last executing test programs:

22m37.261370214s ago: executing program 32 (id=1990):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$tun(r1, 0x0, 0xc2)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, 0x0, 0x5)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

20m59.480627294s ago: executing program 33 (id=2398):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
readv(r3, &(0x7f0000000140), 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
read$alg(r3, &(0x7f0000000080)=""/47, 0x2f)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r0, 0x1, 0x6, @multicast}, 0x10)

20m47.623312143s ago: executing program 0 (id=2567):
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0xc, 0x4, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 0x0, 0xb7, 0xc0, 0xfffffffe}}, 0xe8)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000240))
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890)

20m37.418372579s ago: executing program 0 (id=2573):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000002c0), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$unix(0x1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a1400", 0xa)
recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38)

20m37.116955168s ago: executing program 3 (id=2577):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000440)="9ad330fbc9b55400040000ea0756a8", 0xf, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8}, 0x14)

20m35.841158963s ago: executing program 5 (id=2582):
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0xc, 0x4, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 0x0, 0xb7, 0xc0, 0xfffffffe}}, 0xe8)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000240))
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890)

20m35.357945199s ago: executing program 3 (id=2585):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
writev(r0, &(0x7f0000004e40)=[{&(0x7f0000002d40)="58ba24be2af84b4fb852faa3be4c5f9b", 0x10}], 0x1)

20m35.307828177s ago: executing program 3 (id=2586):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010020000000008000000000000000000", @ANYRES32=0x0, @ANYBLOB='T2\t\x00\b'], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0)
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

20m35.22878474s ago: executing program 5 (id=2587):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
listen(r0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
shutdown(r0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

20m33.739614824s ago: executing program 5 (id=2590):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

20m33.319829746s ago: executing program 5 (id=2592):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000006000000045000000700000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x22000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000400))
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x48010)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x3}, 0x18)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
accept4$nfc_llcp(r3, 0x0, 0x0, 0x0)

20m32.842074701s ago: executing program 5 (id=2594):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000980)="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", 0x0, 0x6}, 0x38)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x688100, 0x108)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000001b00))
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
pipe(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
getrlimit(0x8, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800000000000000", @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

20m32.789026329s ago: executing program 3 (id=2595):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000440)="9ad330fbc9b55400040000ea0756a8", 0xf, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8}, 0x14)

20m32.641424271s ago: executing program 4 (id=2596):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010129bd7000fddbdf25310000000500330004000000050036000100000008000240", @ANYRES32=r3, @ANYBLOB="050033"], 0x34}, 0x1, 0x0, 0x0, 0x400c5}, 0x84)

20m32.53697672s ago: executing program 4 (id=2597):
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

20m32.393488413s ago: executing program 4 (id=2598):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

20m31.983419107s ago: executing program 4 (id=2599):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002140004ff0000060000de00"], 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)

20m31.814739943s ago: executing program 5 (id=2600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0x4, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x800, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x800000, 0x3, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x24, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x8464, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0xbdd7, 0x3, 0x8, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x7, 0x0, 0x601, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x40003, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x2, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x5, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0xffff, 0x8, 0xffffffff, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x7, {0x4, 0x2, 0x0, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x5, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0x7, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0x3, 0xb1e5, 0x0, 0x5, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf44, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x1d, 0x6, 0xc, 0xf, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0xa, 0x3, 0x0, 0x200, 0x7, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x5, 0x1, 0x5, 0x1, 0x8, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38b, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x4, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8005}, 0xc884)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

20m31.496969459s ago: executing program 3 (id=2601):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

20m31.423109206s ago: executing program 4 (id=2602):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xe76b, 0x7f, 0xc, 0x101, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x1, 0x1000400000de, 0x0)

20m31.27276713s ago: executing program 4 (id=2603):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000700)=[{r3}, {r6, 0x1000}], 0x2, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x44}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffc}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
ioctl$SIOCNRDECOBS(r9, 0x891e)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0)

20m31.264034831s ago: executing program 3 (id=2604):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010020000000008000000000000000000", @ANYRES32=0x0, @ANYBLOB='T2\t\x00\b'], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0)
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

20m29.81745949s ago: executing program 0 (id=2605):
openat$tun(0xffffffffffffff9c, 0x0, 0x24981, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
io_setup(0x30, &(0x7f0000000600))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e20, 0xfffffc00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, @in6={0xa, 0x4e23, 0x6adcc8a4, @empty, 0xfffffffc}, @in6={0xa, 0x4e21, 0x10, @mcast2, 0x503ccbec}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000029000701000000000700000002b02ec09cad88285201e475dadecf927c0000"], 0x14}}, 0x4010)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r6, 0xcccccccc})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300})

20m28.292667955s ago: executing program 0 (id=2606):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010129bd7000fddbdf25310000000500330004000000050036000100000008000240", @ANYRES32=r3, @ANYBLOB="0500"], 0x34}, 0x1, 0x0, 0x0, 0x400c5}, 0x84)

20m28.212326404s ago: executing program 0 (id=2607):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
splice(r0, 0x0, r4, 0x0, 0x80, 0x8)
write(r2, 0x0, 0x0)

20m27.269240005s ago: executing program 0 (id=2608):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
unshare(0x40400)
bind$netlink(r0, 0x0, 0x0)

20m16.426481401s ago: executing program 34 (id=2600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0x4, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x800, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x800000, 0x3, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x24, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x8464, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0xbdd7, 0x3, 0x8, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x7, 0x0, 0x601, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x40003, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x2, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x5, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0xffff, 0x8, 0xffffffff, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x7, {0x4, 0x2, 0x0, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x5, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0x7, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0x3, 0xb1e5, 0x0, 0x5, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf44, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x1d, 0x6, 0xc, 0xf, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0xa, 0x3, 0x0, 0x200, 0x7, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x5, 0x1, 0x5, 0x1, 0x8, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38b, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x4, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8005}, 0xc884)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

20m15.9338145s ago: executing program 35 (id=2604):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010020000000008000000000000000000", @ANYRES32=0x0, @ANYBLOB='T2\t\x00\b'], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0)
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

20m15.858623696s ago: executing program 36 (id=2603):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000700)=[{r3}, {r6, 0x1000}], 0x2, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x44}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffc}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
ioctl$SIOCNRDECOBS(r9, 0x891e)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0)

20m11.930501388s ago: executing program 37 (id=2608):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
unshare(0x40400)
bind$netlink(r0, 0x0, 0x0)

18m47.374920516s ago: executing program 8 (id=2640):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f00000007c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x800, 0x0, 0x0)

18m47.22900155s ago: executing program 8 (id=2641):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
listen(r0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
shutdown(r0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

18m46.06409076s ago: executing program 8 (id=2642):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

18m45.930449422s ago: executing program 8 (id=2643):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0x0, r4})
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000002000))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fffffff}]})
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3c)
nanosleep(0x0, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)

18m44.253772259s ago: executing program 8 (id=2644):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0x4, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x800, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x800000, 0x3, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x24, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x8464, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0xbdd7, 0x3, 0x8, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x7, 0x0, 0x601, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x40003, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x2, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x5, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0xffff, 0x8, 0xffffffff, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x7, {0x4, 0x2, 0x0, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x5, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0x7, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0x3, 0xb1e5, 0x0, 0x5, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf44, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x1d, 0x6, 0xc, 0xf, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0xa, 0x3, 0x0, 0x200, 0x7, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x5, 0x1, 0x5, 0x1, 0x8, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38b, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x4, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8005}, 0xc884)

18m43.508311203s ago: executing program 8 (id=2645):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x20}}, 0x4000000)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x14)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000)

18m28.261464524s ago: executing program 38 (id=2645):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x20}}, 0x4000000)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x14)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000)

2m9.425640112s ago: executing program 6 (id=5205):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100)
rename(0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}], 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x337440, 0x0)

2m9.13421105s ago: executing program 6 (id=5207):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000940)='7', 0x1}], 0x1)

2m7.220911684s ago: executing program 6 (id=5208):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000940)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r2, 0x0, 0x0, 0x400000a0, 0x0)
sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))
socket$alg(0x26, 0x5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
waitid(0x2, 0x0, 0x0, 0x41000004, &(0x7f0000000040))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00005b1000/0x1000)=nil)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb845865", 0xb1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r6, r5}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}})

2m5.573320545s ago: executing program 6 (id=5212):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1000000}}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001"], 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x8000000, 0x2, 0x0, 0x0, 0x4}, 0x20)

2m3.632958304s ago: executing program 6 (id=5215):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x48000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
mq_notify(0xffffffffffffffff, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r8 = syz_clone(0x2044100, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000540)=r8, 0x12)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10)

2m3.376465415s ago: executing program 6 (id=5216):
userfaultfd(0x801)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2713, &(0x7f0000c35fff), &(0x7f0000000000))
r4 = socket$nl_audit(0x10, 0x3, 0x9)
syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002369d7b10210435032c56010203010902400001070870bc090430fc0002feff0905"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})
getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40)
r5 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000200)={"f4b4d4c5", 0x1ff, 0x4, 0x5, 0x4, 0x5, "e3f9bb62f4250bf57f75aa6d168578", "190cee0f", "52c97b38", "934848dc", ["b3d2b9debbd2f670a55b8866", "0bcebdc88439485bf4101064", "c00ab4eb0ca55f29b9d01efb", "42f677f5e5e8cd578d6b78a4"]})

1m56.721253729s ago: executing program 1 (id=5224):
r0 = socket(0x2, 0x80805, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
mq_notify(0xffffffffffffffff, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = syz_clone(0x2044100, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540)=r6, 0x12)
socket(0x400000000010, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10)

1m51.94974048s ago: executing program 2 (id=5227):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
bind$can_raw(r0, &(0x7f00000000c0), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x2)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0xfffffffffffffea0)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f0000000200), 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
shutdown(r3, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000001580)=""/170, 0xaa}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000040)=""/53, 0x35}], 0x4, 0x187, 0x7)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
r4 = syz_open_dev$vivid(0x0, 0x3, 0x2)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0)

1m51.912331453s ago: executing program 1 (id=5228):
io_setup(0x7, &(0x7f00000000c0))
eventfd2(0xffffffff, 0x80000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = inotify_init()
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000005c0), &(0x7f0000000040)=0x80)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000340)={0x1000020, {{0xa, 0xfffd, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2020)
write$binfmt_elf64(r4, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
close_range(r2, 0xffffffffffffffff, 0x0)

1m48.083742121s ago: executing program 2 (id=5230):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000240)={0x5, &(0x7f00000000c0)=[{0x1d, 0xc0}, {0x6, 0x7}, {0xd, 0x8000}, {0x3c0, 0x6}, {0x3, 0x26c3}]})
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001080)={0x1a, {"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", 0x1000}}, 0x1006)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000b51c9451337e91730000000095000000000000002edf58cd50ce0c49b60288eb030b4742cf4c3dda0dc6b57c3c7909ae55fcfc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd)
recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r4 = gettid()
timer_create(0x7, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0xb4}}, 0x200000d4)
syz_io_uring_setup(0xefc, &(0x7f00000001c0)={0x0, 0x200db7c, 0x501d, 0x2, 0x1f2}, &(0x7f0000000080), &(0x7f0000000140))

1m47.112264169s ago: executing program 1 (id=5233):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000010c0)=0x2)

1m47.015739465s ago: executing program 2 (id=5234):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
dup(0xffffffffffffffff)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r1 = io_uring_setup(0x3454, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2e9})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$inet6_udp(0xa, 0x2, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)

1m44.488635092s ago: executing program 1 (id=5238):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x48000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
mq_notify(0xffffffffffffffff, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r8 = syz_clone(0x2044100, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000540)=r8, 0x12)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10)

1m40.815269441s ago: executing program 2 (id=5240):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0x22, 0x2, 0x3)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r3, <r5=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
close_range(r2, r5, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18)

1m34.686135721s ago: executing program 1 (id=5243):
io_setup(0x7, &(0x7f00000000c0))
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = inotify_init()
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000005c0), &(0x7f0000000040)=0x80)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000340)={0x1000020, {{0xa, 0xfffd, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000002800)={0x2020}, 0x2020)
write$binfmt_elf64(r5, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
close_range(r3, 0xffffffffffffffff, 0x0)

1m33.632645402s ago: executing program 2 (id=5248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8)

1m33.063580035s ago: executing program 2 (id=5249):
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
acct(0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000080)={0x4, [[0x7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3], [0xfffffffc, 0xffffffff, 0x4d4b4a73, 0x0, 0x5, 0x0, 0xe], [0x48, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3]], '\x00', [{0x3, 0x1001}, {}, {0x0, 0x1}, {0x0, 0x8}, {0x200000}, {0x3}, {}, {}, {}, {0xfffffffd}, {0x8000, 0x1}, {0x0, 0x12}], '\x00', 0x4})
r1 = socket(0x11, 0xa, 0x8)
getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x20040009}, 0xc)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x14c, &(0x7f00000002c0)=ANY=[])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000013c0)=ANY=[@ANYRESDEC=r5, @ANYRES64, @ANYRESOCT=r2, @ANYRES32=r5, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc79, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
syz_emit_vhci(&(0x7f0000001300)=ANY=[@ANYBLOB="da8b65ca5c84b82cf2267fdb050946379eb5582b506c2efc6793fdd2a60f85a29acac7d9f2c89da52439daea2505073d00f5f16c607005f3651acd9e1ffcf61e7c85ff42d1f46599fc35aa46ae83c41bd2062f257ca13d434dbebe25b47a579214d50ef5ecef50886ae73cb00667fbdfb63b972b87bda74772b8902352f79ba96fd18367a6c006d5be7e483b5ae15db13d983042b33281f57ca9ad9dcdb8db4b77d749d056793aa7e3334f51865c0a045a102f9c7c"], 0xe)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4})

1m30.007324045s ago: executing program 1 (id=5252):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x48000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
mq_notify(0xffffffffffffffff, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r8 = syz_clone(0x2044100, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000540)=r8, 0x12)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10)

1m17.703576038s ago: executing program 39 (id=5249):
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
acct(0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000080)={0x4, [[0x7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3], [0xfffffffc, 0xffffffff, 0x4d4b4a73, 0x0, 0x5, 0x0, 0xe], [0x48, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3]], '\x00', [{0x3, 0x1001}, {}, {0x0, 0x1}, {0x0, 0x8}, {0x200000}, {0x3}, {}, {}, {}, {0xfffffffd}, {0x8000, 0x1}, {0x0, 0x12}], '\x00', 0x4})
r1 = socket(0x11, 0xa, 0x8)
getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x20040009}, 0xc)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x14c, &(0x7f00000002c0)=ANY=[])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000013c0)=ANY=[@ANYRESDEC=r5, @ANYRES64, @ANYRESOCT=r2, @ANYRES32=r5, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc79, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
syz_emit_vhci(&(0x7f0000001300)=ANY=[@ANYBLOB="da8b65ca5c84b82cf2267fdb050946379eb5582b506c2efc6793fdd2a60f85a29acac7d9f2c89da52439daea2505073d00f5f16c607005f3651acd9e1ffcf61e7c85ff42d1f46599fc35aa46ae83c41bd2062f257ca13d434dbebe25b47a579214d50ef5ecef50886ae73cb00667fbdfb63b972b87bda74772b8902352f79ba96fd18367a6c006d5be7e483b5ae15db13d983042b33281f57ca9ad9dcdb8db4b77d749d056793aa7e3334f51865c0a045a102f9c7c"], 0xe)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4})

1m14.77815072s ago: executing program 40 (id=5252):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x48000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
mq_notify(0xffffffffffffffff, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r8 = syz_clone(0x2044100, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000540)=r8, 0x12)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10)

28.909383481s ago: executing program 9 (id=5303):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000)
creat(&(0x7f0000000000)='./file0\x00', 0x60)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x1812c09}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x0, 0x3572111cb2a712f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$dir(0xffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x101200, 0x8)

27.973936006s ago: executing program 9 (id=5304):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00')
read$FUSE(r1, &(0x7f00000046c0)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)

27.513563515s ago: executing program 9 (id=5306):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000001280)='configfs\x00', 0x0)
socket(0x840000000002, 0x3, 0xff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(r6, r7, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
writev(r0, 0x0, 0x0)

24.66784573s ago: executing program 7 (id=5307):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x482, 0x4)
socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0xe39b}, 0x0)
chdir(&(0x7f0000000480)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

24.511610028s ago: executing program 9 (id=5308):
io_setup(0x7, 0x0)
eventfd2(0xffffffff, 0x80000)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = inotify_init()
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000005c0), &(0x7f0000000040)=0x80)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000340)={0x1000020, {{0xa, 0xfffd, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000002800)={0x2020}, 0x2020)
write$binfmt_elf64(r5, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
close_range(r3, 0xffffffffffffffff, 0x0)

21.462026244s ago: executing program 9 (id=5309):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0x22, 0x2, 0x3)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r3, <r5=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
close_range(r2, r5, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18)

20.5837529s ago: executing program 7 (id=5310):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x22, 0x2, 0x3)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r4=>0xffffffffffffffff})
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r6=>0xffffffffffffffff})
r7 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0)
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4, <r8=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
close_range(r2, r8, 0x0)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18)

18.975016266s ago: executing program 9 (id=5311):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
getpid()
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x48000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0)

18.686788954s ago: executing program 7 (id=5312):
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2e00, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f0000aae000/0x2000)=nil, 0x2000, 0x13)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, 0x0, 0x48040)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$KDGKBTYPE(r1, 0x4b48, &(0x7f0000000040))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

16.81230283s ago: executing program 7 (id=5313):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
dup(0xffffffffffffffff)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = io_uring_setup(0x3454, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2e9})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$inet6_udp(0xa, 0x2, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000200), 0x0)

15.794249613s ago: executing program 7 (id=5314):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000240)={0x5, &(0x7f00000000c0)=[{0x1d, 0xc0}, {0x6, 0x7}, {0xd, 0x8000}, {0x3c0, 0x6}, {0x3, 0x26c3}]})
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001080)={0x1a, {"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", 0x1000}}, 0x1006)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000b51c9451337e91730000000095000000000000002edf58cd50ce0c49b60288eb030b4742cf4c3dda0dc6b57c3c7909ae55fcfc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000940)=0x707987cd)
recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
timer_create(0x7, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0xb4}}, 0x200000d4)
syz_io_uring_setup(0xefc, &(0x7f00000001c0)={0x0, 0x200db7c, 0x501d, 0x2, 0x1f2}, &(0x7f0000000080), &(0x7f0000000140))

15.475299736s ago: executing program 7 (id=5315):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/155, 0x9b}], 0x1, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000020c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'})

3.652027748s ago: executing program 41 (id=5311):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
getpid()
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x48000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0)

0s ago: executing program 42 (id=5315):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/155, 0x9b}], 0x1, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000020c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'})

kernel console output (not intermixed with test programs):

eve system status
[ 1605.479832][T21926] ft260 0003:0403:6030.002C: probe with driver ft260 failed with error -32
[ 1605.686679][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1606.729690][T13223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1607.927333][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1608.563956][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1608.564539][ T5806] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1608.965502][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1609.446562][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1609.449788][T22986] usb 8-1: USB disconnect, device number 28
[ 1609.821242][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4932'.
[ 1609.867582][T23450] vlan2: entered promiscuous mode
[ 1610.004159][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1611.063718][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1611.552805][   T38] kauditd_printk_skb: 43 callbacks suppressed
[ 1611.552832][   T38] audit: type=1326 audit(1768578081.983:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23466 comm="syz.7.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1611.554951][   T38] audit: type=1326 audit(1768578081.993:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23466 comm="syz.7.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1611.555587][   T38] audit: type=1326 audit(1768578081.993:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23466 comm="syz.7.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1611.558768][   T38] audit: type=1326 audit(1768578081.993:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23466 comm="syz.7.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1611.570609][   T38] audit: type=1326 audit(1768578082.003:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23466 comm="syz.7.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1611.602934][   T38] audit: type=1326 audit(1768578082.033:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23466 comm="syz.7.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1611.707747][   T38] audit: type=1326 audit(1768578082.063:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23466 comm="syz.7.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1611.707910][   T38] audit: type=1326 audit(1768578082.143:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23466 comm="syz.7.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1611.794643][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1612.047346][T22986] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[ 1612.092782][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1612.233506][T22986] usb 8-1: Using ep0 maxpacket: 32
[ 1612.284514][T22986] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1612.284542][T22986] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1612.284576][T22986] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1612.284595][T22986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.330489][T22986] usb 8-1: config 0 descriptor??
[ 1612.416946][T23475] team0: Caught tx_queue_len zero misconfig
[ 1612.657207][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1613.000751][T22986] ft260 0003:0403:6030.002D: unknown main item tag 0x7
[ 1613.128386][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1613.212827][T22986] ft260 0003:0403:6030.002D: failed to retrieve chip version
[ 1613.213322][T22986] ft260 0003:0403:6030.002D: probe with driver ft260 failed with error -32
[ 1614.168243][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1614.804505][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1615.204782][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1616.276121][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1616.825864][T21926] usb 8-1: USB disconnect, device number 29
[ 1617.193584][T22884] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1617.294059][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1617.427036][T22884] usb 7-1: Using ep0 maxpacket: 32
[ 1617.436974][T22884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1617.437060][T22884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1617.437086][T22884] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1617.482800][T22884] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7
[ 1617.482842][T22884] usb 7-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3
[ 1617.482858][T22884] usb 7-1: Product: syz
[ 1617.482870][T22884] usb 7-1: Manufacturer: syz
[ 1617.482881][T22884] usb 7-1: SerialNumber: syz
[ 1617.573181][T22884] usb 7-1: config 0 descriptor??
[ 1617.618776][T22884] usb 7-1: no audio or video endpoints found
[ 1617.743797][   T38] audit: type=1326 audit(1768578088.173:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23528 comm="syz.7.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1617.743862][   T38] audit: type=1326 audit(1768578088.173:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23528 comm="syz.7.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1617.743913][   T38] audit: type=1326 audit(1768578088.173:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23528 comm="syz.7.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1617.743962][   T38] audit: type=1326 audit(1768578088.183:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23528 comm="syz.7.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1617.856326][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1618.169355][ T5882] usb 7-1: USB disconnect, device number 34
[ 1618.328133][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1619.044123][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1619.364096][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1620.544232][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1620.888702][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1621.634343][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1621.668089][T23569] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4971'.
[ 1621.737567][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4971'.
[ 1621.816152][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4971'.
[ 1622.290612][T23573] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1622.644196][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1623.836308][   T38] audit: type=1326 audit(1768578093.353:2580): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1623.836374][   T38] audit: type=1326 audit(1768578093.353:2581): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1623.836418][   T38] audit: type=1326 audit(1768578093.363:2582): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1623.836462][   T38] audit: type=1326 audit(1768578093.363:2583): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1623.836510][   T38] audit: type=1326 audit(1768578093.363:2584): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1623.836561][   T38] audit: type=1326 audit(1768578093.363:2585): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1623.836611][   T38] audit: type=1326 audit(1768578093.363:2586): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1623.836658][   T38] audit: type=1326 audit(1768578093.363:2587): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1623.836706][   T38] audit: type=1326 audit(1768578093.363:2588): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb11c7edf90 code=0x7ffc0000
[ 1623.836753][   T38] audit: type=1326 audit(1768578093.373:2589): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=23584 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb11c7f0f77 code=0x7ffc0000
[ 1623.934064][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1623.993742][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1624.965163][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1625.622679][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4979'.
[ 1625.787730][T23607] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4979'.
[ 1626.004462][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1626.081436][T23607] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1626.204742][T21926] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1626.360568][T21926] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1626.360612][T21926] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1626.360651][T21926] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1626.360672][T21926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.541231][T23603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1626.563574][T17763] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1626.600307][T21926] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1626.832251][T17763] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1626.832289][T17763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.832311][T17763] usb 3-1: Product: syz
[ 1626.832328][T17763] usb 3-1: Manufacturer: syz
[ 1626.832345][T17763] usb 3-1: SerialNumber: syz
[ 1626.970603][T17763] usb 3-1: config 0 descriptor??
[ 1627.003231][T17763] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 077
[ 1627.044389][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1627.057645][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1627.926567][T17763]  (null): failure reading functionality
[ 1628.212324][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1628.470713][T17763] i2c i2c-1: connected i2c-tiny-usb device
[ 1628.719436][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1629.288310][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1630.132587][T21926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1630.371859][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1630.724779][T23603] delete_channel: no stack
[ 1630.804043][ T5882] usb 2-1: USB disconnect, device number 44
[ 1630.911792][T21926] usb 3-1: USB disconnect, device number 77
[ 1631.270790][T23648] netlink: 'syz.2.4992': attribute type 2 has an invalid length.
[ 1631.448949][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1631.553696][ T5882] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1631.707389][ T5882] usb 2-1: device descriptor read/64, error -71
[ 1631.944022][ T5882] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1632.083637][ T5882] usb 2-1: device descriptor read/64, error -71
[ 1632.194051][ T5882] usb usb2-port1: attempt power cycle
[ 1632.485598][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1632.573755][ T5882] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1632.594829][ T5882] usb 2-1: device descriptor read/8, error -71
[ 1632.844364][ T5882] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1632.868141][ T5882] usb 2-1: device descriptor read/8, error -71
[ 1632.974067][ T5882] usb usb2-port1: unable to enumerate USB device
[ 1633.204195][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1633.534690][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1633.678932][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4999'.
[ 1634.268734][   T38] kauditd_printk_skb: 25 callbacks suppressed
[ 1634.268760][   T38] audit: type=1326 audit(1768578104.703:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.278065][   T38] audit: type=1326 audit(1768578104.703:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.278145][   T38] audit: type=1326 audit(1768578104.703:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.278196][   T38] audit: type=1326 audit(1768578104.713:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.278250][   T38] audit: type=1326 audit(1768578104.713:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.278304][   T38] audit: type=1326 audit(1768578104.713:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.278356][   T38] audit: type=1326 audit(1768578104.713:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.278408][   T38] audit: type=1326 audit(1768578104.713:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.278462][   T38] audit: type=1326 audit(1768578104.713:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.574605][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1634.746456][   T38] audit: type=1326 audit(1768578105.173:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23675 comm="syz.9.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1634.932935][T23686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5004'.
[ 1634.993571][T17763] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1635.070442][T23691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5004'.
[ 1635.177059][T17763] usb 10-1: Using ep0 maxpacket: 32
[ 1635.205349][T17763] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1635.205504][T17763] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1635.205589][T17763] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1635.205764][T17763] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.295916][T17763] usb 10-1: config 0 descriptor??
[ 1635.615190][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1635.647728][T23691] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1635.982017][T17763] ft260 0003:0403:6030.002E: unknown main item tag 0x7
[ 1636.151253][T17763] ft260 0003:0403:6030.002E: failed to retrieve chip version
[ 1636.151581][T17763] ft260 0003:0403:6030.002E: probe with driver ft260 failed with error -32
[ 1636.244260][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1636.674918][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1637.684855][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1638.253873][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1638.724262][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1639.284280][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1639.303899][T11095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1639.304834][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1639.481794][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1639.928723][T17763] usb 10-1: USB disconnect, device number 32
[ 1640.183996][ T5882] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[ 1640.333479][ T5882] usb 8-1: Using ep0 maxpacket: 32
[ 1640.336352][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1640.336397][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1640.336447][ T5882] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1640.336477][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.415770][ T5882] usb 8-1: config 0 descriptor??
[ 1640.804945][T17763] net_ratelimit: 1 callbacks suppressed
[ 1640.804965][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1640.992531][ T5882] ft260 0003:0403:6030.002F: unknown main item tag 0x7
[ 1641.214763][ T5882] ft260 0003:0403:6030.002F: chip code: 6524 8100
[ 1641.415663][ T5882] ft260 0003:0403:6030.002F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0
[ 1641.616939][ T5882] ft260 0003:0403:6030.002F: failed to retrieve status: -32, no wakeup
[ 1641.835843][T23753] fuse: Unknown parameter 'grou00000000000000000000'
[ 1641.877567][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1642.204167][ T5882] usb 8-1: USB disconnect, device number 30
[ 1642.484360][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1642.552369][T23759] netlink: 'syz.6.5024': attribute type 13 has an invalid length.
[ 1642.552397][T23759] netlink: 'syz.6.5024': attribute type 27 has an invalid length.
[ 1642.884581][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1643.944833][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1644.760081][T23784] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1644.974877][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1645.153560][    T9] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1645.286004][T23793] netlink: 'syz.6.5037': attribute type 13 has an invalid length.
[ 1645.286043][T23793] netlink: 'syz.6.5037': attribute type 27 has an invalid length.
[ 1645.303848][    T9] usb 10-1: Using ep0 maxpacket: 32
[ 1645.332849][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1645.332897][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1645.332953][    T9] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1645.333195][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1645.420091][    T9] usb 10-1: config 0 descriptor??
[ 1645.524890][T21926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1645.877788][    T9] ft260 0003:0403:6030.0030: unknown main item tag 0x7
[ 1646.028558][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1646.057975][    T9] ft260 0003:0403:6030.0030: chip code: 6524 8100
[ 1646.259077][    T9] ft260 0003:0403:6030.0030: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0
[ 1646.460551][    T9] ft260 0003:0403:6030.0030: failed to retrieve status: -32, no wakeup
[ 1647.181909][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.289410][    T9] usb 10-1: USB disconnect, device number 33
[ 1647.429405][T23807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.430988][T23807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.431306][T23807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.501648][T23807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.501763][T23807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.501893][T23807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.502690][T23806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.756849][T23816] netlink: 277 bytes leftover after parsing attributes in process `syz.9.5046'.
[ 1647.857836][T21926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1648.047130][ T7404] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1648.282560][T21926] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[ 1648.511423][ T7404] usb 7-1: Using ep0 maxpacket: 32
[ 1648.513284][ T7404] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1648.513309][ T7404] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1648.513477][ T7404] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1648.513504][ T7404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.671497][T21926] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1648.671532][T21926] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1648.671567][T21926] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1648.671586][T21926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.710602][ T7404] usb 7-1: config 0 descriptor??
[ 1648.818141][T23813] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1648.987410][T21926] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1649.469827][ T7404] ft260 0003:0403:6030.0031: unknown main item tag 0x7
[ 1649.646559][ T7404] ft260 0003:0403:6030.0031: chip code: 6524 8100
[ 1649.848714][ T7404] ft260 0003:0403:6030.0031: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0
[ 1650.051187][ T7404] ft260 0003:0403:6030.0031: failed to retrieve status: -32, no wakeup
[ 1650.060562][ T7404] ft260 0003:0403:6030.0031: failed to retrieve status: -71
[ 1650.061118][ T7404] ft260 0003:0403:6030.0031: failed to reset I2C controller: -71
[ 1650.361479][ T7404] usb 7-1: USB disconnect, device number 35
[ 1650.976167][T23818] delete_channel: no stack
[ 1651.074319][ T5882] usb 8-1: USB disconnect, device number 31
[ 1651.528965][T17763] net_ratelimit: 4 callbacks suppressed
[ 1651.528996][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1651.622632][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1652.424214][T23857] mac80211_hwsim hwsim22 syzkaller0: Caught tx_queue_len zero misconfig
[ 1652.563985][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1653.610276][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1654.339218][T23877] netlink: 'syz.6.5059': attribute type 13 has an invalid length.
[ 1654.339245][T23877] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5059'.
[ 1654.645203][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1654.734114][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1655.845549][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1656.894225][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1657.444199][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1657.639007][   T38] kauditd_printk_skb: 11 callbacks suppressed
[ 1657.639035][   T38] audit: type=1326 audit(1768578128.073:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.639933][   T38] audit: type=1326 audit(1768578128.073:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.640657][   T38] audit: type=1326 audit(1768578128.073:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.677996][   T38] audit: type=1326 audit(1768578128.073:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.678188][   T38] audit: type=1326 audit(1768578128.073:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.678310][   T38] audit: type=1326 audit(1768578128.083:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.678450][   T38] audit: type=1326 audit(1768578128.083:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.678639][   T38] audit: type=1326 audit(1768578128.083:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.678760][   T38] audit: type=1326 audit(1768578128.083:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1657.924396][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1657.973852][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1658.059836][   T38] audit: type=1326 audit(1768578128.473:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23918 comm="syz.2.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1658.453688][ T5811] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1659.054231][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1659.092406][ T5811] usb 3-1: Using ep0 maxpacket: 32
[ 1659.153240][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1659.153280][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1659.153313][ T5811] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1659.153331][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.232834][ T5811] usb 3-1: config 0 descriptor??
[ 1660.084069][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1661.044267][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1661.124096][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1662.174276][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1663.262948][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1664.094392][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1664.185212][T23968] netlink: 'syz.6.5076': attribute type 1 has an invalid length.
[ 1664.185252][T23968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5076'.
[ 1664.235373][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5076'.
[ 1664.334452][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1664.806863][ T5811] usbhid 3-1:0.0: can't add hid device: -110
[ 1664.807026][ T5811] usbhid 3-1:0.0: probe with driver usbhid failed with error -110
[ 1665.364146][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1665.474772][ T5882] usb 3-1: USB disconnect, device number 78
[ 1666.406297][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1666.595108][T24000] netlink: 'syz.7.5087': attribute type 13 has an invalid length.
[ 1666.629741][T24001] netlink: 'syz.6.5088': attribute type 1 has an invalid length.
[ 1666.629782][T24001] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5088'.
[ 1667.055271][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1667.123943][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1667.454437][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1668.501461][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1668.506363][ T7404] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1668.653686][ T7404] usb 2-1: Using ep0 maxpacket: 16
[ 1668.659230][ T7404] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1668.660440][ T7404] usb 2-1: config 7 has an invalid interface number: 48 but max is 0
[ 1668.660461][ T7404] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1668.660476][ T7404] usb 2-1: config 7 has no interface number 0
[ 1668.660499][ T7404] usb 2-1: config 7 interface 48 has no altsetting 0
[ 1668.663015][ T7404] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[ 1668.663038][ T7404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.663053][ T7404] usb 2-1: Product: syz
[ 1668.663064][ T7404] usb 2-1: Manufacturer: syz
[ 1668.663075][ T7404] usb 2-1: SerialNumber: syz
[ 1669.061456][ T7404] cdc_phonet 2-1:7.48: skipping garbage
[ 1669.061499][ T7404] cdc_phonet 2-1:7.48: probe with driver cdc_phonet failed with error -22
[ 1669.139177][ T7404] usb 2-1: USB disconnect, device number 49
[ 1669.524921][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1670.293447][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1670.398741][T24038] 9p: Bad value for 'wfdno'
[ 1670.564590][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1671.125329][T24043] netlink: 'syz.7.5100': attribute type 1 has an invalid length.
[ 1671.125401][T24043] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5100'.
[ 1671.224450][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5100'.
[ 1671.623531][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1672.644360][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1673.363806][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1673.693904][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1674.433128][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1675.204090][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1676.247647][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1676.412112][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1676.644432][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1677.243677][    T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1677.284144][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1677.393700][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1677.404954][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1677.436167][    T9] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.436207][    T9] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[ 1677.447383][    T9] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[ 1677.447502][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.447588][    T9] usb 3-1: Product: syz
[ 1677.447633][    T9] usb 3-1: Manufacturer: syz
[ 1677.447678][    T9] usb 3-1: SerialNumber: syz
[ 1677.826521][    T9] usb 3-1: USB disconnect, device number 79
[ 1677.876372][ T7404] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1677.995327][T24110] mac80211_hwsim hwsim22 syzkaller0: Caught tx_queue_len zero misconfig
[ 1678.023766][ T7404] usb 7-1: Using ep0 maxpacket: 32
[ 1678.027217][ T7404] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1678.027296][ T7404] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1678.032170][ T7404] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1678.032210][ T7404] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1678.032234][ T7404] usb 7-1: Product: syz
[ 1678.032252][ T7404] usb 7-1: Manufacturer: syz
[ 1678.032270][ T7404] usb 7-1: SerialNumber: syz
[ 1678.135827][ T7404] usb 7-1: config 0 descriptor??
[ 1678.333772][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1678.459660][ T7404] usb 7-1: USB disconnect, device number 36
[ 1678.647165][T23825] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 1678.843536][T23825] usb 10-1: Using ep0 maxpacket: 32
[ 1678.847017][T23825] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1678.847062][T23825] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1678.847110][T23825] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1678.847143][T23825] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1678.868042][T23825] usb 10-1: config 0 descriptor??
[ 1679.034546][ T7404] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1679.297220][ T7404] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1679.297317][ T7404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1679.297341][ T7404] usb 3-1: Product: syz
[ 1679.297359][ T7404] usb 3-1: Manufacturer: syz
[ 1679.297376][ T7404] usb 3-1: SerialNumber: syz
[ 1679.371661][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1679.443817][T21926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1679.452970][ T7404] usb 3-1: config 0 descriptor??
[ 1679.482658][T23825] ft260 0003:0403:6030.0032: unknown main item tag 0x7
[ 1679.495842][ T7404] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 080
[ 1679.717214][T23825] ft260 0003:0403:6030.0032: chip code: 6524 8100
[ 1679.921980][T23825] ft260 0003:0403:6030.0032: failed to retrieve system status
[ 1679.929790][T23825] ft260 0003:0403:6030.0032: probe with driver ft260 failed with error -71
[ 1679.931185][ T7404]  (null): failure reading functionality
[ 1680.445813][T21926] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1680.891320][T23825] usb 10-1: USB disconnect, device number 34
[ 1680.964630][T21926] usb 7-1: Using ep0 maxpacket: 16
[ 1681.018371][T21926] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1681.024117][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1681.045748][T21926] usb 7-1: config 7 has an invalid interface number: 48 but max is 0
[ 1681.045775][T21926] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1681.045791][T21926] usb 7-1: config 7 has no interface number 0
[ 1681.045870][T21926] usb 7-1: config 7 interface 48 has no altsetting 0
[ 1681.054984][T21926] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[ 1681.055061][T21926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1681.055080][T21926] usb 7-1: Product: syz
[ 1681.055091][T21926] usb 7-1: Manufacturer: syz
[ 1681.055103][T21926] usb 7-1: SerialNumber: syz
[ 1682.176581][ T7404] i2c i2c-1: failure reading functionality
[ 1682.176693][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1682.281661][T21926] cdc_phonet 7-1:7.48: skipping garbage
[ 1682.283304][T21926] cdc_phonet 7-1:7.48: probe with driver cdc_phonet failed with error -22
[ 1682.310713][T21926] usb 7-1: USB disconnect, device number 37
[ 1682.390035][ T7404] i2c i2c-1: connected i2c-tiny-usb device
[ 1682.433882][ T7404] usb 3-1: USB disconnect, device number 80
[ 1682.485513][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1682.553777][T24150] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5135'.
[ 1683.063664][T22884] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1683.153667][ T5811] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[ 1683.204042][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1683.234807][T22884] usb 7-1: Using ep0 maxpacket: 16
[ 1683.250254][T22884] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1683.251602][T22884] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1683.251634][T22884] usb 7-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[ 1683.288194][T22884] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[ 1683.288224][T22884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1683.288240][T22884] usb 7-1: Product: syz
[ 1683.288252][T22884] usb 7-1: Manufacturer: syz
[ 1683.288264][T22884] usb 7-1: SerialNumber: syz
[ 1683.334168][ T5811] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1683.334217][ T5811] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1683.334275][ T5811] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1683.334308][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1683.733883][ T5811] usb 3-1: usb_control_msg returned -32
[ 1683.734348][ T5811] usbtmc 3-1:16.0: can't read capabilities
[ 1683.913803][T22884] usb 7-1: USB disconnect, device number 38
[ 1684.244362][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1684.853644][T21926] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1684.933815][ T7404] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[ 1685.044535][T21926] usb 7-1: Using ep0 maxpacket: 32
[ 1685.053830][T21926] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1685.053926][T21926] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1685.097332][ T7404] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1685.097372][ T7404] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1685.098215][ T7404] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1685.098235][ T7404] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1685.193619][T21926] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1685.193662][T21926] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1685.193688][T21926] usb 7-1: Product: syz
[ 1685.193708][T21926] usb 7-1: Manufacturer: syz
[ 1685.193720][T21926] usb 7-1: SerialNumber: syz
[ 1685.287666][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1685.320768][T24160] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1685.339284][T21926] usb 7-1: config 0 descriptor??
[ 1685.384422][ T7404] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1685.474737][T24167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1685.559022][T24159] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90
[ 1685.559320][T24159] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90
[ 1685.560656][T21926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1685.597279][T23825] usb 7-1: USB disconnect, device number 39
[ 1686.170469][T22884] usb 3-1: USB disconnect, device number 81
[ 1686.301725][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1686.392469][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1687.456539][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1687.458055][T17659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1687.691271][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1687.714463][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1687.805308][ T7404] usb 8-1: USB disconnect, device number 32
[ 1688.253510][T22884] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1688.446902][T22884] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1688.447043][T22884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.447063][T22884] usb 7-1: Product: syz
[ 1688.447078][T22884] usb 7-1: Manufacturer: syz
[ 1688.447091][T22884] usb 7-1: SerialNumber: syz
[ 1688.497855][ T7404] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[ 1688.517804][T22884] usb 7-1: config 0 descriptor??
[ 1688.551743][T22884] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 040
[ 1688.733699][ T7404] usb 8-1: Using ep0 maxpacket: 16
[ 1688.738184][ T7404] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1688.740351][ T7404] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.740383][ T7404] usb 8-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[ 1688.922419][ T7404] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[ 1688.922453][ T7404] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.922473][ T7404] usb 8-1: Product: syz
[ 1688.922490][ T7404] usb 8-1: Manufacturer: syz
[ 1688.922507][ T7404] usb 8-1: SerialNumber: syz
[ 1688.944929][T22884]  (null): failure reading functionality
[ 1689.476481][ T7404] usb 8-1: USB disconnect, device number 33
[ 1689.763864][ T5811] net_ratelimit: 2 callbacks suppressed
[ 1689.763889][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1690.823239][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1690.974109][T22884] i2c i2c-1: failure reading functionality
[ 1691.017368][T22884] i2c i2c-1: connected i2c-tiny-usb device
[ 1691.310671][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5151'.
[ 1691.416675][ T7404] usb 7-1: USB disconnect, device number 40
[ 1691.623145][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.642355][T21926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.650649][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.651952][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.782343][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.782579][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.807242][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.807523][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1692.115053][T21926] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1692.143566][ T5887] usb 8-1: new full-speed USB device number 34 using dummy_hcd
[ 1692.290507][T21926] usb 7-1: Using ep0 maxpacket: 32
[ 1692.298109][T21926] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1692.298229][T21926] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1692.302837][T21926] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1692.302924][T21926] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1692.302988][T21926] usb 7-1: Product: syz
[ 1692.303031][T21926] usb 7-1: Manufacturer: syz
[ 1692.303082][T21926] usb 7-1: SerialNumber: syz
[ 1692.399945][ T5887] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1692.399987][ T5887] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1692.400037][ T5887] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1692.400065][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.637852][T21926] usb 7-1: config 0 descriptor??
[ 1692.719016][ T5887] usb 8-1: usb_control_msg returned -32
[ 1692.719069][ T5887] usbtmc 8-1:16.0: can't read capabilities
[ 1692.876739][T21926] usb 7-1: USB disconnect, device number 41
[ 1693.056562][T24212] netlink: 'syz.9.5157': attribute type 1 has an invalid length.
[ 1693.056632][T24212] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5157'.
[ 1693.119263][T24215] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5157'.
[ 1694.093921][   T38] kauditd_printk_skb: 23 callbacks suppressed
[ 1694.093948][   T38] audit: type=1326 audit(1768578164.483:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094004][   T38] audit: type=1326 audit(1768578164.483:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094052][   T38] audit: type=1326 audit(1768578164.483:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094102][   T38] audit: type=1326 audit(1768578164.483:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094149][   T38] audit: type=1326 audit(1768578164.483:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094209][   T38] audit: type=1326 audit(1768578164.483:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094257][   T38] audit: type=1326 audit(1768578164.483:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094305][   T38] audit: type=1326 audit(1768578164.483:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094357][   T38] audit: type=1326 audit(1768578164.493:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.094404][   T38] audit: type=1326 audit(1768578164.493:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24218 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1694.640063][ T5887] usb 8-1: USB disconnect, device number 34
[ 1694.770022][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5163'.
[ 1694.850811][ T7404] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1694.943268][T24232] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1695.046210][ T7404] usb 10-1: Using ep0 maxpacket: 32
[ 1695.085976][ T5887] net_ratelimit: 11 callbacks suppressed
[ 1695.086003][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1695.096715][ T7404] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1695.096824][ T7404] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1695.096971][ T7404] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1695.097039][ T7404] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.213618][T23825] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1695.261987][ T7404] usb 10-1: config 0 descriptor??
[ 1695.474288][T23825] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1695.474333][T23825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1695.474361][T23825] usb 7-1: Product: syz
[ 1695.474381][T23825] usb 7-1: Manufacturer: syz
[ 1695.474399][T23825] usb 7-1: SerialNumber: syz
[ 1695.528269][T23825] usb 7-1: config 0 descriptor??
[ 1695.702443][T23825] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 042
[ 1695.847863][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1695.954648][T23825]  (null): failure reading functionality
[ 1696.174336][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1696.327567][T24238] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1696.555406][ T7404] ft260 0003:0403:6030.0033: unknown main item tag 0x7
[ 1697.102532][ T7404] ft260 0003:0403:6030.0033: chip code: 0000 0000
[ 1697.117128][ T7404] ft260 0003:0403:6030.0033: failed to retrieve system status
[ 1697.120391][ T7404] ft260 0003:0403:6030.0033: probe with driver ft260 failed with error -32
[ 1697.203747][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1697.683744][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1698.004307][T23825] i2c i2c-1: failure reading functionality
[ 1698.039116][T23825] i2c i2c-1: connected i2c-tiny-usb device
[ 1698.059670][T22884] usb 7-1: USB disconnect, device number 42
[ 1698.253898][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1699.350447][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1699.407150][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1699.423845][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1699.578625][T23825] usb 10-1: USB disconnect, device number 35
[ 1699.591596][T24264] netlink: 'syz.1.5170': attribute type 1 has an invalid length.
[ 1699.591649][T24264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5170'.
[ 1699.636799][T24249] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1699.636980][T24249] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1699.793944][T24265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5170'.
[ 1700.103147][T24249] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1700.119613][T24249] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1700.601340][T24249] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1700.601454][T24249] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1700.649591][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1700.726463][T11175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1700.845472][T24249] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1700.868390][T24249] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1701.125975][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1701.139429][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1701.283557][ T7404] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[ 1701.468410][ T7404] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1701.468463][ T7404] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1701.468522][ T7404] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1701.468552][ T7404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1701.653834][ T5802] Bluetooth: hci3: command 0x0406 tx timeout
[ 1701.684048][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1701.699109][   T38] kauditd_printk_skb: 40 callbacks suppressed
[ 1701.699208][   T38] audit: type=1326 audit(1768578172.133:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.700083][   T38] audit: type=1326 audit(1768578172.133:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.716922][   T38] audit: type=1326 audit(1768578172.133:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.717113][   T38] audit: type=1326 audit(1768578172.133:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.717233][   T38] audit: type=1326 audit(1768578172.133:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.717375][   T38] audit: type=1326 audit(1768578172.133:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.717505][   T38] audit: type=1326 audit(1768578172.133:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.717605][   T38] audit: type=1326 audit(1768578172.133:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.717742][   T38] audit: type=1326 audit(1768578172.143:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1701.717864][   T38] audit: type=1326 audit(1768578172.143:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24279 comm="syz.1.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4410ff749 code=0x7ffc0000
[ 1702.002145][ T7404] usb 7-1: usb_control_msg returned -32
[ 1702.002201][ T7404] usbtmc 7-1:16.0: can't read capabilities
[ 1702.054450][T22884] usb 7-1: USB disconnect, device number 43
[ 1702.163617][ T5802] Bluetooth: hci4: command 0x0406 tx timeout
[ 1702.648865][ T5802] Bluetooth: hci1: command 0x0406 tx timeout
[ 1702.724648][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1702.883675][ T5806] Bluetooth: hci5: command 0x0406 tx timeout
[ 1703.191850][T24291] : entered promiscuous mode
[ 1703.683687][ T5806] Bluetooth: hci3: command 0x0406 tx timeout
[ 1703.764229][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1703.899207][T24302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5182'.
[ 1704.096127][T24302] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1704.167225][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1704.244428][ T5806] Bluetooth: hci4: command 0x0406 tx timeout
[ 1704.489773][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1704.490512][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1704.729424][ T5806] Bluetooth: hci1: command 0x0406 tx timeout
[ 1704.969451][ T5806] Bluetooth: hci5: command 0x0406 tx timeout
[ 1705.655976][ T7404] net_ratelimit: 3 callbacks suppressed
[ 1705.655994][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1705.675363][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1705.907690][T23825] usb 8-1: new full-speed USB device number 35 using dummy_hcd
[ 1705.907896][ T7404] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1706.286731][T23825] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1706.286762][T23825] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1706.286802][T23825] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1706.287190][T23825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1706.287551][ T7404] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1706.287572][ T7404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1706.287589][ T7404] usb 2-1: Product: syz
[ 1706.287601][ T7404] usb 2-1: Manufacturer: syz
[ 1706.287614][ T7404] usb 2-1: SerialNumber: syz
[ 1706.297210][ T7404] usb 2-1: config 0 descriptor??
[ 1706.411995][ T7404] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 050
[ 1706.563946][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1706.725686][T23825] usb 8-1: usb_control_msg returned -32
[ 1706.725757][T23825] usbtmc 8-1:16.0: can't read capabilities
[ 1706.916673][T23825] usb 8-1: USB disconnect, device number 35
[ 1706.973914][ T7404]  (null): failure reading functionality
[ 1707.214570][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1707.602651][T24338] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1707.610002][T24338] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1707.620282][T24338] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1707.725027][T24338] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1708.203681][ T5811] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1708.374576][ T5811] usb 7-1: Using ep0 maxpacket: 32
[ 1708.435735][ T5811] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1708.803657][ T5811] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1708.803691][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1708.803711][ T5811] usb 7-1: Product: syz
[ 1708.803726][ T5811] usb 7-1: Manufacturer: syz
[ 1708.803746][ T5811] usb 7-1: SerialNumber: syz
[ 1708.875060][ T5811] usb 7-1: config 0 descriptor??
[ 1709.044602][ T7404] i2c i2c-1: failure reading functionality
[ 1709.109813][ T5811] usb 7-1: USB disconnect, device number 44
[ 1709.166857][ T7404] i2c i2c-1: connected i2c-tiny-usb device
[ 1709.207187][ T7404] usb 2-1: USB disconnect, device number 50
[ 1709.683735][ T5802] Bluetooth: hci3: command 0x0406 tx timeout
[ 1709.683783][ T5802] Bluetooth: hci4: command 0x0406 tx timeout
[ 1709.683841][ T5806] Bluetooth: hci1: command 0x0406 tx timeout
[ 1709.767307][T24347] Bluetooth: hci5: command 0x0406 tx timeout
[ 1710.244270][ T3108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1710.251607][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1710.254014][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1711.204498][T18976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1711.205149][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1711.205746][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.293872][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.863808][T11282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.864440][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.865465][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1713.866258][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1715.320171][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1716.014092][T23825] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[ 1716.218964][T23825] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1716.218992][T23825] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1716.219026][T23825] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1716.219044][T23825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1716.343530][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1716.346565][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1716.610319][T23825] usb 7-1: usb_control_msg returned -32
[ 1716.610506][T23825] usbtmc 7-1:16.0: can't read capabilities
[ 1717.124239][ T5887] usb 7-1: USB disconnect, device number 45
[ 1717.377374][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1717.673672][ T5887] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1717.849546][ T5887] usb 7-1: Using ep0 maxpacket: 32
[ 1717.869931][ T5887] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1717.869982][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1717.912418][ T5887] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1717.912446][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1717.912463][ T5887] usb 7-1: Product: syz
[ 1717.912474][ T5887] usb 7-1: Manufacturer: syz
[ 1717.912486][ T5887] usb 7-1: SerialNumber: syz
[ 1718.027176][ T5887] usb 7-1: config 0 descriptor??
[ 1718.301874][ T5887] usb 7-1: USB disconnect, device number 46
[ 1718.411131][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1719.310151][   T38] kauditd_printk_skb: 8 callbacks suppressed
[ 1719.310173][   T38] audit: type=1326 audit(1768578189.743:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24414 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1719.319075][   T38] audit: type=1326 audit(1768578189.753:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24414 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1719.329012][   T38] audit: type=1326 audit(1768578189.763:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24414 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1719.339734][   T38] audit: type=1326 audit(1768578189.763:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24414 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1719.374803][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1719.474211][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1719.519027][   T38] audit: type=1326 audit(1768578189.923:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24414 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1719.521557][   T38] audit: type=1326 audit(1768578189.953:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24414 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1719.720378][   T38] audit: type=1326 audit(1768578190.153:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24414 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1719.720817][   T38] audit: type=1326 audit(1768578190.153:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24414 comm="syz.2.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7050f749 code=0x7ffc0000
[ 1720.167397][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1720.233771][ T5811] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1720.386145][ T5811] usb 7-1: Using ep0 maxpacket: 16
[ 1720.389880][ T5811] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1720.393063][ T5811] usb 7-1: config 7 has an invalid interface number: 48 but max is 0
[ 1720.393086][ T5811] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1720.393102][ T5811] usb 7-1: config 7 has no interface number 0
[ 1720.393126][ T5811] usb 7-1: config 7 interface 48 has no altsetting 0
[ 1720.456632][ T5811] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[ 1720.456678][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1720.456704][ T5811] usb 7-1: Product: syz
[ 1720.456723][ T5811] usb 7-1: Manufacturer: syz
[ 1720.456741][ T5811] usb 7-1: SerialNumber: syz
[ 1720.544974][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1720.947157][ T5811] cdc_phonet 7-1:7.48: skipping garbage
[ 1720.947202][ T5811] cdc_phonet 7-1:7.48: probe with driver cdc_phonet failed with error -22
[ 1721.035681][ T5811] usb 7-1: USB disconnect, device number 47
[ 1721.605093][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.823650][T23825] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[ 1721.976912][T23825] usb 8-1: Using ep0 maxpacket: 32
[ 1721.979452][T23825] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1721.979484][T23825] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1721.979514][T23825] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1721.979533][T23825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1722.082491][T23825] usb 8-1: config 0 descriptor??
[ 1722.552940][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1722.644686][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1722.799440][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[ 1722.800089][T23825] usbhid 8-1:0.0: can't add hid device: -71
[ 1722.800249][T23825] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1722.864293][T23825] usb 8-1: USB disconnect, device number 36
[ 1724.143520][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1724.949883][T23339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1725.002266][T23339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1725.051499][T23339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1725.077958][T23339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1725.091887][T23339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1725.345328][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1725.523703][ T5882] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[ 1725.603684][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1725.721439][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1725.721481][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1725.721534][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1725.721564][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1725.998389][ T5882] usb 3-1: usb_control_msg returned -32
[ 1725.998444][ T5882] usbtmc 3-1:16.0: can't read capabilities
[ 1726.431813][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1727.293662][T24347] Bluetooth: hci2: command tx timeout
[ 1727.443985][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1728.291850][ T1053] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1728.500534][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1728.653780][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1729.380865][   T38] audit: type=1326 audit(1768578199.793:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381082][   T38] audit: type=1326 audit(1768578199.793:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381145][   T38] audit: type=1326 audit(1768578199.793:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381196][   T38] audit: type=1326 audit(1768578199.793:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381246][   T38] audit: type=1326 audit(1768578199.793:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381296][   T38] audit: type=1326 audit(1768578199.793:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381348][   T38] audit: type=1326 audit(1768578199.793:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381398][   T38] audit: type=1326 audit(1768578199.793:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381449][   T38] audit: type=1326 audit(1768578199.793:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.381499][   T38] audit: type=1326 audit(1768578199.803:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24466 comm="syz.9.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb11c7ef749 code=0x7ffc0000
[ 1729.383517][T24347] Bluetooth: hci2: command tx timeout
[ 1729.531402][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1729.764812][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1730.183625][ T5882] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1730.267790][T17763] usb 3-1: USB disconnect, device number 82
[ 1730.373652][ T5882] usb 10-1: Using ep0 maxpacket: 32
[ 1730.400505][ T5882] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1730.400541][ T5882] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1730.400573][ T5882] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1730.400592][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1730.469895][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1730.472717][ T5882] usb 10-1: config 0 descriptor??
[ 1730.698657][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1731.084081][ T5882] ft260 0003:0403:6030.0034: unknown main item tag 0x7
[ 1731.108269][ T1053] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1731.292680][ T5882] ft260 0003:0403:6030.0034: chip code: 0000 0000
[ 1731.460161][T24347] Bluetooth: hci2: command tx timeout
[ 1731.494227][ T5882] ft260 0003:0403:6030.0034: failed to retrieve system status
[ 1731.494547][ T5882] ft260 0003:0403:6030.0034: probe with driver ft260 failed with error -32
[ 1731.683861][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1731.766699][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1731.853972][T17763] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1732.096743][T17763] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1732.096779][T17763] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1732.096813][T17763] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1732.096833][T17763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1732.180952][T24481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1732.234168][T17763] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1732.742679][ T1053] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1732.803959][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1733.523721][T24347] Bluetooth: hci2: command tx timeout
[ 1733.773176][ T1053] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1733.844952][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1734.230638][T24488] netlink: 'syz.7.5229': attribute type 13 has an invalid length.
[ 1734.330773][T22884] usb 3-1: USB disconnect, device number 83
[ 1734.728313][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1734.890071][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1735.300259][T22884] usb 10-1: USB disconnect, device number 36
[ 1735.540286][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1735.541297][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1735.923879][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1735.932713][T24437] chnl_net:caif_netlink_parms(): no params data found
[ 1737.973912][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1738.455494][ T5887] usb 8-1: new full-speed USB device number 37 using dummy_hcd
[ 1738.539134][ T1053] bridge_slave_1: left allmulticast mode
[ 1738.539173][ T1053] bridge_slave_1: left promiscuous mode
[ 1738.539417][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1738.569018][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1738.605656][ T5887] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1738.605688][ T5887] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1738.605726][ T5887] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1738.605746][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1738.731244][ T1053] bridge_slave_0: left allmulticast mode
[ 1738.731289][ T1053] bridge_slave_0: left promiscuous mode
[ 1738.731629][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1738.851418][ T5887] usb 8-1: usb_control_msg returned -32
[ 1738.851554][ T5887] usbtmc 8-1:16.0: can't read capabilities
[ 1739.180754][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1740.011829][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1740.263785][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1741.284065][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1741.603765][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1742.325311][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1743.188688][ T7404] usb 8-1: USB disconnect, device number 37
[ 1743.369720][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1744.093844][ T5811] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[ 1744.276970][ T5811] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1744.277014][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1744.277048][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1744.277079][ T5811] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1744.277135][ T5811] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1744.277166][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1744.347508][ T5811] usb 8-1: config 0 descriptor??
[ 1744.405636][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1744.643916][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1744.833185][ T5811] plantronics 0003:047F:FFFF.0035: ignoring exceeding usage max
[ 1745.044396][ T5811] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 1745.482699][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1745.849885][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1746.509407][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1747.475810][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1747.524213][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1747.550836][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1747.588778][ T1053] bond0 (unregistering): Released all slaves
[ 1747.608359][ T1053] bond1 (unregistering): Released all slaves
[ 1747.637524][ T1053] bond2 (unregistering): Released all slaves
[ 1747.744819][T24549] lo: Caught tx_queue_len zero misconfig
[ 1748.164619][T23825] usb 8-1: USB disconnect, device number 38
[ 1748.241998][T24556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.242857][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.563438][ T1053] tipc: Left network mode
[ 1748.570581][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.751266][T24563] netlink: 'syz.9.5246': attribute type 13 has an invalid length.
[ 1748.864447][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.900826][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.980298][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.981766][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1749.025632][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1749.096323][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1749.100707][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1749.101488][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1749.219945][T24564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1749.351168][T24568] netlink: 'syz.7.5247': attribute type 13 has an invalid length.
[ 1749.566519][T24437] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1749.575609][T24437] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1749.575833][T24437] bridge_slave_0: entered allmulticast mode
[ 1749.577836][T24437] bridge_slave_0: entered promiscuous mode
[ 1750.629434][T24437] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1750.629574][T24437] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1750.629809][T24437] bridge_slave_1: entered allmulticast mode
[ 1750.632742][T24437] bridge_slave_1: entered promiscuous mode
[ 1751.324282][ T5887] usb 10-1: new full-speed USB device number 37 using dummy_hcd
[ 1751.384183][T23825] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[ 1751.480903][ T5887] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1751.480944][ T5887] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1751.481127][ T5887] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1751.481173][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1751.598910][T23825] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1751.598943][T23825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1751.598964][T23825] usb 8-1: Product: syz
[ 1751.598980][T23825] usb 8-1: Manufacturer: syz
[ 1751.598995][T23825] usb 8-1: SerialNumber: syz
[ 1751.683249][T23825] usb 8-1: config 0 descriptor??
[ 1751.719840][T23825] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 039
[ 1752.173643][ T5887] usb 10-1: usb_control_msg returned -32
[ 1752.173684][ T5887] usbtmc 10-1:16.0: can't read capabilities
[ 1752.380472][T23825]  (null): failure reading functionality
[ 1752.710870][T24437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1752.735554][T24437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1752.791605][ T5887] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1752.884090][ T1053] hsr_slave_0: left promiscuous mode
[ 1752.924099][ T1053] hsr_slave_1: left promiscuous mode
[ 1752.925805][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1752.925841][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1753.039738][ T5887] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1753.039784][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1753.039811][ T5887] usb 3-1: Product: syz
[ 1753.039830][ T5887] usb 3-1: Manufacturer: syz
[ 1753.039850][ T5887] usb 3-1: SerialNumber: syz
[ 1753.079613][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1753.079657][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1753.188749][ T5887] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1753.273147][T22884] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1753.922613][ T5887] usb 10-1: USB disconnect, device number 37
[ 1754.084950][   T31] net_ratelimit: 33 callbacks suppressed
[ 1754.084976][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.321932][ T7404] usb 3-1: USB disconnect, device number 84
[ 1754.415314][T23825] i2c i2c-1: failure reading functionality
[ 1754.450811][T23825] i2c i2c-1: connected i2c-tiny-usb device
[ 1754.569746][T23825] usb 8-1: USB disconnect, device number 39
[ 1754.623754][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.774168][ T1053] veth1_macvtap: left promiscuous mode
[ 1754.774285][ T1053] veth0_macvtap: left promiscuous mode
[ 1754.774549][ T1053] veth1_vlan: left promiscuous mode
[ 1754.774767][ T1053] veth0_vlan: left promiscuous mode
[ 1754.921908][T24596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.922165][T24596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.922366][T24596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.960247][T24596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.961134][T24596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.981653][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.982811][T24596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.983178][T24596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1755.203499][T22884] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1755.203712][T22884] ath9k_htc: Failed to initialize the device
[ 1755.204395][T24598] binder: BINDER_SET_CONTEXT_MGR already set
[ 1755.204410][T24598] binder: 24597:24598 ioctl 4018620d 200000000040 returned -16
[ 1755.204541][ T7404] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1755.266594][T24598] binder: 24597:24598 ioctl c0306201 200000000500 returned -11
[ 1755.661039][T24602] netlink: 'syz.7.5256': attribute type 2 has an invalid length.
[ 1759.093882][T22986] net_ratelimit: 32 callbacks suppressed
[ 1759.093914][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1759.093956][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1759.206957][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1759.308049][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1759.613632][T22986] usb 8-1: new full-speed USB device number 40 using dummy_hcd
[ 1759.849428][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1759.850514][T22986] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1759.850539][T22986] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1759.850575][T22986] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1759.850593][T22986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1760.164379][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1760.170960][T22986] usb 8-1: usb_control_msg returned -32
[ 1760.170999][T22986] usbtmc 8-1:16.0: can't read capabilities
[ 1760.324550][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1760.485345][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1760.486384][ T1053] team0 (unregistering): Port device team_slave_1 removed
[ 1760.984828][ T1053] team0 (unregistering): Port device team_slave_0 removed
[ 1761.063899][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.216070][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1762.478467][T23825] usb 8-1: USB disconnect, device number 40
[ 1762.977885][T23825] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[ 1763.180950][T23825] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1763.180977][T23825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.180993][T23825] usb 8-1: Product: syz
[ 1763.181004][T23825] usb 8-1: Manufacturer: syz
[ 1763.181015][T23825] usb 8-1: SerialNumber: syz
[ 1763.223040][T23825] usb 8-1: config 0 descriptor??
[ 1763.238229][T23825] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 041
[ 1763.704273][T23825]  (null): failure reading functionality
[ 1764.157578][ T7404] net_ratelimit: 6 callbacks suppressed
[ 1764.157603][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1764.194132][T23825] i2c i2c-1: connected i2c-tiny-usb device
[ 1764.406311][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1764.447918][T23825] usb 8-1: USB disconnect, device number 41
[ 1764.581215][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1765.513775][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1765.663825][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1765.852275][T23339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1765.932398][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1766.066137][T23339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1766.071889][T23339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1766.121646][T23339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1766.122636][T23339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1766.568767][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1766.773818][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1767.203832][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1767.604123][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1768.373087][T24347] Bluetooth: hci5: command tx timeout
[ 1768.460286][T24639] : entered promiscuous mode
[ 1768.487306][T24437] team0: Port device team_slave_0 added
[ 1768.625846][T24437] team0: Port device team_slave_1 added
[ 1769.058872][T23339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1769.107984][T23339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1769.167747][T23339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1769.264125][T23339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1769.265454][T23339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1769.720754][ T5882] net_ratelimit: 5 callbacks suppressed
[ 1769.720777][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1769.928377][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1770.085321][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1770.244259][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1770.403807][T24347] Bluetooth: hci5: command tx timeout
[ 1770.790836][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1770.965251][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1771.073902][T24437] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1771.073926][T24437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1771.073958][T24437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1771.190846][T24437] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1771.190875][T24437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1771.190910][T24437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1771.443962][T24347] Bluetooth: hci1: command tx timeout
[ 1771.863694][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.005399][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.012878][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.422639][T24437] hsr_slave_0: entered promiscuous mode
[ 1772.432651][T24437] hsr_slave_1: entered promiscuous mode
[ 1772.439748][T24437] debugfs: 'hsr0' already exists in 'hsr'
[ 1772.439778][T24437] Cannot create hsr debugfs directory
[ 1772.493065][T24347] Bluetooth: hci5: command tx timeout
[ 1772.909512][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1773.532581][T24347] Bluetooth: hci1: command tx timeout
[ 1774.573493][T23339] Bluetooth: hci5: command tx timeout
[ 1775.020229][T17763] net_ratelimit: 4 callbacks suppressed
[ 1775.020247][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1775.044289][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1775.133282][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1775.180014][ T1053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1775.364319][T17763] usb 8-1: new full-speed USB device number 42 using dummy_hcd
[ 1775.534360][T17763] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1775.534404][T17763] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1775.534455][T17763] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1775.534485][T17763] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1775.605872][T24347] Bluetooth: hci1: command tx timeout
[ 1775.760553][T17763] usb 8-1: usb_control_msg returned -32
[ 1775.760614][T17763] usbtmc 8-1:16.0: can't read capabilities
[ 1776.087041][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.214544][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.311247][ T1053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1776.337988][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.507045][T22986] usb 8-1: USB disconnect, device number 42
[ 1777.124066][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1777.283953][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1777.561729][ T1053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1777.683692][T24347] Bluetooth: hci1: command tx timeout
[ 1778.028961][T24635] chnl_net:caif_netlink_parms(): no params data found
[ 1778.093892][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1778.163912][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1778.714928][ T1053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1779.353058][T24646] chnl_net:caif_netlink_parms(): no params data found
[ 1779.783930][T22884] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 1779.936867][T22884] usb 10-1: Using ep0 maxpacket: 32
[ 1779.943636][T22884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1779.943669][T22884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1779.943705][T22884] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1779.943725][T22884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1779.996679][T22884] usb 10-1: config 0 descriptor??
[ 1780.244797][ T5882] net_ratelimit: 6 callbacks suppressed
[ 1780.244816][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1780.404369][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1780.494390][    C1] raw-gadget.0 gadget.9: ignoring, device is not running
[ 1780.494639][T22884] usbhid 10-1:0.0: can't add hid device: -32
[ 1780.494779][T22884] usbhid 10-1:0.0: probe with driver usbhid failed with error -32
[ 1780.588232][T22884] usb 10-1: USB disconnect, device number 38
[ 1781.137253][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1781.284101][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1781.384862][T22986] usb 10-1: new full-speed USB device number 39 using dummy_hcd
[ 1781.443973][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1781.515513][T24635] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1781.515784][T24635] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1781.516167][T24635] bridge_slave_0: entered allmulticast mode
[ 1781.518471][T24635] bridge_slave_0: entered promiscuous mode
[ 1781.575940][T22986] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1781.576006][T22986] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1781.576046][T22986] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1781.576068][T22986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1781.698076][T24635] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1781.698203][T24635] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1781.698471][T24635] bridge_slave_1: entered allmulticast mode
[ 1781.700761][T24635] bridge_slave_1: entered promiscuous mode
[ 1781.872387][T22986] usb 10-1: usb_control_msg returned -32
[ 1781.872441][T22986] usbtmc 10-1:16.0: can't read capabilities
[ 1782.323072][T24730] netlink: 'syz.7.5282': attribute type 2 has an invalid length.
[ 1782.332856][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1782.403837][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1782.483807][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1782.609624][T24646] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1782.609851][T24646] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1782.610136][T24646] bridge_slave_0: entered allmulticast mode
[ 1782.679339][T23339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1782.738901][T23339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1782.739800][T24646] bridge_slave_0: entered promiscuous mode
[ 1782.789378][T23339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1782.845584][T23339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1782.847137][T23339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1782.943736][T24635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1782.980513][T24646] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1782.993963][T24646] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1782.994212][T24646] bridge_slave_1: entered allmulticast mode
[ 1782.996730][T24646] bridge_slave_1: entered promiscuous mode
[ 1783.002151][T24635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1783.364246][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1783.524393][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1784.236585][ T7404] usb 10-1: USB disconnect, device number 39
[ 1784.443000][T24646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1784.498630][T24635] team0: Port device team_slave_0 added
[ 1784.536892][T24646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1784.975965][T23339] Bluetooth: hci3: command tx timeout
[ 1785.444147][ T7404] net_ratelimit: 3 callbacks suppressed
[ 1785.444182][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1785.484125][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1785.493135][ T1053] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1785.604029][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1785.654768][T24635] team0: Port device team_slave_1 added
[ 1786.583537][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1786.659115][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.043698][T23339] Bluetooth: hci3: command tx timeout
[ 1787.203612][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.576637][ T1053] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1787.610912][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.723215][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1788.011188][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1788.025133][T24646] team0: Port device team_slave_0 added
[ 1788.062277][T24635] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1788.062293][T24635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1788.062316][T24635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1788.136212][T24646] team0: Port device team_slave_1 added
[ 1788.137368][T24635] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1788.137384][T24635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1788.137410][T24635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1788.538728][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1788.801343][ T1053] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1789.129726][T23339] Bluetooth: hci3: command tx timeout
[ 1790.317499][ T1053] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1790.593624][T24646] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1790.593642][T24646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1790.593665][T24646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1790.723704][ T5882] net_ratelimit: 6 callbacks suppressed
[ 1790.723729][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1790.804276][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1791.157000][T24646] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1791.157024][T24646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1791.157047][T24646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1791.205187][T23339] Bluetooth: hci3: command tx timeout
[ 1791.368766][ T7404] usb 10-1: new full-speed USB device number 40 using dummy_hcd
[ 1791.398145][T24635] hsr_slave_0: entered promiscuous mode
[ 1791.399232][T24635] hsr_slave_1: entered promiscuous mode
[ 1791.400546][T24635] debugfs: 'hsr0' already exists in 'hsr'
[ 1791.400573][T24635] Cannot create hsr debugfs directory
[ 1791.541370][ T7404] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1791.541409][ T7404] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1791.541462][ T7404] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1791.541492][ T7404] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1791.604142][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1791.763818][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1791.829335][ T7404] usb 10-1: usb_control_msg returned -32
[ 1791.829389][ T7404] usbtmc 10-1:16.0: can't read capabilities
[ 1791.946344][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1792.464331][T24646] hsr_slave_0: entered promiscuous mode
[ 1792.469198][T24646] hsr_slave_1: entered promiscuous mode
[ 1792.470241][T24646] debugfs: 'hsr0' already exists in 'hsr'
[ 1792.470268][T24646] Cannot create hsr debugfs directory
[ 1792.813763][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1792.964241][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1793.284278][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1793.854001][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1794.013805][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1794.570136][T22884] usb 10-1: USB disconnect, device number 40
[ 1794.803216][ T1053] bridge_slave_0: left allmulticast mode
[ 1794.803269][ T1053] bridge_slave_0: left promiscuous mode
[ 1794.827632][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1794.973760][ T1053] bridge_slave_1: left allmulticast mode
[ 1794.973787][ T1053] bridge_slave_1: left promiscuous mode
[ 1794.973990][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1795.074657][ T1053] bridge_slave_0: left allmulticast mode
[ 1795.074686][ T1053] bridge_slave_0: left promiscuous mode
[ 1795.075177][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1795.923676][T17763] net_ratelimit: 10 callbacks suppressed
[ 1795.923697][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1796.084365][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1796.324207][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1796.433678][T24796] netlink: 'syz.7.5297': attribute type 13 has an invalid length.
[ 1796.970818][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1796.991835][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1797.182133][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1797.649613][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1797.687466][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.004213][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.244799][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.919756][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1799.874580][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1799.964365][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1800.037292][ T1053] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1800.054964][ T1053] bond0 (unregistering): Released all slaves
[ 1800.078879][ T1053] bond1 (unregistering): Released all slaves
[ 1800.102133][ T1053] bond2 (unregistering): Released all slaves
[ 1800.142242][ T1053] bond3 (unregistering): Released all slaves
[ 1801.124957][T17763] net_ratelimit: 6 callbacks suppressed
[ 1801.124994][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1801.418510][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1801.778970][ T1053] bond4 (unregistering): Released all slaves
[ 1801.799064][ T1053] bond5 (unregistering): Released all slaves
[ 1802.194527][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1802.484352][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1802.502506][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1803.209015][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1803.523960][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1803.785234][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.261554][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.606706][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1805.015804][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1805.084551][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1805.117324][ T1053] bond0 (unregistering): Released all slaves
[ 1805.138703][ T1053] bond1 (unregistering): Released all slaves
[ 1805.158466][ T1053] bond2 (unregistering): Released all slaves
[ 1805.180159][ T1053] bond3 (unregistering): Released all slaves
[ 1805.205665][ T1053] bond4 (unregistering): Released all slaves
[ 1806.383491][T17763] net_ratelimit: 3 callbacks suppressed
[ 1806.383511][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1806.678268][ T1053] bond5 (unregistering): Released all slaves
[ 1806.732349][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1806.830778][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1806.900187][T24789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1807.200230][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1807.220870][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1807.254176][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1807.484968][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1807.515577][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1807.728107][ T1053] : left promiscuous mode
[ 1807.810254][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1808.733744][   T38] kauditd_printk_skb: 7 callbacks suppressed
[ 1808.733767][   T38] audit: type=1326 audit(1768578279.123:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.733825][   T38] audit: type=1326 audit(1768578279.123:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.733884][   T38] audit: type=1326 audit(1768578279.123:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.733932][   T38] audit: type=1326 audit(1768578279.123:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.733987][   T38] audit: type=1326 audit(1768578279.123:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.734036][   T38] audit: type=1326 audit(1768578279.123:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.734086][   T38] audit: type=1326 audit(1768578279.123:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.734134][   T38] audit: type=1326 audit(1768578279.123:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.734182][   T38] audit: type=1326 audit(1768578279.123:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.734233][   T38] audit: type=1326 audit(1768578279.123:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24806 comm="syz.7.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3ad311f749 code=0x7ffc0000
[ 1808.985165][T22884] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[ 1809.243550][T22884] usb 8-1: Using ep0 maxpacket: 32
[ 1809.292277][T22884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1809.292318][T22884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1809.292363][T22884] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1809.292391][T22884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1809.384210][T22884] usb 8-1: config 0 descriptor??
[ 1810.025376][T22884] ft260 0003:0403:6030.0036: unknown main item tag 0x7
[ 1810.208746][T24735] chnl_net:caif_netlink_parms(): no params data found
[ 1810.218169][ T1053] tipc: Left network mode
[ 1810.226039][T22884] ft260 0003:0403:6030.0036: chip code: 0000 0000
[ 1810.529405][T22884] ft260 0003:0403:6030.0036: failed to retrieve system status
[ 1810.529825][T22884] ft260 0003:0403:6030.0036: probe with driver ft260 failed with error -32
[ 1811.604186][T22986] net_ratelimit: 10 callbacks suppressed
[ 1811.604219][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1811.903447][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1812.014863][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1812.700432][ T1053] tipc: Left network mode
[ 1813.033684][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1813.053855][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1813.053941][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1813.310089][ T5811] usb 8-1: USB disconnect, device number 43
[ 1814.133788][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1814.134052][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1814.272043][T24820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1814.644954][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1815.223767][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1816.072136][T24833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1816.803733][T22986] net_ratelimit: 4 callbacks suppressed
[ 1816.803758][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1817.284345][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1817.284745][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1817.359720][T24735] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1817.359996][T24735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1817.360417][T24735] bridge_slave_0: entered allmulticast mode
[ 1817.392459][T24735] bridge_slave_0: entered promiscuous mode
[ 1817.415438][T24735] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1817.443164][T24735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1817.491535][T24735] bridge_slave_1: entered allmulticast mode
[ 1817.512050][T24735] bridge_slave_1: entered promiscuous mode
[ 1817.723828][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1818.084338][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1818.356954][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1818.357258][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1819.132406][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1819.377838][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1819.378352][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1820.470342][T24735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1820.502301][T24735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1821.944048][T24735] team0: Port device team_slave_0 added
[ 1822.085017][T24735] team0: Port device team_slave_1 added
[ 1822.164210][T23825] net_ratelimit: 5 callbacks suppressed
[ 1822.164230][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1822.644191][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1822.645868][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.167759][T24735] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1823.167797][T24735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1823.167839][T24735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1823.685394][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.685711][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.789124][T24735] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1823.789147][T24735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1823.789181][T24735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1823.847217][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.983726][ T1053] hsr_slave_0: left promiscuous mode
[ 1824.044216][ T1053] hsr_slave_1: left promiscuous mode
[ 1824.045285][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1824.045323][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1824.105429][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1824.105465][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1824.333927][ T1053] hsr_slave_0: left promiscuous mode
[ 1824.353840][ T1053] hsr_slave_1: left promiscuous mode
[ 1824.354746][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1824.354776][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1824.390162][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1824.390202][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1824.723855][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1824.734090][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1824.816215][ T1053] veth1_macvtap: left promiscuous mode
[ 1824.816332][ T1053] veth0_macvtap: left promiscuous mode
[ 1824.816640][ T1053] veth1_vlan: left promiscuous mode
[ 1824.816825][ T1053] veth0_vlan: left promiscuous mode
[ 1824.954083][ T1053] veth1_macvtap: left promiscuous mode
[ 1824.954170][ T1053] veth0_macvtap: left promiscuous mode
[ 1824.954360][ T1053] veth1_vlan: left promiscuous mode
[ 1824.954501][ T1053] veth0_vlan: left promiscuous mode
[ 1825.203747][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1825.763867][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1826.311100][T24347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1826.341499][T24347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1826.383768][T24347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1826.389957][T24347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1826.390870][T24347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1827.372677][T24897] netlink: 'syz.7.5315': attribute type 13 has an invalid length.
[ 1827.543896][T24898] net_ratelimit: 5 callbacks suppressed
[ 1827.543923][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.544693][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.557486][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.558064][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.612222][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.612988][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.635172][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.635869][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.644493][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.645153][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1828.572515][T24347] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1828.679100][T24347] Bluetooth: hci2: command tx timeout
[ 1828.722254][T24347] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1828.732841][T24347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1828.742946][T24347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1828.826503][T24347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1830.414643][ T1053] team0 (unregistering): Port device team_slave_1 removed
[ 1830.748914][T24347] Bluetooth: hci2: command tx timeout
[ 1830.844564][ T1053] team0 (unregistering): Port device team_slave_0 removed
[ 1831.044028][T24347] Bluetooth: hci6: command tx timeout
[ 1832.840686][T24347] Bluetooth: hci2: command tx timeout
[ 1833.043996][T22986] net_ratelimit: 17 callbacks suppressed
[ 1833.044016][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1833.123875][T24347] Bluetooth: hci6: command tx timeout
[ 1833.124031][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1833.124734][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1834.163940][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1834.164225][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1834.483889][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1834.883850][T24347] Bluetooth: hci2: command tx timeout
[ 1835.203832][T24347] Bluetooth: hci6: command tx timeout
[ 1835.225445][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1835.225857][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1836.004057][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1836.006229][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1837.284607][T23339] Bluetooth: hci6: command tx timeout
[ 1838.344509][T17763] net_ratelimit: 11 callbacks suppressed
[ 1838.344540][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1838.360803][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1838.904374][ T1053] team0 (unregistering): Port device team_slave_1 removed
[ 1839.173928][T22986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1839.311879][T23339] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1839.360584][T23339] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1839.369019][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1839.369544][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1839.447500][T23339] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1839.449936][T23339] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1839.452384][T23339] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1839.525072][T23825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1839.654600][ T1053] team0 (unregistering): Port device team_slave_0 removed
[ 1840.426700][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1840.427030][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1841.456666][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1841.457051][T17763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1841.696284][T24347] Bluetooth: hci7: command tx timeout
[ 1843.116394][T23339] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1843.230235][T23339] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1843.286487][T23339] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1843.302199][T23339] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1843.303150][T23339] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1843.480364][T24347] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1843.563610][ T5811] net_ratelimit: 7 callbacks suppressed
[ 1843.563628][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1843.563895][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1843.640497][T24347] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1843.709003][T24347] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1843.796797][T24347] Bluetooth: hci7: command tx timeout
[ 1843.816941][ T5802] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1843.841362][ T5802] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1844.710379][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1844.710878][T22884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1844.910154][T17659] ==================================================================
[ 1844.910181][T17659] BUG: KASAN: slab-use-after-free in __linkwatch_run_queue+0x69b/0x7e0
[ 1844.910465][T17659] Read of size 1 at addr ffff888029ee4e39 by task kworker/u[ 1844.910465][T17659] Read of size 1 at addr ffff888029ee4e39 by task kworker/u8:2/17659
[ 1844.910487][T17659] 
[ 1844.910526][T17659] CPU: 1 UID: 0 PID: 17659 Comm: kworker/u8:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1844.910560][T17659] Tainted: [L]=SOFTLOCKUP
[ 1844.910570][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1844.910589][T17659] Workqueue: events_unbound linkwatch_event
[ 1844.910644][T17659] Call Trace:
[ 1844.910659][T17659]  <TASK>
[ 1844.910674][T17659]  dump_stack_lvl+0xe8/0x150
[ 1844.910758][T17659]  print_report+0xca/0x240
[ 1844.910795][T17659]  ? __linkwatch_run_queue+0x69b/0x7e0
[ 1844.910832][T17659]  kasan_report+0x118/0x150
[ 1844.911135][T17659]  ? __linkwatch_run_queue+0x69b/0x7e0
[ 1844.911180][T17659]  __linkwatch_run_queue+0x69b/0x7e0
[ 1844.911218][T17659]  ? __pfx___linkwatch_run_queue+0x10/0x10
[ 1844.911254][T17659]  ? linkwatch_event+0xe/0x60
[ 1844.911291][T17659]  ? process_scheduled_works+0x9ef/0x1770
[ 1844.911368][T17659]  linkwatch_event+0x4c/0x60
[ 1844.911404][T17659]  process_scheduled_works+0xad1/0x1770
[ 1844.911466][T17659]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1844.911499][T17659]  ? do_raw_spin_lock+0x121/0x290
[ 1844.911551][T17659]  worker_thread+0x8a0/0xda0
[ 1844.911589][T17659]  ? __kthread_parkme+0x7b/0x200
[ 1844.911627][T17659]  kthread+0x711/0x8a0
[ 1844.911664][T17659]  ? __pfx_worker_thread+0x10/0x10
[ 1844.911693][T17659]  ? __pfx_kthread+0x10/0x10
[ 1844.911729][T17659]  ? rt_spin_unlock+0x150/0x200
[ 1844.911911][T17659]  ? rt_spin_unlock+0x161/0x200
[ 1844.911945][T17659]  ? __pfx_kthread+0x10/0x10
[ 1844.911980][T17659]  ret_from_fork+0x510/0xa50
[ 1844.912021][T17659]  ? __pfx_ret_from_fork+0x10/0x10
[ 1844.912048][T17659]  ? __switch_to+0xc9e/0x1480
[ 1844.912090][T17659]  ? __pfx_kthread+0x10/0x10
[ 1844.912124][T17659]  ret_from_fork_asm+0x1a/0x30
[ 1844.912173][T17659]  </TASK>
[ 1844.912184][T17659] 
[ 1844.912192][T17659] Allocated by task 14507:
[ 1844.912207][T17659]  kasan_save_track+0x3e/0x80
[ 1844.912245][T17659]  __kasan_kmalloc+0x93/0xb0
[ 1844.912278][T17659]  __kvmalloc_node_noprof+0x408/0x940
[ 1844.912331][T17659]  alloc_netdev_mqs+0xa6/0x11b0
[ 1844.912424][T17659]  rtnl_create_link+0x31f/0xcf0
[ 1844.912445][T17659]  rtnl_newlink_create+0x25c/0xb00
[ 1844.912492][T17659]  rtnl_newlink+0x16e7/0x1c90
[ 1844.912517][T17659]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1844.912542][T17659]  netlink_rcv_skb+0x208/0x470
[ 1844.912633][T17659]  netlink_unicast+0x846/0xa10
[ 1844.912660][T17659]  netlink_sendmsg+0x805/0xb30
[ 1844.912718][T17659]  __sock_sendmsg+0x21c/0x270
[ 1844.912769][T17659]  __sys_sendto+0x3c7/0x520
[ 1844.912795][T17659]  __x64_sys_sendto+0xde/0x100
[ 1844.912821][T17659]  do_syscall_64+0xec/0xf80
[ 1844.912873][T17659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1844.912914][T17659] 
[ 1844.912921][T17659] Freed by task 1053:
[ 1844.912933][T17659]  kasan_save_track+0x3e/0x80
[ 1844.912963][T17659]  kasan_save_free_info+0x46/0x50
[ 1844.912990][T17659]  __kasan_slab_free+0x5c/0x80
[ 1844.913023][T17659]  kfree+0x1bd/0x900
[ 1844.913050][T17659]  device_release+0x9e/0x1d0
[ 1844.913156][T17659]  kobject_put+0x228/0x570
[ 1844.913231][T17659]  netdev_run_todo+0xd2c/0xea0
[ 1844.913267][T17659]  default_device_exit_batch+0x969/0x9e0
[ 1844.913292][T17659]  ops_undo_list+0x525/0x990
[ 1844.913347][T17659]  cleanup_net+0x4de/0x7b0
[ 1844.913371][T17659]  process_scheduled_works+0xad1/0x1770
[ 1844.913394][T17659]  worker_thread+0x8a0/0xda0
[ 1844.913417][T17659]  kthread+0x711/0x8a0
[ 1844.913446][T17659]  ret_from_fork+0x510/0xa50
[ 1844.913483][T17659]  ret_from_fork_asm+0x1a/0x30
[ 1844.913516][T17659] 
[ 1844.913524][T17659] The buggy address belongs to the object at ffff888029ee4000
[ 1844.913524][T17659]  which belongs to the cache kmalloc-cg-4k of size 4096
[ 1844.913549][T17659] The buggy address is located 3641 bytes inside of
[ 1844.913549][T17659]  freed 4096-byte region [ffff888029ee4000, ffff888029ee5000)
[ 1844.913575][T17659] 
[ 1844.913584][T17659] The buggy address belongs to the physical page:
[ 1844.913616][T17659] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29ee0
[ 1844.913644][T17659] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1844.913664][T17659] memcg:ffff88805f0e0e41
[ 1844.913678][T17659] anon flags: 0x80000000000040(head|node=0|zone=1)
[ 1844.913707][T17659] page_type: f5(slab)
[ 1844.913731][T17659] raw: 0080000000000040 ffff88813ff30500 0000000000000000 dead000000000001
[ 1844.913754][T17659] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88805f0e0e41
[ 1844.913777][T17659] head: 0080000000000040 ffff88813ff30500 0000000000000000 dead000000000001
[ 1844.913799][T17659] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88805f0e0e41
[ 1844.913821][T17659] head: 0080000000000003 ffffea0000a7b801 00000000ffffffff 00000000ffffffff
[ 1844.913840][T17659] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1844.913855][T17659] page dumped because: kasan: bad access detected
[ 1844.913878][T17659] page_owner tracks the page as allocated
[ 1844.913888][T17659] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12137, tgid 12137 (udevd), ts 505818290638, free_ts 505706958653
[ 1844.913934][T17659]  post_alloc_hook+0x234/0x290
[ 1844.913970][T17659]  get_page_from_freelist+0x28c0/0x2960
[ 1844.913992][T17659]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1844.914011][T17659]  alloc_pages_mpol+0xd1/0x380
[ 1844.914030][T17659]  allocate_slab+0x86/0x3b0
[ 1844.914056][T17659]  ___slab_alloc+0xb10/0x13e0
[ 1844.914079][T17659]  __slab_alloc+0xc6/0x1f0
[ 1844.914101][T17659]  __kvmalloc_node_noprof+0x327/0x940
[ 1844.914135][T17659]  seq_read_iter+0x203/0xe20
[ 1844.914183][T17659]  vfs_read+0x563/0xa30
[ 1844.914212][T17659]  ksys_read+0x14b/0x260
[ 1844.914239][T17659]  do_syscall_64+0xec/0xf80
[ 1844.914262][T17659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1844.914285][T17659] page last free pid 12155 tgid 12152 stack trace:
[ 1844.914299][T17659]  __free_frozen_pages+0xfe1/0x1170
[ 1844.914331][T17659]  __put_partials+0x149/0x170
[ 1844.914354][T17659]  __slab_free+0x2af/0x330
[ 1844.914379][T17659]  qlist_free_all+0x97/0x100
[ 1844.914408][T17659]  kasan_quarantine_reduce+0x148/0x160
[ 1844.914438][T17659]  __kasan_slab_alloc+0x22/0x80
[ 1844.914479][T17659]  __kmalloc_noprof+0x1ec/0x7e0
[ 1844.914510][T17659]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1844.914609][T17659]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1844.914667][T17659]  security_file_ioctl+0xcb/0x2d0
[ 1844.914758][T17659]  __se_sys_ioctl+0x47/0x170
[ 1844.914788][T17659]  do_syscall_64+0xec/0xf80
[ 1844.914810][T17659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1844.914833][T17659] 
[ 1844.914840][T17659] Memory state around the buggy address:
[ 1844.914855][T17659]  ffff888029ee4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1844.914874][T17659]  ffff888029ee4d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1844.914892][T17659] >ffff888029ee4e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1844.914906][T17659]                                         ^
[ 1844.914919][T17659]  ffff888029ee4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1844.914937][T17659]  ffff888029ee4f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1844.914951][T17659] ==================================================================
[ 1844.938215][T17659] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1844.938318][T17659] CPU: 1 UID: 0 PID: 17659 Comm: kworker/u8:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1844.938410][T17659] Tainted: [L]=SOFTLOCKUP
[ 1844.938436][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1844.938492][T17659] Workqueue: events_unbound linkwatch_event
[ 1844.938652][T17659] Call Trace:
[ 1844.938712][T17659]  <TASK>
[ 1844.938738][T17659]  vpanic+0x1e0/0x670
[ 1844.938842][T17659]  panic+0xb9/0xc0
[ 1844.938930][T17659]  ? __pfx_panic+0x10/0x10
[ 1844.939016][T17659]  ? preempt_schedule_thunk+0x16/0x30
[ 1844.939111][T17659]  ? __linkwatch_run_queue+0x69b/0x7e0
[ 1844.939390][T17659]  check_panic_on_warn+0x89/0xb0
[ 1844.939601][T17659]  ? __linkwatch_run_queue+0x69b/0x7e0
[ 1844.939661][T17659]  end_report+0x6f/0x140
[ 1844.939750][T17659]  kasan_report+0x129/0x150
[ 1844.939859][T17659]  ? __linkwatch_run_queue+0x69b/0x7e0
[ 1844.939962][T17659]  __linkwatch_run_queue+0x69b/0x7e0
[ 1844.940078][T17659]  ? __pfx___linkwatch_run_queue+0x10/0x10
[ 1844.940176][T17659]  ? linkwatch_event+0xe/0x60
[ 1844.940261][T17659]  ? process_scheduled_works+0x9ef/0x1770
[ 1844.940330][T17659]  linkwatch_event+0x4c/0x60
[ 1844.940420][T17659]  process_scheduled_works+0xad1/0x1770
[ 1844.940524][T17659]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1844.940587][T17659]  ? do_raw_spin_lock+0x121/0x290
[ 1844.940676][T17659]  worker_thread+0x8a0/0xda0
[ 1844.940799][T17659]  ? __kthread_parkme+0x7b/0x200
[ 1844.940893][T17659]  kthread+0x711/0x8a0
[ 1844.940991][T17659]  ? __pfx_worker_thread+0x10/0x10
[ 1844.941069][T17659]  ? __pfx_kthread+0x10/0x10
[ 1844.941136][T17659]  ? rt_spin_unlock+0x150/0x200
[ 1844.941237][T17659]  ? rt_spin_unlock+0x161/0x200
[ 1844.941317][T17659]  ? __pfx_kthread+0x10/0x10
[ 1844.941401][T17659]  ret_from_fork+0x510/0xa50
[ 1844.941475][T17659]  ? __pfx_ret_from_fork+0x10/0x10
[ 1844.941524][T17659]  ? __switch_to+0xc9e/0x1480
[ 1844.941621][T17659]  ? __pfx_kthread+0x10/0x10
[ 1844.941698][T17659]  ret_from_fork_asm+0x1a/0x30
[ 1844.941849][T17659]  </TASK>
[ 1844.942492][T17659] Kernel Offset: disabled