930] usb 7-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x5, skipping
[ 1986.043744][ T5930] usb 7-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x1, skipping
[ 1986.055043][ T5930] usb 7-1: config 8 interface 68 altsetting 16 has an invalid descriptor for endpoint zero, skipping
[ 1986.073398][ T5930] usb 7-1: config 8 interface 205 has no altsetting 0
[ 1986.081967][ T5930] usb 7-1: config 8 interface 253 has no altsetting 0
[ 1986.089296][ T5930] usb 7-1: config 8 interface 1 has no altsetting 0
[ 1986.095957][ T5930] usb 7-1: config 8 interface 222 has no altsetting 0
[ 1986.103081][ T5930] usb 7-1: config 8 interface 68 has no altsetting 0
[ 1986.112533][ T5930] usb 7-1: New USB device found, idVendor=9986, idProduct=7523, bcdDevice=d9.a5
[ 1986.121984][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1986.131525][ T5930] usb 7-1: Product: syz
[ 1986.135807][ T5930] usb 7-1: Manufacturer: syz
[ 1986.140663][ T5930] usb 7-1: SerialNumber: syz
[ 1986.150278][T32611] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1986.158229][T32611] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1986.391541][ T5930] ch341 7-1:8.205: ch341-uart converter detected
[ 1986.417451][ T5930] usb 7-1: failed to receive control message: -71
[ 1986.442712][ T5930] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1986.453038][T25877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1986.479860][ T5930] ch341 7-1:8.253: ch341-uart converter detected
[ 1986.489164][ T5930] usb 7-1: failed to receive control message: -71
[ 1986.498864][ T5930] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[ 1986.515631][ T5930] ch341 7-1:8.1: ch341-uart converter detected
[ 1986.686833][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1986.722145][ T5930] usb 7-1: failed to receive control message: -71
[ 1986.747462][ T5930] ch341-uart ttyUSB2: probe with driver ch341-uart failed with error -71
[ 1986.770298][T32633] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1986.845286][ T5930] hub 7-1:8.222: Invalid hub with more than one config or interface
[ 1986.896838][ T5930] hub 7-1:8.222: probe with driver hub failed with error -22
[ 1986.928984][ T5930] ch341 7-1:8.222: ch341-uart converter detected
[ 1987.039890][T32636] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1987.163672][ T5930] usb 7-1: failed to receive control message: -71
[ 1987.201864][ T5930] ch341-uart ttyUSB3: probe with driver ch341-uart failed with error -71
[ 1987.408959][ T5930] ch341 7-1:8.68: ch341-uart converter detected
[ 1987.419034][ T5930] usb 7-1: failed to receive control message: -71
[ 1987.425582][ T5930] ch341-uart ttyUSB4: probe with driver ch341-uart failed with error -71
[ 1988.159039][ T5930] usb 7-1: USB disconnect, device number 6
[ 1988.543075][ T5930] ch341 7-1:8.205: device disconnected
[ 1988.549191][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1988.658896][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1988.780822][ T5930] ch341 7-1:8.253: device disconnected
[ 1988.789683][ T5930] ch341 7-1:8.1: device disconnected
[ 1988.800451][ T5930] ch341 7-1:8.222: device disconnected
[ 1988.819531][T32646] mac80211_hwsim hwsim81 wlan1: left allmulticast mode
[ 1988.830612][ T5930] ch341 7-1:8.68: device disconnected
[ 1989.014209][T32646] netlink: 'syz.3.7781': attribute type 10 has an invalid length.
[ 1989.037411][T32646] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1989.097792][T32651] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1989.231688][T32650] mac80211_hwsim hwsim81 wlan1: entered allmulticast mode
[ 1989.771331][T32658] team0: Caught tx_queue_len zero misconfig
[ 1989.773783][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1989.990958][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1990.289381][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1990.529136][T21454] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1990.714701][T21454] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1990.729723][T21454] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1990.751128][T21454] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1990.775946][T21454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1990.892607][T32683] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1991.116924][T21454] usb 6-1: config 0 descriptor??
[ 1991.247804][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1991.569869][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1991.920372][T32701] FAULT_INJECTION: forcing a failure.
[ 1991.920372][T32701] name failslab, interval 1, probability 0, space 0, times 0
[ 1991.940245][T32701] CPU: 0 UID: 0 PID: 32701 Comm: syz.6.7798 Not tainted syzkaller #0 PREEMPT(full) 
[ 1991.940271][T32701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1991.940282][T32701] Call Trace:
[ 1991.940290][T32701]  <TASK>
[ 1991.940299][T32701]  dump_stack_lvl+0x189/0x250
[ 1991.940326][T32701]  ? __pfx____ratelimit+0x10/0x10
[ 1991.940346][T32701]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1991.940367][T32701]  ? __pfx__printk+0x10/0x10
[ 1991.940389][T32701]  ? __pfx___might_resched+0x10/0x10
[ 1991.940407][T32701]  ? fs_reclaim_acquire+0x7d/0x100
[ 1991.940431][T32701]  should_fail_ex+0x414/0x560
[ 1991.940461][T32701]  should_failslab+0xa8/0x100
[ 1991.940488][T32701]  __kmalloc_noprof+0xcb/0x4f0
[ 1991.940510][T32701]  ? kfree+0x4d/0x440
[ 1991.940528][T32701]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1991.940552][T32701]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1991.940573][T32701]  ? tomoyo_domain+0xd9/0x130
[ 1991.940597][T32701]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1991.940621][T32701]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1991.940646][T32701]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1991.940684][T32701]  ? __lock_acquire+0xab9/0xd20
[ 1991.940718][T32701]  ? __fget_files+0x2a/0x420
[ 1991.940740][T32701]  ? __fget_files+0x3a0/0x420
[ 1991.940756][T32701]  ? __fget_files+0x2a/0x420
[ 1991.940776][T32701]  security_file_ioctl_compat+0xcb/0x2d0
[ 1991.940802][T32701]  __ia32_compat_sys_ioctl+0x128/0x840
[ 1991.940828][T32701]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1991.940850][T32701]  ? __fget_files+0x3a0/0x420
[ 1991.940873][T32701]  ? fput+0xa0/0xd0
[ 1991.940893][T32701]  ? ksys_write+0x22a/0x250
[ 1991.940925][T32701]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1991.940948][T32701]  __do_fast_syscall_32+0xb6/0x2b0
[ 1991.940968][T32701]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1991.940994][T32701]  do_fast_syscall_32+0x34/0x80
[ 1991.941013][T32701]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1991.941035][T32701] RIP: 0023:0xf7f04539
[ 1991.941051][T32701] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1991.941067][T32701] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1991.941087][T32701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605
[ 1991.941100][T32701] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1991.941114][T32701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1991.941125][T32701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1991.941136][T32701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1991.941163][T32701]  </TASK>
[ 1991.941268][T32701] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1992.229695][T25879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1992.536530][T32711] netlink: 'syz.7.7801': attribute type 21 has an invalid length.
[ 1992.761760][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1993.095614][T32726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1993.130710][T32727] fuse: Unknown parameter 'rootmod00000000000240000'
[ 1993.211178][T32726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1993.276835][T32439] usb 6-1: USB disconnect, device number 71
[ 1993.735403][T26608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1993.750467][T26608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1994.138152][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1994.296282][T32741] netlink: 'syz.3.7811': attribute type 1 has an invalid length.
[ 1994.608862][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1994.620237][   T93] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1994.705384][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1994.714790][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1994.724228][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1994.797730][   T93] usb 4-1: Using ep0 maxpacket: 8
[ 1994.805041][   T93] usb 4-1: too many configurations: 10, using maximum allowed: 8
[ 1995.219082][T32757] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1995.339441][   T93] usb 4-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b
[ 1995.349749][   T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1995.396424][   T93] usb 4-1: Product: syz
[ 1995.417476][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1995.758050][   T93] usb 4-1: Manufacturer: syz
[ 1995.769528][   T93] usb 4-1: SerialNumber: syz
[ 1995.798745][   T93] usb 4-1: config 0 descriptor??
[ 1995.839461][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1996.066147][   T24] usb 4-1: USB disconnect, device number 68
[ 1996.567744][   T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1996.749453][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1996.810701][   T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1996.846551][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1996.900298][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1996.944050][   T24] usb 7-1: config 0 descriptor??
[ 1997.012627][T25879] net_ratelimit: 1 callbacks suppressed
[ 1997.012656][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1997.736714][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1997.977198][T26606] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1998.148974][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1999.371835][  T334] FAULT_INJECTION: forcing a failure.
[ 1999.371835][  T334] name failslab, interval 1, probability 0, space 0, times 0
[ 1999.385105][  T334] CPU: 0 UID: 0 PID: 334 Comm: syz.7.7828 Not tainted syzkaller #0 PREEMPT(full) 
[ 1999.385128][  T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1999.385137][  T334] Call Trace:
[ 1999.385142][  T334]  <TASK>
[ 1999.385148][  T334]  dump_stack_lvl+0x189/0x250
[ 1999.385167][  T334]  ? __pfx____ratelimit+0x10/0x10
[ 1999.385178][  T334]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1999.385191][  T334]  ? __pfx__printk+0x10/0x10
[ 1999.385203][  T334]  ? __pfx___might_resched+0x10/0x10
[ 1999.385216][  T334]  should_fail_ex+0x414/0x560
[ 1999.385235][  T334]  should_failslab+0xa8/0x100
[ 1999.385253][  T334]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[ 1999.385268][  T334]  ? alloc_inode+0xb8/0x1b0
[ 1999.385286][  T334]  alloc_inode+0xb8/0x1b0
[ 1999.385301][  T334]  iget_locked+0x106/0x580
[ 1999.385314][  T334]  kernfs_get_inode+0x4f/0x780
[ 1999.385330][  T334]  cgroup_attach_permissions+0x26a/0x9e0
[ 1999.385346][  T334]  __cgroup_procs_write+0x238/0x300
[ 1999.385362][  T334]  cgroup_procs_write+0x27/0x50
[ 1999.385376][  T334]  ? __pfx_cgroup_procs_write+0x10/0x10
[ 1999.385390][  T334]  cgroup_file_write+0x39e/0x740
[ 1999.385408][  T334]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1999.385429][  T334]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1999.385441][  T334]  kernfs_fop_write_iter+0x3ac/0x540
[ 1999.385460][  T334]  vfs_write+0x5c9/0xb30
[ 1999.385485][  T334]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1999.385500][  T334]  ? __pfx_vfs_write+0x10/0x10
[ 1999.385520][  T334]  ? __fget_files+0x2a/0x420
[ 1999.385535][  T334]  ksys_write+0x145/0x250
[ 1999.385550][  T334]  ? __pfx_ksys_write+0x10/0x10
[ 1999.385566][  T334]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1999.385579][  T334]  __do_fast_syscall_32+0xb6/0x2b0
[ 1999.385592][  T334]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1999.385605][  T334]  do_fast_syscall_32+0x34/0x80
[ 1999.385616][  T334]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1999.385628][  T334] RIP: 0023:0xf7f93539
[ 1999.385639][  T334] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1999.385647][  T334] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1999.385660][  T334] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040
[ 1999.385667][  T334] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[ 1999.385673][  T334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1999.385679][  T334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1999.385684][  T334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1999.385699][  T334]  </TASK>
[ 1999.674780][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1999.704396][  T336] FAULT_INJECTION: forcing a failure.
[ 1999.704396][  T336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1999.727794][  T336] CPU: 0 UID: 0 PID: 336 Comm: syz.7.7829 Not tainted syzkaller #0 PREEMPT(full) 
[ 1999.727818][  T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1999.727828][  T336] Call Trace:
[ 1999.727837][  T336]  <TASK>
[ 1999.727845][  T336]  dump_stack_lvl+0x189/0x250
[ 1999.727870][  T336]  ? __pfx____ratelimit+0x10/0x10
[ 1999.727890][  T336]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1999.727909][  T336]  ? __pfx__printk+0x10/0x10
[ 1999.727935][  T336]  should_fail_ex+0x414/0x560
[ 1999.727964][  T336]  _copy_to_user+0x31/0xb0
[ 1999.727986][  T336]  simple_read_from_buffer+0xe1/0x170
[ 1999.728010][  T336]  proc_fail_nth_read+0x1b3/0x220
[ 1999.728031][  T336]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1999.728052][  T336]  ? rw_verify_area+0x2a6/0x4d0
[ 1999.728069][  T336]  ? __lock_acquire+0xab9/0xd20
[ 1999.728083][  T336]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1999.728103][  T336]  vfs_read+0x1fd/0xa30
[ 1999.728123][  T336]  ? fdget_pos+0x247/0x320
[ 1999.728141][  T336]  ? __pfx___mutex_lock+0x10/0x10
[ 1999.728159][  T336]  ? __pfx_vfs_read+0x10/0x10
[ 1999.728181][  T336]  ? __fget_files+0x2a/0x420
[ 1999.728200][  T336]  ? __fget_files+0x3a0/0x420
[ 1999.728212][  T336]  ? __fget_files+0x2a/0x420
[ 1999.728236][  T336]  ksys_read+0x145/0x250
[ 1999.728256][  T336]  ? __pfx_ksys_read+0x10/0x10
[ 1999.728279][  T336]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1999.728299][  T336]  __do_fast_syscall_32+0xb6/0x2b0
[ 1999.728318][  T336]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1999.728338][  T336]  do_fast_syscall_32+0x34/0x80
[ 1999.728358][  T336]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1999.728378][  T336] RIP: 0023:0xf7f93539
[ 1999.728393][  T336] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1999.728406][  T336] RSP: 002b:00000000f5486590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1999.728425][  T336] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5486620
[ 1999.728435][  T336] RDX: 000000000000000f RSI: 00000000f7425ff4 RDI: 0000000000000000
[ 1999.728445][  T336] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1999.728455][  T336] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1999.728463][  T336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1999.728488][  T336]  </TASK>
[ 2000.204352][   T93] usb 7-1: USB disconnect, device number 7
[ 2000.396523][  T347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7832'.
[ 2000.565599][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2000.574505][   T93] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2000.705018][T11194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2000.882465][  T353] fuse: Unknown parameter 'rootmod00000000000240000'
[ 2001.042625][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2001.189485][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2001.424089][  T359] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7837'.
[ 2001.787385][  T366] IPVS: set_ctl: invalid protocol: 64 0.0.0.0:0
[ 2001.809828][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2002.234703][  T382] vivid-007: disconnect
[ 2002.271119][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2002.512340][  T389] fuse: Bad value for 'fd'
[ 2003.010224][  T379] vivid-007: reconnect
[ 2003.089375][T25879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2003.428777][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2003.728526][ T5843] Bluetooth: hci0: command 0x0405 tx timeout
[ 2004.048516][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[ 2004.055003][  T364] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[ 2004.413246][  T364] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2004.422320][  T364] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2004.429562][  T364] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2004.436021][  T364] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2004.442252][  T364] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2004.462069][  T364] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2004.538623][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2004.640697][T25879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2004.671738][T25879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2004.737719][T11194] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 2004.947105][T11194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2004.966417][T11194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2004.996846][T11194] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 2005.016775][T11194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2005.052544][T11194] usb 4-1: config 0 descriptor??
[ 2005.178461][T21454] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 2005.337678][T21454] usb 6-1: Using ep0 maxpacket: 8
[ 2005.345624][T21454] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2005.362365][T21454] usb 6-1: config 8 has an invalid interface number: 158 but max is 0
[ 2005.376626][T21454] usb 6-1: config 8 has an invalid interface number: 158 but max is 0
[ 2005.385670][T21454] usb 6-1: config 8 has no interface number 0
[ 2005.392715][T21454] usb 6-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2005.427104][T21454] usb 6-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af
[ 2005.458931][T21454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2005.466976][T21454] usb 6-1: Product: syz
[ 2005.482278][T21454] usb 6-1: Manufacturer: syz
[ 2005.486944][T21454] usb 6-1: SerialNumber: syz
[ 2005.663299][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2005.722477][T21454] sierra 6-1:8.158: Sierra USB modem converter detected
[ 2005.739325][T21454] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[ 2005.763955][T21454] usb 6-1: USB disconnect, device number 72
[ 2005.792020][T21454] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 2005.826720][T21454] sierra 6-1:8.158: device disconnected
[ 2006.127749][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2006.245800][  T416] fuse: Unknown parameter 'rootmod00000000000240000'
[ 2006.289743][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2006.298705][T11194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2006.307402][T11194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2006.366007][T11194] usb 4-1: USB disconnect, device number 69
[ 2006.449750][ T5843] Bluetooth: hci0: command 0x0405 tx timeout
[ 2006.449772][ T5851] Bluetooth: hci1: command 0x0405 tx timeout
[ 2006.455941][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2006.499073][  T428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7855'.
[ 2006.929444][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2006.937624][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2007.257654][T32439] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 2007.432251][  T436] tipc: Enabled bearer <eth:team0>, priority 0
[ 2007.459674][T32439] usb 7-1: Using ep0 maxpacket: 16
[ 2007.468466][T32439] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2007.498700][T32439] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2007.547717][T32439] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2007.568779][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2007.659335][T32439] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2007.692461][T32439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2007.796302][T32439] usb 7-1: Product: syz
[ 2007.796324][T32439] usb 7-1: Manufacturer: syz
[ 2007.796339][T32439] usb 7-1: SerialNumber: syz
[ 2008.091362][T32439] usb 7-1: USB disconnect, device number 8
[ 2008.148036][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2008.408065][   T93] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 2008.534029][ T5843] Bluetooth: hci0: command 0x0405 tx timeout
[ 2008.547913][T21454] tipc: Node number set to 845431415
[ 2008.688234][   T93] usb 4-1: Using ep0 maxpacket: 8
[ 2008.719914][   T93] usb 4-1: config 8 has an invalid interface number: 205 but max is 3
[ 2008.851394][T25881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2008.891800][   T93] usb 4-1: config 8 has an invalid interface number: 253 but max is 3
[ 2009.327847][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2009.785370][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2009.798203][   T93] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 2009.857747][   T93] usb 4-1: config 8 has an invalid interface number: 222 but max is 3
[ 2009.865982][   T93] usb 4-1: config 8 has an invalid interface number: 68 but max is 3
[ 2009.900514][   T93] usb 4-1: config 8 has 5 interfaces, different from the descriptor's value: 4
[ 2009.937657][   T93] usb 4-1: config 8 has no interface number 0
[ 2009.955272][  T458] FAULT_INJECTION: forcing a failure.
[ 2009.955272][  T458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2009.962695][   T93] usb 4-1: config 8 has no interface number 2
[ 2009.984806][   T93] usb 4-1: config 8 has no interface number 3
[ 2010.001472][   T93] usb 4-1: config 8 has no interface number 4
[ 2010.012681][  T458] CPU: 1 UID: 0 PID: 458 Comm: syz.6.7864 Not tainted syzkaller #0 PREEMPT(full) 
[ 2010.012709][  T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2010.012721][  T458] Call Trace:
[ 2010.012730][  T458]  <TASK>
[ 2010.012740][  T458]  dump_stack_lvl+0x189/0x250
[ 2010.012770][  T458]  ? __pfx____ratelimit+0x10/0x10
[ 2010.012790][  T458]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2010.012811][  T458]  ? __pfx__printk+0x10/0x10
[ 2010.012827][  T458]  ? __might_fault+0xb0/0x130
[ 2010.012862][  T458]  should_fail_ex+0x414/0x560
[ 2010.012893][  T458]  _copy_from_user+0x2d/0xb0
[ 2010.012918][  T458]  get_compat_msghdr+0xad/0x4a0
[ 2010.012946][  T458]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2010.012969][  T458]  ? rcu_is_watching+0x15/0xb0
[ 2010.012988][  T458]  ? ___sys_sendmsg+0x22f/0x2a0
[ 2010.013017][  T458]  ___sys_sendmsg+0x193/0x2a0
[ 2010.013048][  T458]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2010.013101][  T458]  ? __fget_files+0x2a/0x420
[ 2010.013119][  T458]  ? __fget_files+0x3a0/0x420
[ 2010.013144][  T458]  __sys_sendmmsg+0x28e/0x430
[ 2010.013172][  T458]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2010.013203][  T458]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2010.013239][  T458]  ? ksys_write+0x22a/0x250
[ 2010.013272][  T458]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 2010.013296][  T458]  __do_fast_syscall_32+0xb6/0x2b0
[ 2010.013319][  T458]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2010.013341][  T458]  do_fast_syscall_32+0x34/0x80
[ 2010.013360][  T458]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2010.013382][  T458] RIP: 0023:0xf7f04539
[ 2010.013398][  T458] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2010.013414][  T458] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 2010.013435][  T458] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180
[ 2010.013447][  T458] RDX: 0000000004000190 RSI: 0000000000000000 RDI: 0000000000000000
[ 2010.013458][  T458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2010.013469][  T458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2010.013480][  T458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2010.013505][  T458]  </TASK>
[ 2010.027852][   T93] usb 4-1: config 8 interface 205 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 16
[ 2010.258963][   T93] usb 4-1: config 8 interface 205 altsetting 5 endpoint 0x88 has an invalid bInterval 64, changing to 10
[ 2010.270570][   T93] usb 4-1: config 8 interface 205 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 2010.284389][   T93] usb 4-1: config 8 interface 253 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 2010.307970][T19565] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 2010.358534][   T93] usb 4-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[ 2010.402407][   T93] usb 4-1: config 8 interface 253 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 2010.435788][   T93] usb 4-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[ 2010.469592][T19565] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2010.474705][   T93] usb 4-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[ 2010.507661][T19565] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2010.515827][   T93] usb 4-1: config 8 interface 253 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[ 2010.528411][T19565] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 2010.546382][   T93] usb 4-1: config 8 interface 1 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[ 2010.557746][   T93] usb 4-1: config 8 interface 1 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[ 2010.571379][   T93] usb 4-1: too many endpoints for config 8 interface 222 altsetting 178: 201, using maximum allowed: 30
[ 2010.585822][   T93] usb 4-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0xE, skipping
[ 2010.617668][ T5843] Bluetooth: hci0: command 0x0405 tx timeout
[ 2010.627571][T19565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2010.657274][T19565] usb 6-1: config 0 descriptor??
[ 2010.743875][   T93] usb 4-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0x6, skipping
[ 2010.818444][   T93] usb 4-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0x1, skipping
[ 2010.969397][   T93] usb 4-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0x1, skipping
[ 2011.015958][   T93] usb 4-1: config 8 interface 222 altsetting 178 has an endpoint descriptor with address 0x99, changing to 0x89
[ 2011.057714][   T93] usb 4-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0x89, skipping
[ 2011.104791][   T93] usb 4-1: config 8 interface 222 altsetting 178 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2011.159891][  T460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7863'.
[ 2011.214758][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2011.218173][   T93] usb 4-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0xA, skipping
[ 2011.267726][   T93] usb 4-1: config 8 interface 222 altsetting 178 has a duplicate endpoint with address 0xB, skipping
[ 2011.285615][   T93] usb 4-1: config 8 interface 222 altsetting 178 has 8 endpoint descriptors, different from the interface descriptor's value: 201
[ 2011.301482][   T93] usb 4-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0xB, skipping
[ 2011.337133][   T93] usb 4-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0xB, skipping
[ 2011.618298][   T93] usb 4-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x1, skipping
[ 2011.651537][   T93] usb 4-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x7, skipping
[ 2011.668617][   T93] usb 4-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x9, skipping
[ 2011.696262][   T93] usb 4-1: config 8 interface 68 altsetting 16 bulk endpoint 0x2 has invalid maxpacket 64
[ 2011.727148][   T93] usb 4-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x5, skipping
[ 2011.748754][   T93] usb 4-1: config 8 interface 68 altsetting 16 has a duplicate endpoint with address 0x1, skipping
[ 2011.760177][   T93] usb 4-1: config 8 interface 68 altsetting 16 has an invalid descriptor for endpoint zero, skipping
[ 2011.779077][   T93] usb 4-1: config 8 interface 205 has no altsetting 0
[ 2011.786174][   T93] usb 4-1: config 8 interface 253 has no altsetting 0
[ 2011.819453][   T93] usb 4-1: config 8 interface 1 has no altsetting 0
[ 2011.829773][   T93] usb 4-1: config 8 interface 222 has no altsetting 0
[ 2011.837103][   T93] usb 4-1: config 8 interface 68 has no altsetting 0
[ 2011.847919][   T93] usb 4-1: string descriptor 0 read error: -71
[ 2011.854256][   T93] usb 4-1: Dual-Role OTG device on HNP port
[ 2011.862197][   T93] usb 4-1: can't set HNP mode: -71
[ 2012.049962][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2012.075541][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2012.084232][T27726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2012.100815][T11194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2012.227824][   T93] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 2012.398550][   T93] usb 4-1: Using ep0 maxpacket: 8
[ 2012.427618][   T93] usb 4-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00
[ 2012.436728][   T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2012.458748][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2012.514227][   T93] usb 4-1: config 0 descriptor??
[ 2012.522971][   T93] usblcd 4-1:0.0: Could not find both bulk-in and bulk-out endpoints
[ 2012.883813][  T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2012.900281][  T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2013.015612][T19565] usb 4-1: USB disconnect, device number 71
[ 2013.066483][  T490] CUSE: info not properly terminated
[ 2013.328536][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2013.735411][  T497] CUSE: info not properly terminated
[ 2013.765847][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2013.956136][T32439] usb 6-1: USB disconnect, device number 73
[ 2014.125068][  T509] netlink: 'syz.5.7877': attribute type 4 has an invalid length.
[ 2014.136096][  T509] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7877'.
[ 2014.438705][   T93] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 2014.647941][   T93] usb 6-1: device descriptor read/64, error -71
[ 2014.888234][   T93] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 2015.037744][   T93] usb 6-1: device descriptor read/64, error -71
[ 2015.061178][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2015.160066][   T93] usb usb6-port1: attempt power cycle
[ 2015.177929][T11194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2015.259152][ T2994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2015.519209][   T93] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 2015.579557][   T93] usb 6-1: device descriptor read/8, error -71
[ 2015.828108][   T93] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 2015.866335][   T93] usb 6-1: device descriptor read/8, error -71
[ 2016.128628][   T93] usb usb6-port1: unable to enumerate USB device
[ 2016.157731][   T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 2016.258099][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2016.321588][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2016.333889][   T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2016.838618][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 2016.864812][  T541] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2016.892546][  T541] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2016.906494][  T541] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2016.913482][  T541] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2016.934198][  T541] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2017.000505][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2017.132085][  T507] delete_channel: no stack
[ 2017.153592][   T24] usb 4-1: config 0 descriptor??
[ 2017.459754][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2017.747777][   T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 2017.809030][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2017.817334][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2017.828598][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2017.837383][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2017.864702][  T558] fuse: Unknown parameter 'rootmod00000000000240000'
[ 2017.919398][   T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2017.930531][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2018.001569][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2018.013278][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2018.030563][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2018.041695][   T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2018.066389][   T24] usb 6-1: Manufacturer: syz
[ 2018.085591][   T24] usb 6-1: config 0 descriptor??
[ 2018.576181][   T24] appleir 0003:05AC:8243.0066: unknown main item tag 0x0
[ 2018.587120][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2018.609063][   T24] appleir 0003:05AC:8243.0066: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 2018.883202][   T93] usb 4-1: USB disconnect, device number 73
[ 2018.929782][ T5851] Bluetooth: hci1: command 0x0405 tx timeout
[ 2018.936261][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2018.936424][T24677] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2018.942918][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[ 2019.009517][ T5851] Bluetooth: hci0: command 0x0405 tx timeout
[ 2019.089022][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2019.237149][  T575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7896'.
[ 2019.253857][  T577] macsec1: entered promiscuous mode
[ 2019.261107][  T577] macsec1: entered allmulticast mode
[ 2019.346425][  T575] netlink: 'syz.4.7896': attribute type 7 has an invalid length.
[ 2019.387366][  T578] fuse: Bad value for 'user_id'
[ 2019.398519][  T580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7898'.
[ 2019.415973][  T575] netlink: 'syz.4.7896': attribute type 8 has an invalid length.
[ 2019.456019][  T578] fuse: Bad value for 'user_id'
[ 2019.471656][  T575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7896'.
[ 2019.740243][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2019.993522][  T580] 8021q: adding VLAN 0 to HW filter on device bond5
[ 2020.057621][   T93] usb 6-1: reset high-speed USB device number 78 using dummy_hcd
[ 2020.197668][   T93] usb 6-1: device descriptor read/64, error -32
[ 2020.859340][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2020.861181][  T588] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 2020.908794][  T588] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2021.010743][T25881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2021.163361][  T605] netlink: 'syz.6.7903': attribute type 1 has an invalid length.
[ 2021.208441][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2021.228624][T32439] usb 6-1: USB disconnect, device number 78
[ 2021.426078][  T605] bond6: entered promiscuous mode
[ 2021.478539][  T605] 8021q: adding VLAN 0 to HW filter on device bond6
[ 2021.522268][  T616] bond6: (slave bridge4): making interface the new active one
[ 2021.535654][  T616] bridge4: entered promiscuous mode
[ 2021.626702][  T616] bond6: (slave bridge4): Enslaving as an active interface with an up link
[ 2022.274955][  T632] fuse: Unknown parameter 'rootmod00000000000240000'
[ 2022.516475][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2022.896030][  T641] usb usb1: usbfs: process 641 (syz.6.7913) did not claim interface 0 before use
[ 2022.910304][  T641] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2023.571813][T26608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2023.580472][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2023.589482][   T93] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2023.598148][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2023.709369][T25881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2024.323982][  T662] bridge0: port 3(macvtap0) entered blocking state
[ 2024.334078][  T662] bridge0: port 3(macvtap0) entered disabled state
[ 2024.341699][  T662] macvtap0: entered allmulticast mode
[ 2024.357808][  T662] veth0_macvtap: entered allmulticast mode
[ 2024.370872][  T662] FAULT_INJECTION: forcing a failure.
[ 2024.370872][  T662] name failslab, interval 1, probability 0, space 0, times 0
[ 2024.402208][  T662] CPU: 1 UID: 0 PID: 662 Comm: syz.5.7921 Not tainted syzkaller #0 PREEMPT(full) 
[ 2024.402234][  T662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2024.402245][  T662] Call Trace:
[ 2024.402254][  T662]  <TASK>
[ 2024.402263][  T662]  dump_stack_lvl+0x189/0x250
[ 2024.402291][  T662]  ? __pfx____ratelimit+0x10/0x10
[ 2024.402312][  T662]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2024.402332][  T662]  ? __pfx__printk+0x10/0x10
[ 2024.402356][  T662]  ? __pfx___might_resched+0x10/0x10
[ 2024.402374][  T662]  ? fs_reclaim_acquire+0x7d/0x100
[ 2024.402398][  T662]  should_fail_ex+0x414/0x560
[ 2024.402430][  T662]  should_failslab+0xa8/0x100
[ 2024.402456][  T662]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 2024.402479][  T662]  ? __kernfs_new_node+0xd7/0x7e0
[ 2024.402504][  T662]  __kernfs_new_node+0xd7/0x7e0
[ 2024.402525][  T662]  ? __lock_acquire+0xab9/0xd20
[ 2024.402549][  T662]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2024.402570][  T662]  ? kernfs_root+0x1c/0x230
[ 2024.402597][  T662]  ? kernfs_root+0x1c/0x230
[ 2024.402616][  T662]  ? kernfs_root+0x1c/0x230
[ 2024.402634][  T662]  ? kernfs_root+0x1c/0x230
[ 2024.402658][  T662]  kernfs_new_node+0x102/0x210
[ 2024.402685][  T662]  kernfs_create_link+0xa7/0x200
[ 2024.402706][  T662]  sysfs_do_create_link_sd+0x83/0x110
[ 2024.402729][  T662]  br_sysfs_addif+0x79/0x240
[ 2024.402756][  T662]  br_add_if+0x3a6/0xec0
[ 2024.402774][  T662]  ? apparmor_capable+0x137/0x1b0
[ 2024.402797][  T662]  ? bpf_lsm_capable+0x9/0x20
[ 2024.402830][  T662]  br_ioctl_stub+0x6aa/0xc80
[ 2024.402853][  T662]  ? __mutex_lock+0x335/0x1350
[ 2024.402875][  T662]  ? __pfx_br_ioctl_stub+0x10/0x10
[ 2024.402897][  T662]  ? kasan_quarantine_put+0xdd/0x220
[ 2024.402923][  T662]  ? sock_ioctl+0x4b4/0x790
[ 2024.402954][  T662]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2024.402982][  T662]  ? do_vfs_ioctl+0xbe8/0x1430
[ 2024.403006][  T662]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2024.403030][  T662]  ? __pfx_br_ioctl_stub+0x10/0x10
[ 2024.403051][  T662]  sock_ioctl+0x4d8/0x790
[ 2024.403078][  T662]  ? __pfx_sock_ioctl+0x10/0x10
[ 2024.403104][  T662]  ? __lock_acquire+0xab9/0xd20
[ 2024.403136][  T662]  compat_sock_ioctl+0x285/0xc80
[ 2024.403167][  T662]  ? __pfx_compat_sock_ioctl+0x10/0x10
[ 2024.403202][  T662]  ? __fget_files+0x3a0/0x420
[ 2024.403220][  T662]  ? __fget_files+0x2a/0x420
[ 2024.403240][  T662]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 2024.403265][  T662]  __ia32_compat_sys_ioctl+0x543/0x840
[ 2024.403290][  T662]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2024.403313][  T662]  ? __fget_files+0x3a0/0x420
[ 2024.403337][  T662]  ? fput+0xa0/0xd0
[ 2024.403358][  T662]  ? ksys_write+0x22a/0x250
[ 2024.403392][  T662]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2024.403415][  T662]  __do_fast_syscall_32+0xb6/0x2b0
[ 2024.403438][  T662]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2024.403461][  T662]  do_fast_syscall_32+0x34/0x80
[ 2024.403481][  T662]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2024.403501][  T662] RIP: 0023:0xf7f01539
[ 2024.403517][  T662] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2024.403533][  T662] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2024.403551][  T662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089a2
[ 2024.403563][  T662] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000
[ 2024.403575][  T662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2024.403585][  T662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2024.403596][  T662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2024.403624][  T662]  </TASK>
[ 2024.404668][  T662] macvtap0: left allmulticast mode
[ 2024.773050][  T662] veth0_macvtap: left allmulticast mode
[ 2024.852084][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2024.968155][  T674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7927'.
[ 2025.013730][  T674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7927'.
[ 2025.028191][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2025.160684][  T680] fuse: Unknown parameter 'rootmod00000000000240000'
[ 2025.426845][T12751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2025.441275][T12751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2025.703993][  T693] netlink: 'syz.5.7933': attribute type 2 has an invalid length.
[ 2025.850404][  T695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7932'.
[ 2025.872293][  T695] netlink: 277 bytes leftover after parsing attributes in process `syz.7.7932'.
[ 2025.881660][  T695] netlink: 277 bytes leftover after parsing attributes in process `syz.7.7932'.
[ 2026.143948][T21454] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 2026.160081][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2026.477899][T21454] usb 6-1: Using ep0 maxpacket: 16
[ 2026.554778][T21454] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 2026.567733][T21454] usb 6-1: can't read configurations, error -61
[ 2026.609341][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2026.707722][T21454] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 2026.768770][T25877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2026.877747][T21454] usb 6-1: Using ep0 maxpacket: 16
[ 2026.889437][T21454] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 2026.897804][T27726] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 2026.924031][T21454] usb 6-1: can't read configurations, error -61
[ 2026.951431][T21454] usb usb6-port1: attempt power cycle
[ 2027.047656][T27726] usb 4-1: device descriptor read/64, error -71
[ 2027.150337][ T2994] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2027.297696][T21454] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 2027.308502][T27726] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 2027.324435][  T718] lo: Caught tx_queue_len zero misconfig
[ 2027.334268][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2027.343876][  T718] netem: incorrect gi model size
[ 2027.350290][  T718] netem: change failed
[ 2027.354564][T21454] usb 6-1: Using ep0 maxpacket: 16
[ 2027.364691][T21454] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 2027.377747][T21454] usb 6-1: can't read configurations, error -61
[ 2027.448456][T27726] usb 4-1: device descriptor read/64, error -71
[ 2027.517686][T21454] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 2027.559320][T27726] usb usb4-port1: attempt power cycle
[ 2027.566384][T21454] usb 6-1: Using ep0 maxpacket: 16
[ 2027.587769][T21454] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 2027.595489][T21454] usb 6-1: can't read configurations, error -61
[ 2027.609148][T21454] usb usb6-port1: unable to enumerate USB device
[ 2027.927715][T27726] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 2027.999323][T27726] usb 4-1: device descriptor read/8, error -71
[ 2028.237853][T27726] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 2028.299013][T27726] usb 4-1: device descriptor read/8, error -71
[ 2028.428170][T27726] usb usb4-port1: unable to enumerate USB device
[ 2028.608819][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2028.689543][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2028.698678][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2028.707912][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2029.162505][  T737] fuse: Unknown parameter 'rootmod00000000000240000'
[ 2029.331426][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2029.829508][  T743] FAULT_INJECTION: forcing a failure.
[ 2029.829508][  T743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2029.849964][  T745] syz_tun: entered allmulticast mode
[ 2029.885982][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2029.910595][  T744] syz_tun: left allmulticast mode
[ 2029.927672][  T743] CPU: 1 UID: 0 PID: 743 Comm: syz.3.7952 Not tainted syzkaller #0 PREEMPT(full) 
[ 2029.927697][  T743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2029.927708][  T743] Call Trace:
[ 2029.927717][  T743]  <TASK>
[ 2029.927726][  T743]  dump_stack_lvl+0x189/0x250
[ 2029.927754][  T743]  ? __pfx____ratelimit+0x10/0x10
[ 2029.927774][  T743]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2029.927794][  T743]  ? __pfx__printk+0x10/0x10
[ 2029.927812][  T743]  ? __might_fault+0xb0/0x130
[ 2029.927847][  T743]  should_fail_ex+0x414/0x560
[ 2029.927878][  T743]  _copy_from_user+0x2d/0xb0
[ 2029.927912][  T743]  __sys_sendto+0x25c/0x520
[ 2029.927936][  T743]  ? __pfx___sys_sendto+0x10/0x10
[ 2029.927954][  T743]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 2029.927986][  T743]  ? __fget_files+0x3a0/0x420
[ 2029.928014][  T743]  ? ksys_write+0x22a/0x250
[ 2029.928047][  T743]  __ia32_sys_sendto+0xdd/0x100
[ 2029.928070][  T743]  __do_fast_syscall_32+0xb6/0x2b0
[ 2029.928091][  T743]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2029.928113][  T743]  do_fast_syscall_32+0x34/0x80
[ 2029.928133][  T743]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2029.928154][  T743] RIP: 0023:0xf7f51539
[ 2029.928170][  T743] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2029.928185][  T743] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[ 2029.928205][  T743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 2029.928217][  T743] RDX: 0000000000000000 RSI: 00000000fbfbbfbe RDI: 0000000080000100
[ 2029.928229][  T743] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[ 2029.928240][  T743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2029.928251][  T743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2029.928277][  T743]  </TASK>
[ 2030.121960][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2030.416911][T19565] IPVS: starting estimator thread 0...
[ 2030.517910][  T752] IPVS: using max 29 ests per chain, 69600 per kthread
[ 2030.611347][T26611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2030.822797][  T769] syzkaller0: entered promiscuous mode
[ 2030.845171][  T769] syzkaller0: entered allmulticast mode
[ 2031.133547][  T769] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 2031.199627][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2031.728374][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2032.398441][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2032.592096][  T794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7964'.
[ 2032.643719][  T795] FAULT_INJECTION: forcing a failure.
[ 2032.643719][  T795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2032.728345][  T795] CPU: 1 UID: 0 PID: 795 Comm: syz.7.7964 Not tainted syzkaller #0 PREEMPT(full) 
[ 2032.728361][  T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2032.728368][  T795] Call Trace:
[ 2032.728373][  T795]  <TASK>
[ 2032.728379][  T795]  dump_stack_lvl+0x189/0x250
[ 2032.728397][  T795]  ? __pfx____ratelimit+0x10/0x10
[ 2032.728409][  T795]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2032.728423][  T795]  ? __pfx__printk+0x10/0x10
[ 2032.728437][  T795]  ? __might_fault+0xb0/0x130
[ 2032.728468][  T795]  should_fail_ex+0x414/0x560
[ 2032.728497][  T795]  _copy_from_iter+0x1de/0x1790
[ 2032.728523][  T795]  ? rcu_is_watching+0x15/0xb0
[ 2032.728553][  T795]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[ 2032.728578][  T795]  ? __pfx__copy_from_iter+0x10/0x10
[ 2032.728600][  T795]  ? __build_skb_around+0x257/0x3e0
[ 2032.728624][  T795]  ? netlink_sendmsg+0x642/0xb30
[ 2032.728642][  T795]  ? skb_put+0x11b/0x210
[ 2032.728666][  T795]  netlink_sendmsg+0x6b2/0xb30
[ 2032.728694][  T795]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2032.728716][  T795]  ? __import_iovec+0x5d4/0x7f0
[ 2032.728735][  T795]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 2032.728754][  T795]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2032.728773][  T795]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2032.728791][  T795]  __sock_sendmsg+0x21c/0x270
[ 2032.728810][  T795]  ____sys_sendmsg+0x52d/0x830
[ 2032.728835][  T795]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2032.728873][  T795]  ___sys_sendmsg+0x21f/0x2a0
[ 2032.728897][  T795]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2032.728953][  T795]  ? __fget_files+0x2a/0x420
[ 2032.728969][  T795]  ? __fget_files+0x3a0/0x420
[ 2032.728995][  T795]  __sys_sendmmsg+0x28e/0x430
[ 2032.729023][  T795]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2032.729053][  T795]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2032.729090][  T795]  ? ksys_write+0x22a/0x250
[ 2032.729123][  T795]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 2032.729149][  T795]  __do_fast_syscall_32+0xb6/0x2b0
[ 2032.729170][  T795]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2032.729192][  T795]  do_fast_syscall_32+0x34/0x80
[ 2032.729211][  T795]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2032.729232][  T795] RIP: 0023:0xf7f93539
[ 2032.729247][  T795] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2032.729263][  T795] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 2032.729283][  T795] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800002c0
[ 2032.729296][  T795] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000
[ 2032.729307][  T795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2032.729317][  T795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2032.729327][  T795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2032.729352][  T795]  </TASK>
[ 2033.014536][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2033.389498][T19565] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 2033.550122][T19565] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2033.585487][T19565] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2033.597330][T19565] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2033.608189][T19565] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2033.619622][T21454] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 2033.731125][T19565] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2033.755659][T19565] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2033.765366][T19565] usb 7-1: Manufacturer: syz
[ 2033.789561][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2033.799590][T19565] usb 7-1: config 0 descriptor??
[ 2034.243667][T19565] appleir 0003:05AC:8243.0067: unknown main item tag 0x0
[ 2034.282945][T19565] appleir 0003:05AC:8243.0067: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[ 2034.368290][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2034.458242][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2034.467074][T27726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2034.481533][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2034.882635][T27726] IPVS: starting estimator thread 0...
[ 2034.919708][T26611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2034.980435][T26611] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2034.989089][  T822] IPVS: using max 31 ests per chain, 74400 per kthread
[ 2035.677662][ T5930] usb 7-1: reset high-speed USB device number 9 using dummy_hcd
[ 2036.107935][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2036.368448][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2036.379247][T26606] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2036.569019][T19565] usb 7-1: USB disconnect, device number 9
[ 2036.746982][  T843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7987'.
[ 2037.495204][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2037.664947][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.671489][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2037.718811][T26606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2037.738804][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2037.750910][T26606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2037.989400][  T861] trusted_key: encrypted_key: insufficient parameters specified
[ 2038.011725][  T861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7978'.
[ 2038.602749][  T874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7986'.
[ 2038.630518][  T874] netlink: 101 bytes leftover after parsing attributes in process `syz.4.7986'.
[ 2038.662623][  T652] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2039.050635][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2039.108053][T19565] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 2039.483111][T19565] usb 6-1: config 47 has no interfaces?
[ 2039.497750][T19565] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2039.518075][T19565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2039.526239][T19565] usb 6-1: Product: syz
[ 2039.537457][T19565] usb 6-1: Manufacturer: syz
[ 2039.542800][T19565] usb 6-1: SerialNumber: syz
[ 2039.573812][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2040.042530][  T893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7991'.
[ 2040.208258][T26611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2040.221320][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2040.231028][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2040.514573][T26606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2040.523362][T26606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2040.548335][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2040.604752][T12751] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2041.491431][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2041.738750][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2042.067423][  T933] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8001'.
[ 2042.131165][ T2994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2042.308209][   T43] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 2042.352173][  T945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8003'.
[ 2042.396547][  T945] netlink: 101 bytes leftover after parsing attributes in process `syz.7.8003'.
[ 2042.557439][   T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2042.570356][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2042.586819][   T43] usb 4-1: Product: syz
[ 2042.708649][T19565] usb 6-1: USB disconnect, device number 84
[ 2042.727786][   T43] usb 4-1: Manufacturer: syz
[ 2042.732474][   T43] usb 4-1: SerialNumber: syz
[ 2042.862771][   T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2042.910043][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2042.920988][  T652] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2043.211511][ T5930] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2043.318765][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2043.357648][T19565] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 2043.465856][ T2994] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2043.530517][T19565] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2043.561884][T19565] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2043.661896][T19565] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2043.673669][T19565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2043.709663][T19565] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 2043.762848][T19565] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 2043.842224][  T936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2043.858304][  T936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2043.906009][T12751] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2043.907039][   T30] audit: type=1326 audit(1759233603.293:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2043.963271][T27726] usb 4-1: USB disconnect, device number 78
[ 2044.061056][   T30] audit: type=1326 audit(1759233603.293:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.092697][   T30] audit: type=1326 audit(1759233603.293:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.144231][   T30] audit: type=1326 audit(1759233603.333:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.199156][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2044.219431][   T30] audit: type=1326 audit(1759233603.333:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.245044][   T30] audit: type=1326 audit(1759233603.333:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.268151][   T30] audit: type=1326 audit(1759233603.333:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.519342][ T5930] usb 4-1: Service connection timeout for: 256
[ 2044.527305][ T5930] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 2044.544303][ T5930] ath9k_htc: Failed to initialize the device
[ 2044.572414][T27726] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2044.578886][   T30] audit: type=1326 audit(1759233603.333:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.601983][   T30] audit: type=1326 audit(1759233603.333:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.624847][   T30] audit: type=1326 audit(1759233603.333:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=935 comm="syz.3.8002" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2044.647616][T11001] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 2044.947059][T11001] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2044.963279][T11001] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2045.001978][T11001] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2045.023517][T11001] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2045.037639][T11001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2045.084025][T11001] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 2045.145827][T11001] usb 7-1: invalid MIDI out EP 0
[ 2045.328763][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2045.337427][T26611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2045.426719][T29218] udevd[29218]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2046.146906][T11001] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2046.173495][T11001] usb 6-1: USB disconnect, device number 85
[ 2046.397268][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2046.651310][  T988] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.8015'.
[ 2046.795551][  T991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8017'.
[ 2046.850066][  T991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8017'.
[ 2046.914458][  T992] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8017'.
[ 2046.962909][  T992] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8017'.
[ 2047.029771][T26606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2047.215526][T12751] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2047.420343][T26606] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2047.575006][ T5930] usb 7-1: USB disconnect, device number 10
[ 2047.654188][ T1005] batadv1: entered promiscuous mode
[ 2047.882185][ T1018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8026'.
[ 2047.900176][ T1018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8026'.
[ 2047.911248][ T1018] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8026'.
[ 2047.921490][T26611] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2048.227858][T26611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2048.237792][T27726] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 2048.445302][ T2994] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2048.579021][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2048.588266][T27726] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2048.651535][T27726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2048.747254][T27726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2048.787985][T27726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2048.968142][T27726] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2048.977234][T27726] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2049.166288][T27726] usb 4-1: Manufacturer: syz
[ 2049.174651][T27726] usb 4-1: config 0 descriptor??
[ 2049.336348][ T2994] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2049.410673][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2049.628149][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2049.734548][T27726] appleir 0003:05AC:8243.0068: unknown main item tag 0x0
[ 2049.766119][T27726] appleir 0003:05AC:8243.0068: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 2050.369028][ T1071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8039'.
[ 2050.422179][ T1071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8039'.
[ 2050.768285][T25879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2050.858965][ T1083] netlink: 'syz.6.8043': attribute type 1 has an invalid length.
[ 2050.904450][ T1083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2050.911763][ T1083] IPv6: NLM_F_CREATE should be set when creating new route
[ 2050.919272][ T1083] IPv6: NLM_F_CREATE should be set when creating new route
[ 2050.929376][ T1083] netlink: 'syz.6.8043': attribute type 1 has an invalid length.
[ 2050.937225][ T1083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2051.090575][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2051.171738][T21454] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0
[ 2051.220263][T21454] hid-generic 0000:0000:0000.0069: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2051.406667][ T1104] fuse: Unknown parameter 'rootmod00000000000240000'
[ 2051.940245][   T93] usb 4-1: USB disconnect, device number 79
[ 2052.051777][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2052.447935][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2052.684666][    C1] ------------[ cut here ]------------
[ 2052.690230][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[ 2052.701024][    C1] WARNING: CPU: 1 PID: 1090 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[ 2052.711112][    C1] Modules linked in:
[ 2052.715033][    C1] CPU: 1 UID: 0 PID: 1090 Comm: syz.5.8045 Not tainted syzkaller #0 PREEMPT(full) 
[ 2052.724405][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2052.734551][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[ 2052.740880][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 c0 c2 6b 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 42 2f d5 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[ 2052.760602][    C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246
[ 2052.766705][    C1] RAX: 0432392c7730c400 RBX: 000000000000000c RCX: ffff88807c4c5a00
[ 2052.774782][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[ 2052.782927][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[ 2052.790993][    C1] R10: dffffc0000000000 R11: fffffbfff1b7a1d4 R12: ffff8880463de668
[ 2052.799039][    C1] R13: 0000000000000000 R14: ffff888084ea0e40 R15: ffff888084ea30d8
[ 2052.807065][    C1] FS:  0000000000000000(0000) GS:ffff88812647e000(0063) knlGS:00000000f53d5b40
[ 2052.816064][    C1] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 2052.822724][    C1] CR2: 00000000801d6018 CR3: 00000000483b8000 CR4: 00000000003526f0
[ 2052.830776][    C1] Call Trace:
[ 2052.834095][    C1]  <IRQ>
[ 2052.836964][    C1]  rate_control_send_low+0x194/0x7a0
[ 2052.842361][    C1]  rate_control_get_rate+0x20b/0x5d0
[ 2052.847781][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[ 2052.853645][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[ 2052.860081][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 2052.865520][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 2052.871366][    C1]  ieee80211_beacon_get_ap+0x1868/0x1f30
[ 2052.877146][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[ 2052.883206][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[ 2052.888851][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[ 2052.894449][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[ 2052.900087][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[ 2052.905692][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[ 2052.911308][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[ 2052.916802][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[ 2052.923072][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[ 2052.928695][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 2052.935952][    C1]  __iterate_interfaces+0x2ab/0x590
[ 2052.941227][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 2052.947336][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 2052.954667][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 2052.960845][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[ 2052.967984][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[ 2052.973291][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2052.979270][    C1]  __hrtimer_run_queues+0x52c/0xc60
[ 2052.984555][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 2052.990389][    C1]  ? read_tsc+0x9/0x20
[ 2052.994501][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 2053.000698][    C1]  hrtimer_run_softirq+0x187/0x2b0
[ 2053.005855][    C1]  handle_softirqs+0x286/0x870
[ 2053.010702][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[ 2053.015513][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 2053.020929][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[ 2053.026161][    C1]  __irq_exit_rcu+0xca/0x1f0
[ 2053.030848][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 2053.036202][    C1]  irq_exit_rcu+0x9/0x30
[ 2053.040524][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2053.046199][    C1]  </IRQ>
[ 2053.049218][    C1]  <TASK>
[ 2053.052227][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2053.058459][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[ 2053.064993][    C1] Code: 74 05 e8 db 84 8d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> c3 2f 56 f6 65 8b 05 0c e4 11 07 85 c0 74 40 48 c7 04 24 0e 36
[ 2053.084635][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2053.090741][    C1] RSP: 0018:ffffc90018897520 EFLAGS: 00000206
[ 2053.096835][    C1] RAX: 0432392c7730c400 RBX: 0000000000000a02 RCX: 0432392c7730c400
[ 2053.104947][    C1] RDX: 0000000000000006 RSI: ffffffff8d531ee2 RDI: 0000000000000001
[ 2053.112993][    C1] RBP: ffffc900188975b8 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[ 2053.121059][    C1] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: dffffc0000000000
[ 2053.124268][   T30] kauditd_printk_skb: 14 callbacks suppressed
[ 2053.124285][   T30] audit: type=1326 audit(1759233612.193:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1105 comm="syz.3.8050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2053.129210][    C1] R13: 1ffff1100679d9bd R14: ffff888033cecd80 R15: 1ffff92003112ea4
[ 2053.129259][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2053.129298][    C1]  __skb_try_recv_datagram+0x17c/0x4e0
[ 2053.129333][    C1]  ? __pfx_sk_busy_loop_end+0x10/0x10
[ 2053.129364][    C1]  __unix_dgram_recvmsg+0x2d4/0xd60
[ 2053.129403][    C1]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[ 2053.129430][    C1]  ? __lock_acquire+0xab9/0xd20
[ 2053.129459][    C1]  ? unix_dgram_recvmsg+0xb1/0xd0
[ 2053.129476][    C1]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[ 2053.129495][    C1]  sock_recvmsg_nosec+0x183/0x1c0
[ 2053.181627][   T30] audit: type=1326 audit(1759233612.193:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1105 comm="syz.3.8050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2053.183543][    C1]  ____sys_recvmsg+0x3aa/0x460
[ 2053.183584][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 2053.208034][   T30] audit: type=1326 audit(1759233612.193:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1105 comm="syz.3.8050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2053.210041][    C1]  ? get_compat_msghdr+0x37e/0x4a0
[ 2053.230817][   T30] audit: type=1326 audit(1759233612.193:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1105 comm="syz.3.8050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2053.237100][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2053.302914][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2053.309020][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2053.313806][    C1]  ? ___sys_recvmsg+0x1c4/0x510
[ 2053.317716][   T30] audit: type=1326 audit(1759233612.193:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1105 comm="syz.3.8050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2053.318743][    C1]  ___sys_recvmsg+0x1b5/0x510
[ 2053.345516][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2053.350834][    C1]  ? do_recvmmsg+0x4ab/0x770
[ 2053.355455][    C1]  do_recvmmsg+0x36a/0x770
[ 2053.359956][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2053.364929][    C1]  ? kcov_ioctl+0x200/0x640
[ 2053.369520][    C1]  ? kfree+0x4d/0x440
[ 2053.373547][    C1]  ? fput+0xa0/0xd0
[ 2053.377393][    C1]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2053.382937][   T30] audit: type=1326 audit(1759233612.193:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1105 comm="syz.3.8050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f51539 code=0x7ffc0000
[ 2053.383432][    C1]  __sys_recvmmsg+0x19d/0x280
[ 2053.405341][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2053.416162][    C1]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 2053.421521][    C1]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 2053.421573][T12751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2053.427731][    C1]  __do_fast_syscall_32+0xb6/0x2b0
[ 2053.440981][    C1]  do_fast_syscall_32+0x34/0x80
[ 2053.445863][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2053.452268][    C1] RIP: 0023:0xf7f01539
[ 2053.456386][    C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2053.476141][    C1] RSP: 002b:00000000f53d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 2053.484594][    C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[ 2053.492594][    C1] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000
[ 2053.500621][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2053.508626][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2053.516608][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2053.524633][    C1]  </TASK>
[ 2053.527713][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2053.535126][    C1] CPU: 1 UID: 0 PID: 1090 Comm: syz.5.8045 Not tainted syzkaller #0 PREEMPT(full) 
[ 2053.544651][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2053.554716][    C1] Call Trace:
[ 2053.558446][    C1]  <IRQ>
[ 2053.561378][    C1]  dump_stack_lvl+0x99/0x250
[ 2053.565990][    C1]  ? __asan_memcpy+0x40/0x70
[ 2053.570588][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2053.575796][    C1]  ? __pfx__printk+0x10/0x10
[ 2053.580382][    C1]  vpanic+0x281/0x750
[ 2053.584358][    C1]  ? __pfx__printk+0x10/0x10
[ 2053.588935][    C1]  ? __pfx_vpanic+0x10/0x10
[ 2053.593478][    C1]  ? is_bpf_text_address+0x292/0x2b0
[ 2053.598853][    C1]  panic+0xb9/0xc0
[ 2053.602569][    C1]  ? __pfx_panic+0x10/0x10
[ 2053.606984][    C1]  __warn+0x31b/0x4b0
[ 2053.610954][    C1]  ? __rate_control_send_low+0x5df/0x820
[ 2053.616582][    C1]  ? __rate_control_send_low+0x5df/0x820
[ 2053.622205][    C1]  report_bug+0x2be/0x4f0
[ 2053.626529][    C1]  ? __rate_control_send_low+0x5df/0x820
[ 2053.632169][    C1]  ? __rate_control_send_low+0x5df/0x820
[ 2053.637791][    C1]  ? __rate_control_send_low+0x5e1/0x820
[ 2053.643608][    C1]  handle_bug+0x84/0x160
[ 2053.647847][    C1]  exc_invalid_op+0x1a/0x50
[ 2053.652712][    C1]  asm_exc_invalid_op+0x1a/0x20
[ 2053.657554][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[ 2053.663815][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 c0 c2 6b 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 42 2f d5 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[ 2053.683428][    C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246
[ 2053.689507][    C1] RAX: 0432392c7730c400 RBX: 000000000000000c RCX: ffff88807c4c5a00
[ 2053.697511][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[ 2053.705490][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[ 2053.713458][    C1] R10: dffffc0000000000 R11: fffffbfff1b7a1d4 R12: ffff8880463de668
[ 2053.721856][    C1] R13: 0000000000000000 R14: ffff888084ea0e40 R15: ffff888084ea30d8
[ 2053.729920][    C1]  ? __rate_control_send_low+0x5de/0x820
[ 2053.735556][    C1]  rate_control_send_low+0x194/0x7a0
[ 2053.740838][    C1]  rate_control_get_rate+0x20b/0x5d0
[ 2053.746126][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[ 2053.752026][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[ 2053.758362][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 2053.763737][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 2053.769460][    C1]  ieee80211_beacon_get_ap+0x1868/0x1f30
[ 2053.775100][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[ 2053.781078][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[ 2053.786625][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[ 2053.792174][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[ 2053.797862][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[ 2053.803540][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[ 2053.809092][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[ 2053.814574][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[ 2053.820660][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[ 2053.826408][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 2053.833711][    C1]  __iterate_interfaces+0x2ab/0x590
[ 2053.838901][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 2053.845064][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 2053.852777][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 2053.859361][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[ 2053.866386][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[ 2053.871582][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2053.877392][    C1]  __hrtimer_run_queues+0x52c/0xc60
[ 2053.882617][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 2053.888326][    C1]  ? read_tsc+0x9/0x20
[ 2053.892387][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 2053.898212][    C1]  hrtimer_run_softirq+0x187/0x2b0
[ 2053.903316][    C1]  handle_softirqs+0x286/0x870
[ 2053.908075][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[ 2053.912841][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 2053.918134][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[ 2053.923338][    C1]  __irq_exit_rcu+0xca/0x1f0
[ 2053.927918][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 2053.933111][    C1]  irq_exit_rcu+0x9/0x30
[ 2053.937339][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2053.942963][    C1]  </IRQ>
[ 2053.945885][    C1]  <TASK>
[ 2053.948828][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2053.954795][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[ 2053.961285][    C1] Code: 74 05 e8 db 84 8d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> c3 2f 56 f6 65 8b 05 0c e4 11 07 85 c0 74 40 48 c7 04 24 0e 36
[ 2053.980882][    C1] RSP: 0018:ffffc90018897520 EFLAGS: 00000206
[ 2053.986941][    C1] RAX: 0432392c7730c400 RBX: 0000000000000a02 RCX: 0432392c7730c400
[ 2053.994900][    C1] RDX: 0000000000000006 RSI: ffffffff8d531ee2 RDI: 0000000000000001
[ 2054.002885][    C1] RBP: ffffc900188975b8 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[ 2054.010873][    C1] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: dffffc0000000000
[ 2054.018839][    C1] R13: 1ffff1100679d9bd R14: ffff888033cecd80 R15: 1ffff92003112ea4
[ 2054.026837][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2054.033178][    C1]  __skb_try_recv_datagram+0x17c/0x4e0
[ 2054.038652][    C1]  ? __pfx_sk_busy_loop_end+0x10/0x10
[ 2054.044049][    C1]  __unix_dgram_recvmsg+0x2d4/0xd60
[ 2054.049288][    C1]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[ 2054.055034][    C1]  ? __lock_acquire+0xab9/0xd20
[ 2054.059996][    C1]  ? unix_dgram_recvmsg+0xb1/0xd0
[ 2054.065037][    C1]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[ 2054.070601][    C1]  sock_recvmsg_nosec+0x183/0x1c0
[ 2054.075660][    C1]  ____sys_recvmsg+0x3aa/0x460
[ 2054.080671][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 2054.085990][    C1]  ? get_compat_msghdr+0x37e/0x4a0
[ 2054.091128][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2054.095897][    C1]  ? ___sys_recvmsg+0x1c4/0x510
[ 2054.100777][    C1]  ___sys_recvmsg+0x1b5/0x510
[ 2054.105487][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2054.110726][    C1]  ? do_recvmmsg+0x4ab/0x770
[ 2054.115333][    C1]  do_recvmmsg+0x36a/0x770
[ 2054.119759][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2054.124780][    C1]  ? kcov_ioctl+0x200/0x640
[ 2054.129466][    C1]  ? kfree+0x4d/0x440
[ 2054.133508][    C1]  ? fput+0xa0/0xd0
[ 2054.137441][    C1]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2054.143450][    C1]  __sys_recvmmsg+0x19d/0x280
[ 2054.148747][    C1]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 2054.153953][    C1]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 2054.160109][    C1]  __do_fast_syscall_32+0xb6/0x2b0
[ 2054.165238][    C1]  do_fast_syscall_32+0x34/0x80
[ 2054.170093][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2054.176419][    C1] RIP: 0023:0xf7f01539
[ 2054.180525][    C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2054.200206][    C1] RSP: 002b:00000000f53d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 2054.208735][    C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[ 2054.216704][    C1] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000
[ 2054.224670][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2054.232644][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2054.240614][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2054.248631][    C1]  </TASK>
[ 2054.252050][    C1] Kernel Offset: disabled
[ 2054.257058][    C1] Rebooting in 86400 seconds..