last executing test programs:

8.043138789s ago: executing program 1 (id=504):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x4}) (async, rerun: 32)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32)
landlock_create_ruleset(0x0, 0x0, 0x2) (async)
splice(r0, &(0x7f0000000540)=0x1, 0xffffffffffffffff, &(0x7f0000000580), 0x7fff, 0x8)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10)

6.669054574s ago: executing program 2 (id=510):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x1000)
linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1400)
sendmsg$kcm(r0, &(0x7f00000015c0)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(xeta)\x00'}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)="11478876dc5e68dfcffa02b86eb98dea520dcbdf3a7a038f47ae932bd6bc8ce50975f0bb1aae8c7e494ad3fb12dadf08cabf72a800f3edcaf929f3a2fef71a90fb7ff012b4ce127fa907a1ba1649b9aa15ef4c274fc74f77c9840f0000281c1da530fdc973a9880bcd17456406053ed7a6309f356c0fdc906b09ab4f4b0a824fb41f9a885f92b269d2260af499a7c86fd3adefb3a69bf5711cb270470934e50ac683f9222cfc9164e6e8cf12d2f0fb38a93820d81289da7bc1cb14e9fc3780326075c9ecdc04ff06238f4e5b", 0xcc}, {&(0x7f0000000240)="b3a554e72185b308e79d5f4ed0601f9908157f6924f33b9bb1853dd30006679b306d3878848dd65610456f06c9f9b88d6e5099756b591b68b12d2ef82a47235a0f2f9edef8729a2b712b46c8aab84eecfb4920685d22fa379feaabfbd55bdb2529026a89404cffb3740ac6e38610a5ef0a5fbf1db1e52e682e33932115a4062dbb0025b6ff52f47e57103aad468cbdd0af96f2", 0x93}, {&(0x7f0000000300)="a7f9233987c8cc572f49eae3978ce0fff9d89622dc3a4b2e153da0315501e8c903b7be238dc062c5e4f5da", 0x2b}, {&(0x7f0000000340)="852a4d5c7c36538cc80379b1e63f103e732ce5362fa80434cd407668c1c4e35bdb6a02e3732b7d3983221cb3e4308668d4fd5df558b4a2a8e192be568665a411a62b8adbc04de4ec01a56481036e6240c829bda1ad8511d4d5274fb8031f50f44bebe622641a108d5ae99ae624c2ab08976af93faf12f28c9ea54eab426ec03473703cc1c46505638385afc832cce18d29970e94d92d649485a78653ab3c40d6a94af897ef0f06b67179c7a0e997b82cc7efdd074f33232e8f311ef6e82b26dda82642e9a2953c8f6c0e9cd33e02889b935dbad34e5212f21bff19a823bd62d129c22f3740d1cdb39e89e4155260d353a78e8c7722e1f6d84d250e1e085fa3fd01dcb6cdb0e81730bf5adf74f05ae3e1dc533ccc0683d80da212bd23c7d58b378e3b7c5d00b4b80535f55c940df2c2adce84f20eb18b71e2408860f35915cfbcd4e4d9ed616260f2f3eb140d0ba6002d7138ddf3ade758d885a96dd455b15e16e7641e2ebd60f558de0a0c5a7f87197220477d4a094dea225f4be4d3905ce2841b204574007a26dc89d625810bb738ad10786f42e553b3612d0719626e87b40312dd9ff631397b34f4a4408e692aa665cae4e6a91c2de307bcd815f80d220f3dba9d45ed4cbe3aed2847be8d4782a19237c48ff417d18d67d69068ab02dde0810d2d882bff941bbcab6aec14f14325bff424f9ce21ebcca20f79ae0d18bde9149fa6420082e9c57ce8f214187dc77d55e33044e50044092cd5c5879b751510e233d0d294dc40301e9960e36db9b9c4d36236349f96887c845d653e4777a57fa2adc85d89308dc5bc1155c50125af16b886d79b9811ee22c2b7d8e1ef01d9cd8557be94592a007321dcfe5a531365f0d143cc9b4ed6c295c2985572ce1f63e2f4dd222bf07686876d457cfec90317c4b68278159d28a322086e472cace7b0c9ded99b533090c940b50692881cd1d1c77d2cd07e4d7b420d505b435d44aeb91ff150b0074ac42dba3ef057bf39bab92aa7a7b3dcf4ff3e4bd99277f301fc08b61402738553591c3410ec86599a78e46a0a181cc262586428a06331be97513119ce0aecbce9de28a13d1cd71a98a5d0e9b0037cad9134a51854ad07e9fc43a4a4267c2519e77b3dd4763a7198c69dfeb1a340eea320e6ef324c1eb308062a1c8bee95926d7570643b1b0d417b91a84bf82631393f806b266612e21f73cd60c9ac18943da44c81281fe21d974cd249e4baa9d9938b9add020e15339a2222299e9d7f0dc02a9c028ec8cbb7f5e980c0e211b079d030dc7be769c7f6a67058dfd3d4999b5c6576ff899516f483553752e7dd3b16b68e0117e8a2c65e7466dece2fe7aee24bfe3cad719aeb5b689edccbc72c3f38cefb1198ae4f1a89d52a50959d3e45c7ed27dd6f261bd4afb7f9ffb834b6c68c71b66ba70d7d621706e8c7212de77de7b712f39bd4981c45a4c027c2f796e3b3f096d916c12f5e1631cf28bab40ea44e486afa506e92409c6c94317ee536dbea0c1a30b908a4ab07a31d9ba47e7fbfd1c91aa3b501abdeb70ac7f94950db80138f608f613d064b95bc4f934e915f98cd733ac26930a24e05f637f195de1f9049d922a5918a55f4a7a532c2e85ac7ee7aac2868da0e20a7761707dcdbee7200b5425fc1247f132530f53d61264084be79d759606a41a47a1cbca79507f68b5b7036f57665224b4deed6725611206d34f9ab10b9028a097fc5b9c87a44be012b7b7e99d5ff43343340cd36be40adbc096264bf71981f1c9496889f2e685953c1bedd8a5081912f891cdb64e0af82128f61e0a14635e7c284f5a023ba98e9aa134d66058e35a824f460a3e86fe0e1e8e794bb3b5a06d1ff1fb5d66a8ae1e55cb5572b3d6a399c4724b8906d903935f9384f7060734ded199131603d967f0f8897db932c7207dda20f1075a2192b621fe56cd0783fb7037b2222af54f463384263157b056e6882855056eff37b9539049bb562c19de265019066406cd0c099fd07dc1dcd0e570d5b3e5b7e1d32f867dd079223b7d025609a2066ab86e5ad1f66b6f8b957c487d0538699908a085eb40e20981582769f850469e53ba8bc3accc946c88546eebb10a03d1ae7dbf119e23d0eeba61a9b64c70eeb282a4ef7a0515e36da93413b5901e6123b07e07e013df3ef1d23548ad917a8240d7113b7c78dbd2945f0e1b82fd8ae21f85b7ff1e980988d5f4ca3b2ffd0947f5dff80b3370d2121b68fcdd30956eb89f5df26ff27202b24a27f08ac915471f6dcb18f25c5effc86aa05db0780cb50319719285fc3678c704fee87c747a0fae7b3d09c6510c246d3d602a98f00e6619153f1d70fa971dc91ac7f7556ddfbc221bceb207260cc15eea8cf937aa68710083383dc104f3f58cfd1f6c0820f02ec124922786682d3e7f196f3b3190d2cab30ddb53ed5760db7342a337bc1f42a1f597dd1821fe67d4458fabbbb1401f479ac0e18fd901601ba44f3f0ed20fddbb8165421c3b7e08be2f3514b673f1a77ed3ee1658b75372510d70d33f3ab7cfd7c03cee29ce8748c986325139abaac256596fa80c725d734c2b7d556a9e343395773dac0d6c3afebab140bf821a2f63303d44d93bdc060f4178385750165f325ea8212940d8f597be1e9012dd0893ec1de8dd241913fa8d87f5d674c4c11ef434f45d2bad4c1496e7ad9d6547cbd706c955b8a9b407d46f9aada8f115db06000061767be7bb9f5052733bce9eaaff2241f7bb2297c59a75a05655f0843e168c0184269701a5c1fd7d63463fd69c85fb211fc87eb3ca3c9a2b954c10f326a1c884ecde032aaa20db970cdaf30a2e3437a7a7648714d1759eb19fabbbb599e790284dfed7ae9bd2a14099761c0ff452e581a13947253bb1ebd937417081c8d9fb59853ea684a38949edb089064f87b7cd084159458eafb9c83ad3079a889393fb18f4ad1a23c02f1a17b8b3c1b4465f4e476725ab5b2f0a5ecfa97ba2694856a041f2cfe9c8b5e11bf2af116c7b05a67da382689f2120fcc4d6aff0d56b7aaa1e6e5ebfee6f859cc6602c44e49057be99d6448a151abbd41e1fbd92679077c8d04ecf25a0b4e788b671a606a5ce566064c8afbf78ebea3da2029cab3c5967b04641bfc2c414f4149a3e1b06b3b0fc3acb8f1af5b91d0ddc3ab482622eac5b0685999c5cd24504c66107590576a9e33517e1aa2bfb8425314e94a1c4c25867fde069c376168e3aee46fdac1c94e35ff258a0bb863c98a38fd83e3db8e22420f481a6b63360dd8d68f06ae2967ca2229b94be67509293ec1454cd2053b0b26eca59c2901e71678d179e1dba7eb35bc8a2eb85d9d63cf335204ace56e7b2a3c4140acfacb931e6d927c88e04be22265affd584301928a11c383219637250a722d58e3de070826db879c64b08f12a71164d0067ddf6bc50bcf8d8e1dd71af82d48b441113e0878155aa9edf507d2471cfdb091d93a8618cbaf6ca2eba0d66bc2d88cf1ce9c90041d181ebc0a2bf7834fd43ce2f1ed3dbe80f819c80148fcb74cff06fcfec4692f52194c3e851e7a9fa7351cfdb524600da2974610eb04a1b41aff33589582603b7237583b1d070637d579a3fe814e61ddc28a09e9d439c90d2f9ec03dcc75297d26aa10d4b746d8f7eba1c15a16f34f72b0a278495b6f3999343eb20819c6a8b3cb4b7bb6198136ddef69661f127172352ed1bc92db966244d3368db3984b184c8d5e670d44472e7b6f6b9a5bc08f3de7da8c4f0ffcf754feaf046496ab2d6addc3a6615e2a269c1d85effdddf9725ff321780a49942a389ce150155f504f82a8c7fd70091959f25f5d212c2bb36cf4ba68bb47a384b02d66cd8701d0bed8d61176dd6e9694026887c629b3c517588fa214ea6588bb1781af2df0bb21cef0d435174c5e1b8d50910133359d6b44a01515ed94fb4818ac98811c343a09f00f30af852dff60715561861b214bbe548d101ede4c588106d0cc9cb3d9ddbefbae8fb11f0c2eea993f74d9d0dc57b1ed2807f95be95658fada309ea853fb5b1fe4179fbe17b2eed9b2dad8cc86bdcdaad87fea07e035c5d366a7bc5dce70035773d956e312409654a5e59844f9c1996bfb15a3858ae14ae9d26a708ab78505bef69c16be6993fe3964c1762869504b0bb557a89f09f333646532c20a2b8b26dfe188d7c49b59e6f1805ff427100973fdb41eb5fbccaa567795832fa09ece27f7478a624ce44327ee67d29215cbdf44d25063e8d4f9fe05cdb90ddbb41f0d91cc1f7f6a2ab04e1517cebf9213fdf638013ab6df05a5db7bf3a848be4ae876afa94d182a709681f14feaf4b57eccc614437627fb5ff1cfeb0147c1245fa7121a5ae4922e36fc0863adfe531b71efbccfac386c10a939d4303396f7c0d9d7d8557557585a13a727dc767479d8d3c551b0807ff1b93704289df37a67f5d700de534f0b14f1215f1c52cdd99d7c3600cdf251b8519be1edfc14cf1db2153604378d0e94793b4d955e9891c2c955124b119cf80d684db936b3ee6d72fef6b5db726912b36923f41abf0db59b43222c714a9d975216b7a9802d357d54c5332bb4c3a1be1501ab1362d9ee9da611f39a3af98eb7352e64ee9cf4401f426582977a618b723c2d268f3658282b6ad693cab1fc06032c13a1e334f9e340506ba1e3295d468883e27ddd75aef5d5e608a6e07713291b9e0880e5b73905a17d51c13c809d84ec19889ed8ce8864ed69ce874e126c2973ea87a6199b84c47a2fad810b2c118abf806e845d07556280c5982af576421df58b6c46ee0ef03f880ff6950d0ece41c0b02f77e7366599f35401821623bf32e06029f23d7ae122239975505514bfc8a0e06970a70fd7965443f783f18eb624b6158ed524a4ed5872c26071a80ea6308110ad27656b248da0484acb7d72a91c42919d700329e092735d57a0f19d74a21171a8fac9e91681da62ec092cec4e2f9dd4b88635f4acc3c007179baa2040b885544bedce819a2da4e0b88eece8c66d41c9e4cd30826abd8e5e2ce1be56d8dbe78c04d73c3c1bea64a04592b1ec9d5afba639dd4987cc268b5915a844ae9f0a71a500556529df286c7410678d1cc56fd54f025d97d7d3551dfb4483a65ba33949f254b15667b19c923ac2c17f016513c5756073293883480bc983e2126c25ec6b0db6dcdc6fff402a7cc47562d32211b8e8ab8e69b62167e1b478602a293e1916728f60ef46dd8f2077b4e64012e36c010df112a97c400b2c4c04d05bcae32c7c0e6fa17c4c8064cdec9a3437f9bf26b072c9e52c8d091708083e22cc5bc6f8285682bfd01f7cad6c11d98da1be8fc55a620d8ae7c6fee69f8d78230e637a5cc3170f061b948d3e858a5c29e6bbbd38c6eda10423816f08a0a3d76d6a5e51d821aaedd8e7ef8f1f58d280595209f4702efe43ad586971993e29d37047748e5c6ffc524c3f237669cc9c4cafe33e3d563fa00aeef15969fe6ad2f7a7e2eea838ab03769193f000febff48e0f35a361a7655c9437e64f4bf2ecfedba5ebdc48ed96a7f33ee9d82e582e136f645a2696408b748e9c941675a0bd7c3e01f600580f2b4086845cf11a0fd1b03cc6729752b1049d18a8fb740a58becef9c013529da3ec70914e1afedfc0d0c476fa469ee8d9b7e8545eaf6d8c0874c482a742053b7fd6dfeab01b9227fd6c098a55468b8ea6595149c039b2429f46e1622fa161872fa6c4d3b59abf5c522a961069b1c488307151ec34aa09edff00e5fc05378deb3e4874150770480f1051eb6f54e0137b9469be1bf002c882037cb0", 0x1000}, {&(0x7f0000001340)="c6ac05e1d6f80d966feb4cfc2b33ff5d95a42c3028828841ece73670e337f6d024f7c2aa8b8dd9708c860edf2360e38fa85be90290d0a614fdae8f5decd54d650d7f49346934d074013aaf9231908d9288364394cf853dc6b5feb9b143bcb412f93107e68cc9f3c5743ee214cde3cb1ebb6f2d5e2d9d1e5c3047380a1633e22215d09ca4594e6f10ad109d92809078c1796562184de4bb879d46eb8953a789666c8a54e76ec531ceaeadb7853839e57b6516f368826d53673dfa08b1e569b47e84a5a419e9b1380617416317fbc8a34185cd883d97d77c32daca889e2e676b3495f1043fe1f269812b6ebaec9b1a33fef7b49bb11259", 0xf6}, {&(0x7f0000001440)="6017188f0d3bafa60ca3eaec7eec107e75ee14563e1530858c0668ef60e0d394558bd9744f4163d7f16744402f9e1cce2a6cc1cd0d1eb28d5cbdb04c90b05adf9427b1b691cb42e1807c94ef69b796a31d0662dd452757597ead4778168c3ae69a79d965a2d70221e4a63fe61cc5613c1fcb56fdf3a0f3504f71", 0x7a}], 0x6, &(0x7f0000001540)=[{0x78, 0x15, 0xffffffaf, "8684bd35f9389035bf5b9ffd9b6e257b550966fc0a0c8bcd93b5f575fef9b701b0fdad16c8760a5a48434f6a33c33a2fe5d3744233ef07ca45824ccbb9eeacdc4cd136a9423291adac106fff3110bbdcf5de28baf9cfe5f17b119a9a4d1529ad091c6ea8ed943fa2"}], 0x78}, 0x2010)
read$FUSE(r0, &(0x7f0000001600)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fcntl$setown(r0, 0x8, r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000003640)=""/224, 0xe0)
ioctl$sock_ifreq(r4, 0x8926, &(0x7f0000003740)={'wlan0\x00', @ifru_map={0x9, 0x9, 0x5, 0x7, 0xc8, 0xff}})
getsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000003780), &(0x7f00000037c0)=0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000003940)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003900)={&(0x7f0000003840)=@delqdisc={0x94, 0x25, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0xfff2, 0x7}, {0x9, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x6, 0x5, {0x5f, 0x1}}, @qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x52}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xa}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x10}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x5}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7, "0d5083c5b91bb853bec14f2ddf0ee9ef"}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x2404c010}, 0x4)
sendmsg$xdp(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000003980)="3c613a7db88b07e87c59810875205cba18ea6160d7ba9cefeaf507bbf0f5ea7fc17a0ac84fe420594151b00b0bf54ec8d65f0d9254fe618b2dddb4345dbdada65121a8c2478de525cbdcfbef085de132e7ee9344e415b812764cc44e6a39293ee5f4b21569b5ba43ebd173e596d204fdd9e8328de2e855ab8ea25ec6a5ac5ba11b4a52ac851d4db7ff4230db70addb491fde7031a82f021dbf2993e7f008555752af52671493c660fdfabb4970a53ede87bc584b4d93aa1e228537fb1ea6f64f8dc8aa39cc220d0e519feef87d56e73892", 0xd1}, {&(0x7f0000003a80)="ce15b335adfe997d175e67a4340f162599e15419c33ee0e746737510a58dfe39c2af9533e86f03069bd8365f2f05a0dddb844e700439f9422909c8290bb4ecb5197b00dba3f325a1ab597424f86650569483723b4109b2d83275d5613677acd503", 0x61}, {&(0x7f0000003b00)="8929d1d2f5e9f654b4dec2c7c2c9d90995fb0806f12f0259441dc6da889a8fdf8fbbc10d1013cfbfef5dd9cef4c481382b1de67b23b975174144543555ef63b6691d6819f1fcd171a327fd0250514707f301320e549970208b2e454fe15009948b3c94fdf160b3495fcfd41c31240231daabb587e9d794cb5c20a0f2951d99fd5a092ceb756c5e426ad4b724db96e52eb1922cf0b7cc71f130925c4dcb36f2dc957703260f0cafd28d93090133dd78aec168557b6ae82c59c1a2ea19b63b83", 0xbf}, {&(0x7f0000003bc0)="4160aacff1cb6be7ce06164d1c24f5e594f2fb3b6851f3a05cb790a1919ef3c9f315fb7cc88a783893fa9e09a6b2a9681dd72c03bc4d91dacd9ffd0136421bf73f6a714d3d3aa5766a7678bccbb32942af805b4afb8d4ba42507735cc0df2059b6cf72e2003fba7e9a7f658f820b3810c3", 0x71}, {&(0x7f0000003c40)="cde7a950bdb08990b36c2e33d9d6700e3937914b0da31a7548a4071a29730e40c4a8d0b1ba5201b1dc74e4a8358fcb0140c24134f08cddc775d470862b9d5ad2929a38f213b932ea37797d9ff920c1121579bf0e350aa84f6084cfcdeec3bd796a372b9d629a0d314173d00f", 0x6c}, {&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="289700392e0991ffa1c76227f67643e909667c859ef0f3d20e9b275739a38048c6c825d03462d9aa38de48ed8fb57b7534d353aadb802adf8854aa06e0c7a910474114a3b24968ccc9c752782723d9eacacaa8704ada258417eb69303b2cabc7b0c31891778c5a3a84bac284aaf929eed558fe7e66d86497b3952c158c96d1d76ba680b9e7b2320522fd3f259322c29032eacca9989ca8d8dfcae6ef1ed63dbea030913a40aa8ad7d8f0474218c2", 0xae}, {&(0x7f0000004d80)="a45a1936a76c2a429352d742", 0xc}, {&(0x7f0000004dc0)="aad0630d14699bd44ef80b593fc2f2d28cc0e1fd1e4eb8e42ceee44e5fd72c5c93dd2d5a0960fd223ce782f574784de07aa389d3ebac8bd90498e0a9002d67c91acfdfd00bdd55d3f92169a9c0a2b6dbc8d21044ba968a1051f27cf58fe12056a6390ce524562ce595ee7745095fcda95d7649c68acde59502f6e31644b05f6f3f75124f5a44d1a3b4aa040081b295c5fa31a86e97fae368b9b5a51506c4a047e5d2f8d62a20b49d1decd5ef0d5839b3b82a27013ddfe2feb830593e2a60ebd9c80c3021998263b64394fee14274e322e6741dd87fe6ddf917cc88c4d88c15bcfce6d61b5c520011724bd08404ea6d6623f2", 0xf2}], 0x9, 0x0, 0x0, 0x4000}, 0x20000094)
r5 = syz_usb_connect$cdc_ncm(0x0, 0xb3, &(0x7f0000004fc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x2, 0x1, 0x1, 0xf0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "70388775b5ea"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x401, 0x7f, 0x8}, {0x6, 0x24, 0x1a, 0x55bf, 0x18}, [@mdlm={0x15, 0x24, 0x12, 0x40}, @obex={0x5, 0x24, 0x15, 0x90}, @country_functional={0x12, 0x24, 0x7, 0x4, 0x0, [0x4, 0xc, 0x5, 0x5, 0x3c, 0x9]}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x40, 0x3, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xfe00, 0x7, 0x4, 0xfffd, 0xe2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x30, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x67, 0x1}}}}}}}]}}, &(0x7f0000005340)={0xa, &(0x7f0000005080)={0xa, 0x6, 0x300, 0x2, 0x5, 0x4, 0x10, 0x8e}, 0x4a, &(0x7f00000050c0)={0x5, 0xf, 0x4a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "f4490d57280e368c7e4df1108938265c"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xc, 0x100}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0xe2, 0xff0f, 0x3037, [0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0xa3, 0x200}, @ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x1, 0xf00, 0x5, [0xffc0e1]}]}, 0x5, [{0x4, &(0x7f0000005140)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000005180)=@lang_id={0x4, 0x3, 0xd8b7}}, {0x73, &(0x7f00000051c0)=@string={0x73, 0x3, "5ce569285d0c3071c0fad19a6ec21dd8a0bcb1856f10f802a85f0d1671a9788bb173051b94c345409ba423ff4d4f7e7f458d11c8fa6ad85a1bbefc2f514ae6f456f1dd06d9bd4c019df94857dfc4cfeb3db58b7bb0f9e23bf4fe261e825000a90157664bb577ed48d0968bf38181705ceb"}}, {0x8e, &(0x7f0000005240)=@string={0x8e, 0x3, "8a515323cb2a5354e53bb8f612ebfd106eeeb14e3bfde55774ca5e58d1c868eb27ae28da12392e9f4e8e829e8e78af80fd9015daf54e6bbb1c4e15be18a3887557f5bf5bfec4cc92245a5a0b5d1bbd844523e904226521a3c930fcf2fc0d7ac7e2e1d8c48a818939020b932332a5be0917429f366e583a48e15e1705eadf4842ada1d896c8aafd52dfa050f0"}}, {0x24, &(0x7f0000005300)=@string={0x24, 0x3, "48248f82dbcf8dc2d01f4c53884965402d2e182567bb3bdf1fabcf4f804456dc9007"}}]})
syz_usb_disconnect(r5)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000053c0), 0x0, 0x0)
getpeername(r6, &(0x7f0000005400)=@un=@abs, &(0x7f0000005480)=0x80)
syz_usb_connect$uac2(0x1, 0xc7, &(0x7f00000054c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x3061, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x8a, 0x0, 0x2, {0x8, 0xb, 0x0, 0x0, 0x1, 0x6, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3bf, 0x6, 0x45, 0x4}, [@effect_unit={0xb, 0x24, 0x7, 0x1, 0x4, 0x1, [0x3, 0x3]}, @source_unit={0x8, 0x24, 0xa, 0x8, 0x4, 0x7, 0x97, 0x3}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x40, "d2d4934cbcb7"}, @source_unit={0x8, 0x24, 0xa, 0xf, 0x2, 0x1, 0x0, 0x4}, @processing_unit={0xf, 0x24, 0x8, 0x3, 0x2, [0x1, 0x3, 0x3, 0x2, 0x1]}, @processing_unit={0x7, 0x24, 0x8, 0x1, 0x5, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x70, 0x4, 0xff, 0x0, "d4383c2a209f8dc3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0xfd, 0xc3, {0x8, 0x25, 0x1, 0x80, 0xf, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1ef, 0x4, 0x2, 0xc, {0x8, 0x25, 0x1, 0x1, 0xf, 0x0, 0x400}}}}}}}}]}}, &(0x7f0000005780)={0xa, &(0x7f00000055c0)={0xa, 0x6, 0x200, 0x40, 0x8, 0xe, 0xff, 0x89}, 0x41, &(0x7f0000005600)={0x5, 0xf, 0x41, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "955d959adf2af22bdb2513ab0dd6f28d"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "6e10865081c3562531629dbb5cbb15a8"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b0c8bcbeeb1bfd24c5beb8666d693cda"}]}, 0x1, [{0xfa, &(0x7f0000005680)=@string={0xfa, 0x3, "0d0f1332e72d6aef5b9c1f3b66038b822718dc7b10ddad65031c19553ac27be3987227fad0a8d94573bd4d00fbc903c7e56db488526fd0a83f4e978b3b0aebcc688f4e32eb161fd0e68c3c75b2cd957653297499ef28708ec2861dce63902075c84ba1d70854b5cfc288d6161a68d8c9796c6e16ab60d5cc737a53b777e5758125b6016d59f4c447bbee880331464300f79295fda0ed827d7782eaea9a04ea922e3e9485aeb2617f10a3cf246c7ecfee0f6a86729160643829ded13d249e08689ec743611c73932b8dbc006d6ce2090e6d13267269974a8c743691b45bc53606a78144742c1e8683fad6ce62f950af2a9186cfd59470e883"}}]})
move_mount(r6, &(0x7f00000057c0)='./file0\x00', r6, &(0x7f0000005800)='./file0\x00', 0x12)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000005840)=r3)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000005880)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000005980)=0xe8)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000059c0)={r3, r7, r2}, 0xc)
r9 = open_tree(r0, &(0x7f0000005a00)='./file0\x00', 0x1)
write(r8, &(0x7f0000005a40)="43d3d5bcb570a35f2fcd597e7f89705cd0de086cbe84b5d902cc1def5b100e567509f9debb7fe9b07ff7125a319cd6fe960df077129622e12b73dccad768ab20a813012b007baface94b515aacd7a79a4ef28c34b3ccf21f08c6cf8ee9fb6c31554fd016f461246eadb28b270b6294dfcbc4c39d56112b", 0x77)
linkat(r6, &(0x7f0000005ac0)='./file0\x00', r0, &(0x7f0000005b00)='./file0\x00', 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000005c00)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005bc0)={&(0x7f0000005b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040051)
epoll_create(0x401)
ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000005c40)=0x1000000)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000005cc0), r6)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000005d80)={&(0x7f0000005c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005d40)={&(0x7f0000005d00)={0x40, r10, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x40)
syz_mount_image$fuse(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x4000, &(0x7f0000005e40)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1000}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, 'vmac64(xeta)\x00'}}, {@fowner_lt={'fowner<', r7}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise_type}]}}, 0x0, 0x0, &(0x7f0000005f80)="f770435db6bc14e88f87f063966e0cc0700920a0023d3322764ca8a8885521e38c1d096b77aae90326ba40ebd97b37e5c08acf0134c4a74cc43c")

5.701579499s ago: executing program 4 (id=515):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101})
r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r2 = dup(r1)
write$binfmt_elf64(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46060478a3060000000000000002003e00cd000000b8010000000000004000000000000000ec02002300000000000001000500380001000600b106040403000000ff0000000900000000000000f50f000000000000ff030000000000009b"], 0x78)
r3 = fanotify_init(0x200, 0x1000)
fanotify_mark(r3, 0x1, 0x48001021, r2, 0x0)
execveat(r2, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000)
r4 = socket(0x10, 0x80002, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0xe, 0xb}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}}, 0x86)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)

5.467754672s ago: executing program 4 (id=516):
r0 = socket$inet6(0xa, 0x1, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x50b0a0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x41)
write(r5, &(0x7f0000000200)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x810)
write(r6, &(0x7f0000000280)='0', 0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
pselect6(0x40, &(0x7f0000003800)={0x3, 0x6, 0x8, 0x1, 0x4, 0x1, 0x5, 0x7}, 0x0, &(0x7f0000003880)={0x9, 0x3, 0xfffffffffffffffe, 0x8, 0xfffffffffffffc00, 0x8000000000000000, 0x0, 0x5}, &(0x7f00000038c0)={0x0, 0x989680}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'})
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00')
read$FUSE(r7, &(0x7f0000003900)={0x2020}, 0x2020)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1, 0x63}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)

4.855295688s ago: executing program 1 (id=517):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002b80)=@generic={&(0x7f0000002b40)='./file0\x00'}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002bc0)={&(0x7f0000000140)="8b2c25d061bce763f9f55dd1c635f3ba04a703bf2ba7e6bd6620e238c96e35db3a4335ee963e6ebc351fa4810d070aacdc9f061b4b1e58246715a58bc00bf992f1d94d69adc99030a60b78e4143ac7898c98482e0799509f81adcd591bd4a618b716a07f08c32a9b12a06aa1f7b2f6621b93047a35927121cb42233aba8a3d9bb50e254a8a", &(0x7f00000002c0)=""/116, &(0x7f0000001b00)="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", &(0x7f0000002b00)="a077719d0347561205fa4bb6fbe1811873c8ee147078a1481c8404ed79068e295413", 0x0, r1}, 0x38)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0xffffffffffffff4a)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa", 0xd9}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}], 0x2}}], 0x1, 0x4000000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa000905840240"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002c00)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES64=r2, @ANYRES16=0x0], 0xcd0}, 0x1, 0x0, 0x0, 0x4047}, 0x2000c800)
close(0x3)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000010000100000000000000000000000000801c9c0149b08a3270c26897a483ec3f23fe3f6a99dde87261c029154c2ab9ef4ee9f4850bf1a5e8089ca603dd9b5a900f4731e21d540721d9f3fde0bd51035c05c56f514463596ab7e16da147b1", @ANYRES32=r5, @ANYBLOB="00000000000000002c001a80080002800400208018000a8014000700fc0100000000000000000000000000000800028004000180"], 0x4c}}, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"})
r6 = syz_open_pts(r3, 0x0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x6)
ioctl$TCFLSH(r6, 0x540b, 0x2)
syz_emit_ethernet(0x16, &(0x7f0000000340)={@link_local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0xff, 'o', "e8309b", 0xf3fb}}}}}, 0x0)
r7 = syz_open_dev$sndpcmc(0x0, 0x3, 0x100)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
sendmmsg$inet(r0, 0x0, 0x0, 0x4000900)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x22, 0x8000, 0x1}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000480), &(0x7f0000000180)='%+9llu \x00', 0x2}, 0x20)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000500)={0x10000000})
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.785418549s ago: executing program 3 (id=518):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01010000000000000000010000000900030073797a310000000009000100737914000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a0000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00')
write$tcp_mem(r1, &(0x7f0000000000)={0xfffffffffffffffc, 0x20, 0x50ad7a, 0x20, 0xc0}, 0x48)
r2 = syz_io_uring_setup(0x4f06, &(0x7f0000000180)={0x0, 0x595f, 0x10, 0x0, 0x8}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000003c0)=@IORING_OP_FSETXATTR={0x29, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}})
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r7 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil)
r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000757000/0x3000)=nil, &(0x7f0000087000/0x2000)=nil, 0x3000, 0x2})
shmctl$IPC_SET(r7, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0xee00, 0x0, 0xee00, 0x80, 0x40}, 0x5, 0x0, 0x400000000000000, 0xf75c, 0x0, 0x0, 0x7})
creat(&(0x7f0000000000)='./file0\x00', 0x80)
unshare(0x40000)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01010000000000000000010000000900030073797a310000000009000100737914000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a0000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00') (async)
write$tcp_mem(r1, &(0x7f0000000000)={0xfffffffffffffffc, 0x20, 0x50ad7a, 0x20, 0xc0}, 0x48) (async)
syz_io_uring_setup(0x4f06, &(0x7f0000000180)={0x0, 0x595f, 0x10, 0x0, 0x8}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f00000000c0)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000003c0)=@IORING_OP_FSETXATTR={0x29, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}) (async)
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) (async)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async)
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000757000/0x3000)=nil, &(0x7f0000087000/0x2000)=nil, 0x3000, 0x2}) (async)
shmctl$IPC_SET(r7, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0xee00, 0x0, 0xee00, 0x80, 0x40}, 0x5, 0x0, 0x400000000000000, 0xf75c, 0x0, 0x0, 0x7}) (async)
creat(&(0x7f0000000000)='./file0\x00', 0x80) (async)
unshare(0x40000) (async)

3.561695866s ago: executing program 2 (id=519):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r2, &(0x7f00000031c0)={0x2020, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_STATX(r2, &(0x7f00000002c0)={0x130, 0x0, r3, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0x80000000, 0xf, 0x0, 0xffffffffffffffff, r4, 0xa000, '\x00', 0x3, 0x8004, 0xd60b, 0x8000000000000001, {0x200b, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x40c, 0x9}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat2(r5, &(0x7f0000000380)='./cgroup\x00', r5, &(0x7f00000003c0)='./mnt\x00', 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x694, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0x6}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x664, 0x2, [@TCA_FLOW_POLICE={0x494, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x2, 0x3, 0xb, 0x3643, 0x2, 0x8, 0x5, 0x101, 0x400, 0x101, 0xfffffff8, 0x4, 0xd1c0, 0x7, 0x10, 0x1, 0x7, 0x8, 0x8, 0x10000, 0x7f3, 0x2, 0x1, 0x200, 0x40, 0x1, 0x5, 0x1, 0x5, 0x2, 0x7, 0x5, 0x1053, 0x7f, 0x6, 0x1be8, 0xd45b, 0x4, 0x6, 0xa, 0x4, 0x7, 0xb03, 0x6, 0x7, 0x9, 0x8, 0x1, 0x7fffffff, 0xffff, 0xcbd, 0xffffffff, 0x3, 0x12, 0x0, 0x8, 0x15, 0x400, 0xfffffffe, 0x3, 0xa, 0x9, 0x91, 0x419, 0x4, 0xc7, 0x0, 0x8, 0x4, 0xfff, 0x10001, 0x0, 0xfd, 0x2, 0x7, 0x40, 0xff, 0x4, 0x8, 0x3, 0xa, 0x3, 0x1, 0x6, 0x0, 0x2, 0x6, 0x6, 0xfffffffb, 0xc5fe, 0x1, 0x0, 0x9, 0x8, 0x8, 0x0, 0x40, 0xbb, 0x5, 0xfffffff8, 0xc, 0xffff, 0x10, 0x9970, 0x5, 0x8000, 0x2, 0x7, 0x1, 0x80, 0x6, 0x4d, 0x800, 0x4, 0xdcd4, 0x9, 0x7, 0x7, 0x8, 0xaa, 0x8364, 0x2, 0x3, 0x9, 0x3, 0x2, 0xeec, 0x0, 0x9, 0x4, 0x9, 0x2, 0xfffff318, 0xa65, 0x81, 0x6, 0x8001, 0x1, 0x7f, 0x942, 0x296e, 0x7f, 0x8, 0x9, 0x3, 0x800, 0x9, 0x100, 0x5, 0x5, 0x1, 0xb0, 0xbee, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0xffffffff, 0x9, 0x3, 0xa3, 0x3, 0x4, 0xf, 0x2, 0x4, 0x4, 0x0, 0x1, 0x401, 0x2f4, 0xa8, 0x8, 0x1ff, 0x87, 0x3, 0x28, 0xd, 0x3, 0x8, 0x4eb3, 0xffff, 0x9, 0x1, 0x8000, 0xcf1, 0x3, 0x0, 0x7, 0x7fff, 0x100, 0xab4, 0x4, 0x5, 0x4, 0x3, 0x73, 0x7f, 0x2, 0x4, 0x246, 0x2, 0x81, 0x451b, 0xfffffff9, 0x80, 0x7, 0x5, 0xa78, 0x10, 0x74, 0x2, 0x2, 0xb5d7, 0x4, 0x7, 0x9, 0x1, 0x2, 0x3, 0x80000001, 0x6, 0x8, 0x1, 0x7, 0x7, 0xffff, 0xfffffff9, 0xc78e, 0xaf1, 0xd, 0x9, 0xfffffff9, 0x3, 0x800, 0x8, 0x1, 0x7fffffff, 0x2, 0x9, 0x9, 0x3, 0x2, 0x3, 0x3, 0x0, 0x7fff, 0x400, 0x92, 0x7, 0x3, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x6, 0x3, 0x5, {0x7, 0x1, 0x8, 0x7, 0x6, 0x1d}, {0x8, 0x0, 0x3, 0x1, 0x1400, 0x8}, 0x6, 0x5, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x7}}, @TCA_FLOW_EMATCHES={0x1bc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x100, 0x1, 0x1}, {0x1eae, 0x2, 0x58fb, 0x4, 0x0, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x7c, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x400}, "325248d6f10b3b260c183489a0744434fe3e5163db09545dbefbdbc52b3c564e23a439481b7ae81b6ab82bfcb570cac168e17ceb31c268e1fdf2317f460af0743c4db3800c3ddca554b7bb388b4645ef402dff9e64a14556167d4c0d62795ecb29bb495b6cbd90ac0eedfb247e901e"}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2}, {0x7, 0x2, 0x2, "ba18"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xffc0, 0x2, 0x3}, {0x3, 0x3, 0x2, "c6db2f"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6}, {0x8, 0x8a6, 0x1, 0x1, 0xd, 0x0, 0x1}}}, @TCF_EM_META={0x30, 0x3, 0x0, 0x0, {{0xe303, 0x4, 0xff00}, [@TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="0ec01849261f67", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="f6a383ba", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x7487}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x7, 0x1}, {0x7, 0xef, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x1f, 0x2}, {0x80, 0x0, 0x2}}}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="25483c92", @TCF_META_TYPE_VAR="7b69ad261d0e941f", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9e6648df", @TCF_META_TYPE_VAR]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfff7, 0x3, 0x8}, {0x5, 0x0, 0x4, 0x29}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x1f}, {0x1, 0x2, 0x4}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xf, 0x2, 0x9}, {0x3ff, 0x0, 0x3}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x5, 0x9, 0xff7f}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xb}}]}}]}, 0x694}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000203000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0xaaaaaaaaaaaabbd, 0xc2ff, 0x0, 0x0, 0x0, 0x76})

3.199592887s ago: executing program 4 (id=520):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in6=@private0, 0x3500, 0x4}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e21, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0xfd, 0x2, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x700, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.109172402s ago: executing program 1 (id=521):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x60, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0x11, 0x8, "0c5bfbd8c79b3161"}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x81, 0x2, "07bb"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
unshare(0x8040480)
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0xc, 0x7ffffffb}]})
close_range(r3, 0xffffffffffffffff, 0x2)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x800}, {0x200, 0x1e7, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9}, {0x2, 0x3, 0x6}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048084}, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', r11, 0x29, 0x4, 0x3, 0xcbf, 0x4e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, 0x20, 0x8, 0x101, 0x7}})

1.625545103s ago: executing program 2 (id=522):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x4000000000000008, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x1, 0xf, {0x1, 0x8, 0x800006, 0x20007}}) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket(0x2, 0x80805, 0x0)
close(0x3) (async)
r3 = socket(0x2, 0x80805, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r7}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x10010}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x23fbd668, @remote, 0x7}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}], 0x31) (async)
r8 = fsopen(&(0x7f0000000640)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9H\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7', 0x0) (async)
r9 = socket(0x26, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0}) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))

1.624515287s ago: executing program 4 (id=523):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async)
r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x61, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x12)
ppoll(&(0x7f0000000300)=[{r2, 0x318}], 0x1, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r1) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff007a2233445566778899ccddeeff00", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
keyctl$unlink(0x9, r0, r1) (async)
keyctl$unlink(0x9, r0, r1)

1.623417918s ago: executing program 0 (id=524):
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000))
r0 = getpgrp(0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000240)="2078579db26a4cb25649c9ae0ae41041d80b00000022fa6cbe2b80e485612f79b317a5d2c03fef97afa35d3fe13270d94c570201a2526cfc934574b4a2484acf4e2f960c49d0823f2506c503ba30ff1748570fa7f22bfd6615f4ea")
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0))
r4 = syz_pidfd_open(r0, 0x0)
setns(r4, 0x34020000)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10010, r4, 0xeadc3000)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r6, 0x2)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x3ff, 0x4)
r7 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000000c0)='workdir', 0x0, r8)
mkdirat(r8, &(0x7f0000000200)='./file0\x00', 0x108)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',noot'])

1.622001949s ago: executing program 0 (id=525):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0xd0, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa4, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "e543f52d50e55543b330d7b0229eece3ba363d8a3ed932e37fd0fb3963d7e770415f09d0fabfbd7bd021bd0c2ce307d5627b1bbceb7271b4c0c237a3502139b9372bbf9733b243d5837a77ca948be8dcbba8f09f3d990a92cffd45467cfa"}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000805}, 0x400c0)

1.619351074s ago: executing program 4 (id=526):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)

1.618094789s ago: executing program 4 (id=527):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xb30, 0x539, 0xf, 0x7, 0xf, 0x40, 0x2, 0xfff, 0x7fff, 0x4, 0x5, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
socketpair(0x22, 0x5, 0x27d, &(0x7f0000000000))
mmap(&(0x7f00009d5000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0xf109d000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

1.61585031s ago: executing program 0 (id=528):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4)
close(0x3)
recvmmsg(r0, 0x0, 0x0, 0x40010100, 0x0)

1.615496729s ago: executing program 0 (id=529):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x6}}, 0x1c}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="0f2855150f356436640f01c966b9630200000f3236f36cba420066ed2e0f01c2440f20c066350b000000440f22c0f2ad0f75f3", 0x33}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x40})
syz_open_dev$usbmon(&(0x7f00000002c0), 0x4, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x7f, 0x8, 0xc, 0xffffffff}]})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000440)={0x53, 0xf1a3, 0x1, 'queue1\x00', 0x1})
r7 = msgget$private(0x0, 0x3ac)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2)
msgsnd(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000a960da855eeefceb3cf4772f3140"], 0x8, 0x0)
msgctl$IPC_SET(r7, 0x1, &(0x7f0000000600)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x132, 0xfffc}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x0, 0x3, 0x1, 0x0, 0xe})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

1.613322797s ago: executing program 3 (id=530):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x34, 0x29, 0x300, 0x80000001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0x6}, {0xffe0, 0xffe0}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x34}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x8000})
r4 = fcntl$dupfd(r3, 0x0, r1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180))
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x5, 0x72, 0x0, 0x80000001}]})
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700feff"], 0x74}}, 0x24005000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r8 = dup(r7)
write$binfmt_elf32(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x58)
fanotify_init(0x200, 0x0)
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r9, &(0x7f0000000380)=ANY=[], 0x4000)
fanotify_mark(r8, 0x40, 0x8001030, r4, 0x0)
execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x8880)
r12 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x20000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x2, 0x3, 0xff, 0x308, r8, 0xfffeffff, '\x00', r11, r12, 0x2, 0x1, 0x7}, 0x50)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.610942472s ago: executing program 2 (id=531):
syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32d0, 0x1, @qpsk={0x6, 0x17}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7)
r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x440401)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r4, 0xc0386447, &(0x7f0000000180)={{0x8, 0x7, &(0x7f0000000140)=[{0x9, 0x0, 0x4}, {0x8, 0x0, 0x13}, {0x8, 0x0, 0x8}, {0x2, 0x0, 0x63a}, {0x5, 0x0, 0x84}, {0x2, 0x0, 0xf2}, {0x2, 0x0, 0x9}]}, 0x3, 0x8, 0x1, 0x0, 0x0, 0x8000, 0x6, 0x11, 0x0, <r5=>0x0}) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0xe0, 0x7, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3c, 0xd, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x5, 0x10}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x1, 0xff, 0x5, 0xff, 0x7}, 0x23, &(0x7f00000003c0)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0xa, 0xb8}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x5, 0xff0f, 0x32, [0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xf, 0x8, 0x101}]}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "688132218c8ae33b21f84868452e9e2f1cf636fe0bec8bd138e701d210d6f98f6506cb81032c8f2592b372ac6ff07af649e0a3ba0b82f36af3c40b14ad9c952136297a30cf2f2a050590b41a6d4c1173e79341d253c9c838467f021133fdded64b9ad17e56d32e59"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x140c}}, {0xd6, &(0x7f0000000540)=ANY=[@ANYBLOB="d6037c18d22607eb2caa138ff776c9eee012c71c24083934919a26d47d0a75e4096496749211c85c6688150b2318f6b2c6e0bc1e7af32424bfe92c3005b85511574d86314246103a07e880a5a00b0be148bd57fee0dd46c61585b8b797ab8f79e1c979d421671adfdaeefbc7f9ffae739f449a7c338c5048f535d2eda8ab00c2a086cc655873fe4070393617df39acf2e62e1cae14e644bcd7d425b98889015d64a76f8120c18b6f2aec6732913cf88210cad69349b7bb1f32e4e75a1a74a832c3b1015010ecbdfc38b27b5373a1ac94524cb7bcca5c"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x300a}}, {0xca, &(0x7f0000000a40)=ANY=[@ANYBLOB="ca034d1d1574a258827253e39b82a3c0205bb600b38a515456b06a48ef72eb89824136edae438b55b4503593a2d662575fb0ebcb4bd87d9f44d20e34eb158004c13c9614e7d9919cc890056eb3f0f3861293a40014159ba61b37987d376b09489981ae0be0c9c8bff840c8679d989195a49bdc0f94d0e0b8acd657415a97b79527a1255fca8b23f2f974c90df659b22e2f6ebdcdac154bc16ff071f163f7ed6318513dd7506b9c4f182de28be8af5832c8db32a8119ddc30900e4fe2ffd0deff715f18af9fccf0ae8e083f"]}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x436}}]}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1}) (async)
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r8, 0x0, 0xfffffffffffffffc, 0x1000}) (async)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3e}, &(0x7f0000000780)=0x40) (async)
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(0xffffffffffffffff, 0xc0086448, &(0x7f00000001c0)={r5}) (async)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.610775889s ago: executing program 3 (id=532):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x7)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
r2 = eventfd(0x4)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3cb100, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x2, @pix_mp={0x54f0, 0xfffffffa, 0x33524742, 0x8, 0x7, [{0x66cf, 0x8}, {0x3, 0xbf}, {0x9, 0x7}, {0x1, 0x1}, {0x8001, 0x1}, {0x0, 0xb}, {0xfffffffd, 0x4}, {0x4, 0x1}], 0xf, 0xfb, 0x0, 0x1, 0x7}})

1.299304055s ago: executing program 3 (id=533):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4003, &(0x7f00000003c0)=0x6, 0x6, 0x1)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x7, 0x3)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x3a7, 0x0, 0x6}]})
dup3(0xffffffffffffffff, r1, 0x80000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xf6c25000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x8, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x8, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x3, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0x2c}, {0x7, 0xe1, 0x7, '\x00', 0xc6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x5, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x3, 0x3, 0x4}]}})

1.296782082s ago: executing program 0 (id=534):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in6=@private0, 0x3500, 0x4}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e21, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0xfd, 0x2, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x2e00, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.248552664s ago: executing program 0 (id=535):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102cb460e400a1a01be67fa77012e01010203010902120001fe4e80c70900cd0900ff010105"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000540)={0x5, 0xd8, &(0x7f0000000440)="7c834090985600456de8a3c5c00a1c9a037f573d15b333cc925cc28b7a07dd80d52aa8655dc6378ac7515303019fcc65b43158d6203193d0a63ce0c1fbca7ecf197f54d0b7afc43dd88648e53aa22c3797ad94baab50f8e0c2f250657260ab5780e05fefbd4b84b14e0f15b8ae071f4e7a4bfe492f43b847705a4ead52659f6dce5862e8c88ce7eb305f31b29e1d72d03dc288811c4f866d971b141f0a116001c9abb44ee0529f3835d32c0d8e56696a61154768ad448fcaa56fb59346ae446aee6db0828ad1dd3ce81d731811efea46a81d34d88bca6a8a"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000040040000000000030000006000018044000400200003000a004e200000000600000000000000000000000000000000ff070000200002000a00462400000001fe8000000000000000000000000000aa06000000160001006574683a76657468315f746f5f626f6e64000000"], 0x74}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101901, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2f)
syz_usb_connect$uac2(0x0, 0x9c, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x8, 0x10, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x5, 0x10, 0x6}, [@multiply_unit={0x7, 0x24, 0xc, 0x2, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x25, 0x5, {0x8, 0x25, 0x1, 0x82, 0xc, 0x8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x8, 0x7, 0x9, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x6, 0x1, "aa00", '\r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x44, 0x10, 0x1, {0x8, 0x25, 0x1, 0x1, 0x3c, 0xd, 0x40}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x7f, 0x2, 0x3, 0xff, 0xfb}, 0xc, &(0x7f00000003c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x6, 0x1ff}]}, 0x5, [{0x9e, &(0x7f0000000600)=@string={0x9e, 0x3, "a90c14ffbe32c27860590226b9023db777c54655ad0522d0fa6488cf364f28218052e341282237f937a6e294db74a5eccf65124c740ce0da105bd6403f9718529a2d03a38bc2714825c9f2e35c7b706ab11ea7843143201a7627024623d5d42c28133f026efc4d39b233be8f408026cbf726288aeffb334fc771b2aac81dcfbe344db2c9d01897851fb817408b8f888ae34a3ab3ead7f41f3035cfc5"}}, {0x38, &(0x7f00000006c0)=@string={0x38, 0x3, "28b5abc73b20a55dbd1df1fc603609b4088ef02436c93d0a633a635c856909b607f2d3cbc3e74a8ca3dad856a0744c44cea9583ba688"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3801}}, {0x9, &(0x7f0000000740)=@string={0x9, 0x3, "17c4ce7a1f24aa"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1801}}]})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0xff0f0000, 0x0, @msi={0xcf, 0x40, 0xfffffffd, 0x20001}}]})
r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x0)
syz_open_dev$video4linux(&(0x7f0000000140), 0x4, 0x404001)
move_mount(r5, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100)

1.059307557s ago: executing program 3 (id=536):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, 0x8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)

932.014895ms ago: executing program 3 (id=537):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
semop(0x0, &(0x7f0000000280)=[{0x4, 0x96e0, 0x1800}, {0x4, 0xf08}, {0x3, 0x80, 0x400}, {0x0, 0x1fc, 0x1800}, {0x3, 0x7}, {0x4, 0x4, 0x1000}, {0x1, 0x1ea, 0x800}, {0x4, 0xb}, {0x0, 0x0, 0x1000}], 0x9) (async)
semop(0x0, &(0x7f0000000280)=[{0x4, 0x96e0, 0x1800}, {0x4, 0xf08}, {0x3, 0x80, 0x400}, {0x0, 0x1fc, 0x1800}, {0x3, 0x7}, {0x4, 0x4, 0x1000}, {0x1, 0x1ea, 0x800}, {0x4, 0xb}, {0x0, 0x0, 0x1000}], 0x9)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa)
pipe(&(0x7f0000000200)) (async)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r4})
splice(r3, 0x0, r2, 0x0, 0x4001000, 0x800000000000000)
r5 = inotify_init1(0x80000)
inotify_add_watch(r5, &(0x7f0000000140)='./bus\x00', 0x400002a2) (async)
r6 = inotify_add_watch(r5, &(0x7f0000000140)='./bus\x00', 0x400002a2)
splice(r0, 0x0, r4, 0x0, 0x80, 0x8)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRES16=r6, @ANYRES16=r1, @ANYRES16=r0, @ANYRES8=0x0], 0x107c)
capset(&(0x7f0000000040)={0x20080522}, 0x0) (async)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x280001, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x280001, 0x0)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x401) (async)
r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x401)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407})
read$midi(r7, 0x0, 0x3b)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2df)
ioctl$SNDCTL_SEQ_RESET(r8, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r8, 0x5100)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0)
r9 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xfffffffffffffffe, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r9, 0x40026f34, &(0x7f0000000040)=0x1)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r9, 0x40026f34, &(0x7f0000000000)=0x9)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c0040904"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c0040904"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r10, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) (async)
fcntl$lock(r10, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000})
fcntl$lock(r5, 0x6, 0x0)
fcntl$lock(r10, 0x7, 0x0)

803.853828ms ago: executing program 2 (id=538):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)

669.963675ms ago: executing program 2 (id=539):
syz_emit_ethernet(0x6e, &(0x7f0000003400)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x38, 0x0, 0x0, @private2, @mcast2, {[@dstopts={0x32, 0x5, '\x00', [@generic={0x9, 0x21, "56dcb1149a7773c0ec53f350544e6dcae31786786bcf3619b142bae3c206e32481"}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}]}]}}}}}, 0x0)
memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
inotify_init()
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f00000020c0)=0x6e, 0x40800)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={<r8=>0x0}, &(0x7f00000006c0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000740)=0xc)
syz_usb_connect$midi(0x2, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000004030144b4740000102030109024b00010107400109040000020103200509050403000404090c14251f"], &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0})
openat$userio(0xffffffffffffff9c, &(0x7f0000004200), 0x240, 0x0)
mmap(&(0x7f000033e000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r5, 0x4b3e8000)
getresuid(&(0x7f0000004240), &(0x7f00000083c0)=<r10=>0x0, &(0x7f0000008400))
statx(0xffffffffffffffff, &(0x7f0000008440)='./file0\x00', 0x6000, 0x8, &(0x7f0000008480)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000008580), 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000085c0)=<r13=>0x0)
stat(&(0x7f0000008600)='./file0\x00', &(0x7f0000008640)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmmsg$unix(r6, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="2959843730df2c9d0da9a8349a1a219ee6aee7eb", 0x14}, {&(0x7f0000000440)="768270068a2570771572cb1ab19893538c5ecdf096bd905ecdc2f0df4777c86c7cfaab1abf6af9df94cec6c8a9ae7d7aa3fd5e5cb35c21e1a2f71f6cb5d56d73f1383f4ca1774bfbeebcca9e7148d0cb4874c851dde1ca00573e55baae20907faf84f34585d586bd73583c4e1ac42cb2cd74dd7986dec33a5f0a7a82d543502fd21d", 0x82}, {&(0x7f0000000500)="e2e0b4a9b5f0a3cff770a0d5e34c48080231cecc8da51c8af77137d4b385f5cf74a99862bbad08a2014a8e1c1430b8378a0ab1ef94b05caa4499e9815ea57a1a181af6ce9e07952082e4e217b55234f89e6ef53bcd8ef2f357ae3de691e17650090cdb97405bccb0325f677cabb29ae0fb137df9500045fe74b33dc5f58f55635bcc8596cc2341ff40cfd5ab020256ee75353b942f0c33e132eba1f7d0c689e83d97e2ccb70b919e690e36f1d2311dbb55a71ddc669919ef756dda78924825ccdcf2d8c9f72cb7b62c12db91ab0542c506cbf81cf8b5617a25a612a93ba743fc28045534f6ff57425b0db4e60beeab24bb11c2be39f907d01b277c", 0xfb}, {&(0x7f0000000600)="710e80d4b7ad0c6ede62c174ee51a28189f3b6ff805afa33e0f983e8ebca23808dc740d302eb", 0x26}], 0x4, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [r5, r7, r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, r9}}}], 0x40, 0x20000040}}, {{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000000840)="50e418da7c2e219d257ab01e1e567513643ad571806ef510d9340d2f8a3829a763a3a7a047f8f1f28d73bee9c1ca03af372b3956b4ed97c58fd486e52551837ef16ca8c9ed3ae647623528d6533977a891d04a5a6ad176619dcaf81b127a8321c7e33fed7bd887b1e3c9ff3aa3954b98352ab33d1b3ec337aa4df5ceb205e09ad264d35bf5c745133e771faed7086000", 0x90}, {&(0x7f0000000900)="0350df8887e3a7854abe25db223a8292ef22cbd71ac1444bd6b2ac2e9e43f8d4eea4bb4bf86c7cb0c5cc5db41c016158c8981257a6914b97ce005721b5ffa982d98f8e6d94f1c2528859d825dc89ab5683be15c1b71903f39c138017fe7313a22d473a3bf4299b85e372c194b49b54300b6ab20cc31e36a55251384279862058c272dfe9cfa5c87bfbad3b6ba5cc9bc5e0227002a56c8479a6190b96cf227ebcc2971597f8", 0xa5}, {0x0}, {&(0x7f0000001f00)="a58c92a6611e78152ef416c0b4acc92e913002d6c0e480181b2735bdfe7376f3d42e7c3daafc0ad294bfea991f88cb0c3f657d0d0a976f26223b6590a1e86655d115ecfaa75994c3134da38495a4f55fc350e298881d5f7ac705387d2647b923066736793c0855c829a32c9185022a367b46099cc8c7bce57df42ebd", 0x7c}, {&(0x7f0000001f80)="e3fe62b80e32b9a34ef8f9e78c958024a437eba598abd515a25a408b2206f20471132c2003c9ba045cbca531e66bbca5aba739c4c390016adaf2e0e749582cf56eba87de5fffcc1d32fa1272255108923b287ba866861913260e57cc50fea051eb626e63053c5c5de7257f6712b40eaa8aae475fa7fc4df3a0531e23815d1646828bd70cd834716e954fe5ccd4bd6428cb65037acc38b6add9eaaa43a9c436a320408b4b751171b04fcbd6c255e4cb1a6e62f621389e4278598426cee7a908ddbef93cffa319b1ac0807491f66f296749e4080b5f9a23a1a5aa9a03c3fee", 0xde}], 0x5, &(0x7f00000086c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x28, 0x1, 0x1, [r5, r5, r5, r5, r5, r5]}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r5, r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r12, r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee01, r14}}}], 0xc8, 0x40010}}], 0x2, 0x4040)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r15=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r15, {0x7, 0x29, 0x9, 0xffffffff900ce5c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

243.553488ms ago: executing program 1 (id=540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0xd0, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa4, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "e543f52d50e55543b330d7b0229eece3ba363d8a3ed932e37fd0fb3963d7e770415f09d0fabfbd7bd021bd0c2ce307d5627b1bbceb7271b4c0c237a3502139b9372bbf9733b243d5837a77ca948be8dcbba8f09f3d990a92cffd45467cfa"}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000805}, 0x400c0)

172.203667ms ago: executing program 1 (id=541):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4)
close(0x3)
recvmmsg(r0, 0x0, 0x0, 0x40010100, 0x0)

0s ago: executing program 1 (id=542):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180))
pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x3)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0)

kernel console output (not intermixed with test programs):

lantronics 0003:047F:FFFF.0006: reserved main item tag 0xd
[  411.711501][ T5649] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  411.836860][    T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  411.872655][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.879722][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.883059][ T5649] usb 4-1: USB disconnect, device number 28
[  411.975170][    T9] usb 1-1: device descriptor read/64, error -71
[  411.995582][ T7179] fido_id[7179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  412.084797][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.165832][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.215416][    T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  412.345342][    T9] usb 1-1: device descriptor read/64, error -71
[  412.457229][    T9] usb usb1-port1: attempt power cycle
[  412.795189][    T9] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  412.815046][ T7185] syz.2.268 (7185): drop_caches: 2
[  412.817177][    T9] usb 1-1: device descriptor read/8, error -71
[  412.857540][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'.
[  413.055364][    T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  413.076966][    T9] usb 1-1: device descriptor read/8, error -71
[  413.125092][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.185506][    T9] usb usb1-port1: unable to enumerate USB device
[  413.229131][ T7191] netlink: 'syz.3.270': attribute type 13 has an invalid length.
[  413.283547][ T7193] fuse: Bad value for 'fd'
[  413.528439][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.903092][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.952109][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  414.175722][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.361622][ T7208] fuse: Bad value for 'fd'
[  414.438923][ T1022] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.439001][ T1022] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.439123][ T1022] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.439253][ T1022] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.511611][ T7202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.272'.
[  414.544006][ T7214] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0
[  414.722660][ T7216] netlink: 72 bytes leftover after parsing attributes in process `syz.3.274'.
[  414.722717][ T7216] netlink: 72 bytes leftover after parsing attributes in process `syz.3.274'.
[  414.732267][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.806772][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  414.840157][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'.
[  414.967293][    T9] usb 1-1: Using ep0 maxpacket: 32
[  414.987510][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  414.987622][    T9] usb 1-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31
[  414.991559][    T9] usb 1-1: config 7 has an invalid interface number: 219 but max is 0
[  414.991624][    T9] usb 1-1: config 7 has no interface number 0
[  414.991704][    T9] usb 1-1: config 7 interface 219 has no altsetting 0
[  415.037781][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.037856][    T9] usb 1-1: Product: syz
[  415.037889][    T9] usb 1-1: Manufacturer: syz
[  415.037926][    T9] usb 1-1: SerialNumber: syz
[  415.138869][  T989] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  415.204760][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.216790][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.233248][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'.
[  415.279362][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.291361][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.299428][  T989] usb 4-1: Using ep0 maxpacket: 32
[  415.307478][  T989] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  415.325293][  T989] usb 4-1: config 0 has an invalid interface number: 208 but max is 0
[  415.325354][  T989] usb 4-1: config 0 has no interface number 0
[  415.325469][  T989] usb 4-1: config 0 interface 208 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  415.325572][  T989] usb 4-1: config 0 interface 208 has no altsetting 0
[  415.325668][  T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.371322][  T989] usb 4-1: config 0 descriptor??
[  415.395284][ T5649] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  415.417690][    T9] gspca_main: jeilinj-2.14.0 probing 0979:0270
[  415.499431][    T9] usb 1-1: USB disconnect, device number 26
[  415.549564][ T5649] usb 5-1: unable to get BOS descriptor or descriptor too short
[  415.559577][ T5649] usb 5-1: not running at top speed; connect to a high speed hub
[  415.559629][ T5649] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  415.585391][ T5649] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  415.585473][ T5649] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  415.617747][ T5649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.617794][ T5649] usb 5-1: Product: syz
[  415.617853][ T5649] usb 5-1: Manufacturer: syz
[  415.617873][ T5649] usb 5-1: SerialNumber: syz
[  415.643802][ T7216] loop4: detected capacity change from 0 to 7
[  415.661762][ T7216] Dev loop4: unable to read RDB block 7
[  415.661826][ T7216]  loop4: unable to read partition table
[  415.662114][ T7216] loop4: partition table beyond EOD, truncated
[  415.662185][ T7216] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  415.755690][  T989] usb 4-1: string descriptor 0 read error: -71
[  415.775763][  T989] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  415.782711][  T989] gspca_vc032x: reg_r err -71
[  415.788483][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788500][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788510][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788519][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788528][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788538][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788548][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788557][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788568][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788578][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788587][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788635][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788645][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788655][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788664][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788674][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788683][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788693][  T989] gspca_vc032x: I2c Bus Busy Wait 00
[  415.788727][  T989] gspca_vc032x: Unknown sensor...
[  415.788831][  T989] vc032x 4-1:0.208: probe with driver vc032x failed with error -22
[  415.927307][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.936603][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.952480][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.993540][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.007458][  T989] usb 4-1: USB disconnect, device number 29
[  416.017456][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.051751][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.092470][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.103114][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.120089][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.131409][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.231940][ T5649] usb 5-1: 3:0: failed to get current value for ch 0 (-71)
[  416.247379][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.271281][ T5649] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3)
[  416.271415][ T5649] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  416.271459][ T5649] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1
[  416.301323][ T5649] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3)
[  416.328561][ T5649] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3)
[  416.339151][ T5649] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3)
[  416.388349][ T5649] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3)
[  416.398926][ T5649] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3)
[  416.410048][ T5732] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  416.452231][ T5649] usb 5-1: USB disconnect, device number 26
[  416.504803][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  416.565454][ T5732] usb 1-1: Using ep0 maxpacket: 32
[  416.582727][ T5732] usb 1-1: unable to get BOS descriptor or descriptor too short
[  416.582797][ T5732] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[  416.591502][ T5732] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.591568][ T5732] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  416.610779][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.610853][ T5732] usb 1-1: Product: syz
[  416.610896][ T5732] usb 1-1: Manufacturer: syz
[  416.610937][ T5732] usb 1-1: SerialNumber: syz
[  416.668817][ T5732] usb 1-1: interface 1 not found
[  416.954187][ T5751] usb 1-1: USB disconnect, device number 27
[  417.286474][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.755395][ T7268] syz.3.283 (7268): drop_caches: 2
[  417.973603][ T7274] hub 8-0:1.0: USB hub found
[  417.979097][ T7274] hub 8-0:1.0: 1 port detected
[  418.035082][ T5713] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  418.128389][ T7276] syzkaller0: entered promiscuous mode
[  418.128440][ T7276] syzkaller0: entered allmulticast mode
[  418.158210][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'.
[  418.185815][ T7276] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  418.187961][ T7276] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  418.193091][ T5713] usb 5-1: Using ep0 maxpacket: 16
[  418.219814][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short
[  418.219898][ T5713] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  418.223086][ T5713] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  418.250565][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.266089][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.266142][ T5713] usb 5-1: Product: syz
[  418.266159][ T5713] usb 5-1: Manufacturer: syz
[  418.266194][ T5713] usb 5-1: SerialNumber: syz
[  418.338666][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.435706][ T7278] could not allocate digest TFM handle sha3-512-generic
[  418.537253][ T5713] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  418.559555][ T5713] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  418.739855][ T5713] usb 5-1: 2:1 : can't get High Capability descriptor
[  418.977027][ T5713] usb 5-1: USB disconnect, device number 27
[  419.366382][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.905113][ T5713] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  420.045163][ T5713] usb 5-1: device descriptor read/64, error -71
[  420.288540][ T5713] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  420.305102][ T5732] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  420.415703][ T5713] usb 5-1: device descriptor read/64, error -71
[  420.422302][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.458975][ T5732] usb 4-1: Using ep0 maxpacket: 32
[  420.472749][ T5732] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  420.497003][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.497071][ T5732] usb 4-1: Product: 㤽䥦㤡兹ꨏ䢲Ⲭ꯭昒嶜₀ፍ燆狪⭖妖䓉剚㊱쾋顀澴耊䤕찵⊅䕪뗚虄춏栘脉䣌⟂閘狸椓ﯗ㵝⌴椔掘阯
[  420.497097][ T5732] usb 4-1: Manufacturer: ࠌ
[  420.497144][ T5732] usb 4-1: SerialNumber: Џ
[  420.535710][ T5713] usb usb5-port1: attempt power cycle
[  420.769912][ T5732] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  420.875423][ T5713] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  420.897709][ T5713] usb 5-1: device descriptor read/8, error -71
[  421.115915][ T5732] usb 4-1: USB disconnect, device number 30
[  421.139008][ T5713] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  421.173255][ T5713] usb 5-1: device descriptor read/8, error -71
[  421.226448][ T5670] udevd[5670]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.277324][ T5713] usb usb5-port1: unable to enumerate USB device
[  421.286691][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.460693][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.494869][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.972209][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'.
[  423.307924][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'.
[  423.307970][ T7330] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.295'.
[  423.308006][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'.
[  423.527688][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.313123][ T7353] syz.3.301 (7353): drop_caches: 2
[  424.337057][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.346149][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.565348][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.115209][ T5713] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  425.265978][ T5713] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0194, bcdDevice= 3.12
[  425.277347][ T5713] usb 5-1: config 13 has an invalid interface number: 80 but max is 1
[  425.286417][ T5713] usb 5-1: config 13 has an invalid interface number: 102 but max is 1
[  425.295619][ T5713] usb 5-1: config 13 contains an unexpected descriptor of type 0x1, skipping
[  425.305185][ T5713] usb 5-1: config 13 contains an unexpected descriptor of type 0x2, skipping
[  425.314105][ T5713] usb 5-1: config 13 has no interface number 0
[  425.321019][ T5713] usb 5-1: config 13 has no interface number 1
[  425.328008][ T5713] usb 5-1: config 13 interface 80 altsetting 5 endpoint 0xD has an invalid bInterval 140, changing to 11
[  425.342238][ T5713] usb 5-1: config 13 interface 80 altsetting 5 endpoint 0xF has invalid maxpacket 72, setting to 64
[  425.353674][ T5713] usb 5-1: config 13 interface 80 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  425.365234][ T5713] usb 5-1: config 13 interface 102 altsetting 6 has a duplicate endpoint with address 0x2, skipping
[  425.376800][ T5713] usb 5-1: config 13 interface 102 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  425.388407][ T5713] usb 5-1: config 13 interface 80 has no altsetting 0
[  425.396181][ T5713] usb 5-1: config 13 interface 102 has no altsetting 0
[  425.406066][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.414321][ T5713] usb 5-1: Product: 淚쩵꘤濗唕ﵼ샰鐵巩㴫接煵밿艨모웛㣻権唳䉥愢求
[  425.425733][ T5713] usb 5-1: Manufacturer: ㏁好隲ⳋ셬轧駤堆륷홈⫪Ȋ弭嫢ϳ৪⒕⒉僕犞綝孝ဥ„䧿Ձ怋ᖇ嫶웙⪟疿棢갲쭖쌳迲ု浅횾泘ㅵ糐
[  425.425765][ T5713] usb 5-1: SerialNumber: ᰉ
[  425.615921][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.058891][  T989] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  426.215202][  T989] usb 4-1: Using ep0 maxpacket: 16
[  426.229985][  T989] usb 4-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[  426.251973][  T989] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  426.252063][  T989] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  426.252218][  T989] usb 4-1: config 0 interface 0 has no altsetting 0
[  426.252375][  T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.293051][  T989] usb 4-1: config 0 descriptor??
[  426.645417][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.156588][  T989] logitech-djreceiver 0003:046D:C51B.0007: ignoring exceeding usage max
[  427.173878][ T7341] syzkaller0: entered promiscuous mode
[  427.173956][ T7341] syzkaller0: entered allmulticast mode
[  427.197923][  T989] logitech-djreceiver 0003:046D:C51B.0007: hidraw0: USB HID v0.01 Device [HID 046d:c51b] on usb-dummy_hcd.3-1/input0
[  427.239807][ T7342] tipc: Started in network mode
[  427.239908][ T7342] tipc: Node identity 5acf5f2459c, cluster identity 4711
[  427.258946][ T7342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.312162][ T5713] ftdi_sio 5-1:13.80: FTDI USB Serial Device converter detected
[  427.329254][ T5713] ftdi_sio ttyUSB0: unknown device type: 0x312
[  427.367028][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.382956][ T5713] ftdi_sio 5-1:13.102: FTDI USB Serial Device converter detected
[  427.400522][ T5713] ftdi_sio ttyUSB1: unknown device type: 0x312
[  427.437547][ T5713] usb 5-1: USB disconnect, device number 32
[  427.456602][ T7351] tipc: Resetting bearer <eth:syzkaller0>
[  427.476772][ T5713] ftdi_sio 5-1:13.80: device disconnected
[  427.518410][ T7351] tipc: Disabling bearer <eth:syzkaller0>
[  427.541741][ T5713] ftdi_sio 5-1:13.102: device disconnected
[  427.615354][  T989] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  427.687053][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.768921][  T989] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  427.770526][  T989] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  427.794175][  T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.794273][  T989] usb 1-1: Product: syz
[  427.794345][  T989] usb 1-1: Manufacturer: syz
[  427.798780][  T989] usb 1-1: SerialNumber: syz
[  427.960930][ T5648] usb 4-1: USB disconnect, device number 31
[  428.049644][  T989] snd-usb-6fire 1-1:1.0: unable to receive device firmware state.
[  428.049790][  T989] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -121
[  428.066387][ T5713] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  428.154615][ T5751] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  428.164729][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  428.215882][ T5713] usb 3-1: Using ep0 maxpacket: 8
[  428.220459][ T5713] usb 3-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice= 0.40
[  428.231537][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.231591][ T5713] usb 3-1: Product: ࡡ
[  428.232170][ T5713] usb 3-1: Manufacturer: Д
[  428.232224][ T5713] usb 3-1: SerialNumber: Ⓠ䀳꿂码蠒凟㝚ױ鋨搔⁈䕧䨹쭧⎣잎쮋묻絯韙薘梭 䖣ᙻ뉤d䊷븩ر︂戍ꩄ꼭迼䲘⛜蜈젛죕妹䦥箒䵝஽䧔ೌ騰त柸拟⛸⣄삻巒ꠃ鮾ꠒ⠧췫绺陼㷺愠혭䦦髤繎໣壬鬯폴浜걫ࣕ狤雺⏀蟄薅暌㆗﬙㶜ᎏ쟒᨝筚䝗跗황諘ᆑ
[  428.284452][    T9] usb 1-1: USB disconnect, device number 28
[  428.306099][ T5751] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  428.316585][ T5713] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  428.317089][ T5713] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  428.335276][  T989] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  428.342099][ T5713] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  428.352126][ T5713] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  428.363318][ T5751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.363385][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.370111][ T5713] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  428.396227][ T5751] usb 5-1: config 0 descriptor??
[  428.458246][ T5713] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  428.485992][  T989] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  428.497284][  T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.497338][  T989] usb 2-1: Product: syz
[  428.497355][  T989] usb 2-1: Manufacturer: syz
[  428.497399][  T989] usb 2-1: SerialNumber: syz
[  428.543129][  T989] ums_eneub6250 2-1:1.0: USB Mass Storage device detected
[  428.562134][  T989] scsi host1: usb-storage 2-1:1.0
[  428.580727][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  428.602075][ T5648] usb 3-1: USB disconnect, device number 8
[  428.638394][ T5751] usbhid 5-1:0.0: can't add hid device: -71
[  428.638521][ T5751] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  428.659347][ T5751] usb 5-1: USB disconnect, device number 33
[  428.725779][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.838818][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.867580][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.085507][ T5713] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  429.182807][  T989] ums_eneub6250 2-1:1.0: probe with driver ums_eneub6250 failed with error 3
[  429.236493][ T5713] usb 5-1: Using ep0 maxpacket: 8
[  429.242238][ T5713] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  429.247869][ T5713] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  429.247956][ T5713] usb 5-1: config 0 has no interface number 0
[  429.248082][ T5713] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.248154][ T5713] usb 5-1: config 0 interface 52 has no altsetting 0
[  429.248236][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.298585][ T5713] usb 5-1: config 0 descriptor??
[  429.320388][  T989] usb 2-1: USB disconnect, device number 23
[  429.575340][ T7381] netlink: 'syz.4.310': attribute type 1 has an invalid length.
[  429.768745][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.799116][ T5713] usb 5-1: Can not set alternate setting to 1, error: -71
[  429.799311][ T5713] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71
[  429.825411][ T5713] usb 5-1: USB disconnect, device number 34
[  430.003627][   T31] audit: type=1804 audit(1788521307.481:287): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.312" name="/newroot/68/cgroup.controllers" dev="tmpfs" ino=383 res=1 errno=0
[  430.028839][   T31] audit: type=1800 audit(1788521307.511:288): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="cgroup.controllers" dev="tmpfs" ino=383 res=0 errno=0
[  430.155253][ T5648] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  430.214887][ T5751] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  430.249867][ T7408] fuse: Unknown parameter 'rootmod�'
[  430.304598][ T5648] usb 1-1: Using ep0 maxpacket: 8
[  430.310959][ T5648] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  430.327383][ T5648] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  430.327461][ T5648] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  430.327506][ T5648] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  430.327536][ T5648] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  430.327567][ T5648] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  430.327595][ T5648] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  430.327643][ T5648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.408986][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.419017][ T5751] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72
[  430.433834][ T5751] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  430.433951][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.664037][ T5751] usb 2-1: string descriptor 0 read error: -71
[  430.674164][ T5751] cypress_m8 2-1:2.0: HID->COM RS232 Adapter converter detected
[  430.683619][ T5751] cyphidcom ttyUSB0: required endpoint is missing
[  430.697294][ T5751] usb 2-1: USB disconnect, device number 24
[  430.704894][ T5751] cypress_m8 2-1:2.0: device disconnected
[  430.765267][ T5649] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  430.795247][  T989] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  430.805709][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.917375][ T5649] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  430.920113][ T5649] usb 5-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config
[  430.920184][ T5649] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  430.932833][ T5649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.932923][ T5649] usb 5-1: Product: syz
[  430.932971][ T5649] usb 5-1: Manufacturer: syz
[  430.933013][ T5649] usb 5-1: SerialNumber: syz
[  430.946571][  T989] usb 4-1: Using ep0 maxpacket: 8
[  430.978164][  T989] usb 4-1: unable to get BOS descriptor or descriptor too short
[  430.978280][  T989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  430.986546][  T989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.986739][  T989] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 61, changing to 9
[  430.986875][  T989] usb 4-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  430.986937][  T989] usb 4-1: config 1 interface 0 has no altsetting 0
[  431.020038][  T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.020178][  T989] usb 4-1: Product: syz
[  431.020233][  T989] usb 4-1: Manufacturer: syz
[  431.020335][  T989] usb 4-1: SerialNumber: syz
[  431.156420][ T5648] usb 1-1: usb_control_msg returned -71
[  431.156490][ T5648] usbtmc 1-1:16.0: can't read capabilities
[  431.182803][ T5648] usb 1-1: USB disconnect, device number 29
[  431.211141][ T5649] usb 5-1: 0:1 : does not exist
[  431.300581][  T989] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  431.318379][  T989] usbtest 4-1:1.0: couldn't get endpoints, -71
[  431.329177][  T989] usbtest 4-1:1.0: probe with driver usbtest failed with error -71
[  431.372742][  T989] usb 4-1: USB disconnect, device number 32
[  431.448269][ T5649] usb 5-1: USB disconnect, device number 35
[  431.512091][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  431.608227][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'.
[  431.650201][ T7423] input: syz1 as /devices/virtual/input/input15
[  431.845465][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.145607][ T5649] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  432.217035][  T989] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  432.306060][ T5649] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.00
[  432.317398][ T5649] usb 4-1: config 0 interface 0 has no altsetting 0
[  432.324157][ T5649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.336987][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  432.375291][  T989] usb 2-1: Using ep0 maxpacket: 8
[  432.381513][  T989] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  432.395686][  T989] usb 2-1: config 2 has an invalid interface number: 241 but max is 0
[  432.395728][  T989] usb 2-1: config 2 has no interface number 0
[  432.395769][  T989] usb 2-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  432.395796][  T989] usb 2-1: config 2 interface 241 has no altsetting 0
[  432.432919][ T5649] usb 4-1: config 0 descriptor??
[  432.447727][  T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.447775][  T989] usb 2-1: Product: syz
[  432.447828][  T989] usb 2-1: Manufacturer: syz
[  432.447888][  T989] usb 2-1: SerialNumber: syz
[  432.515459][    T9] usb 5-1: Using ep0 maxpacket: 32
[  432.521870][    T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  432.555938][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.555988][    T9] usb 5-1: Product: syz
[  432.556046][    T9] usb 5-1: Manufacturer: syz
[  432.556067][    T9] usb 5-1: SerialNumber: syz
[  432.597733][  T989] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected
[  432.598135][  T989] ti_usb_3410_5052 2-1:2.241: missing endpoints
[  432.646768][    T9] usb 5-1: config 0 descriptor??
[  432.680194][ T5649] hid_parser_main: 6 callbacks suppressed
[  432.687623][ T5649] apple 0003:05AC:0238.0008: unknown main item tag 0x0
[  432.695416][ T5649] apple 0003:05AC:0238.0008: unknown main item tag 0x0
[  432.695451][ T5649] apple 0003:05AC:0238.0008: unknown main item tag 0x0
[  432.695511][ T5649] apple 0003:05AC:0238.0008: unknown main item tag 0x0
[  432.695540][ T5649] apple 0003:05AC:0238.0008: unknown main item tag 0x0
[  432.695569][ T5649] apple 0003:05AC:0238.0008: unknown main item tag 0x0
[  432.695597][ T5649] apple 0003:05AC:0238.0008: unknown main item tag 0x0
[  432.695649][ T5649] apple 0003:05AC:0238.0008: unknown main item tag 0x0
[  432.760630][ T5649] apple 0003:05AC:0238.0008: hidraw0: USB HID vef.fd Device [HID 05ac:0238] on usb-dummy_hcd.3-1/input0
[  432.878526][ T5751] usb 4-1: USB disconnect, device number 33
[  432.934931][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  432.940276][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.952895][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.049133][ T7438] fido_id[7438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  433.143918][    T9] airspy 5-1:0.0: Board ID: 00
[  433.144059][    T9] airspy 5-1:0.0: Firmware version: �
[  433.339095][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.341263][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.385028][ T5751] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  433.447720][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.496949][    T9] airspy 5-1:0.0: usb_control_msg() failed -71 request 11
[  433.515543][    T9] airspy 5-1:0.0: Registered as swradio24
[  433.515587][    T9] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  433.545492][ T5751] usb 3-1: New USB device found, idVendor=1e6d, idProduct=2d51, bcdDevice= 0.00
[  433.556369][ T5751] usb 3-1: config 0 has no interfaces?
[  433.562388][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.577738][ T5751] usb 3-1: config 0 descriptor??
[  433.591201][    T9] usb 5-1: USB disconnect, device number 36
[  433.900191][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.900270][ T1160] syzkaller0: tun_net_xmit 76
[  433.902881][ T7453] syzkaller0: create flow: hash 4136132268 index 1
[  433.903811][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.903864][ T1160] syzkaller0: tun_net_xmit 48
[  433.930396][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.930421][  T989] syzkaller0: tun_net_xmit 76
[  433.935792][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.975458][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.975511][    T9] syzkaller0: tun_net_xmit 76
[  433.988034][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.988095][    T9] syzkaller0: tun_net_xmit 76
[  434.092261][ T7449] syzkaller0: delete flow: hash 4136132268 index 1
[  434.179325][ T7460] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  434.290199][ T7463] netlink: 156 bytes leftover after parsing attributes in process `syz.3.337'.
[  434.366182][ T5751] usb 3-1: USB disconnect, device number 9
[  434.398502][    T9] usb 2-1: USB disconnect, device number 25
[  434.495366][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'.
[  434.505912][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'.
[  434.506163][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'.
[  434.506184][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'.
[  434.506373][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'.
[  434.506393][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'.
[  434.506577][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'.
[  434.506596][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'.
[  435.111322][ T7486] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  435.112733][ T7487] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  435.156709][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  435.326024][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  435.328069][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  435.328318][    T9] usb 5-1: config 1 interface 2 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4
[  435.328405][    T9] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x4 has an invalid bInterval 92, changing to 10
[  435.328489][    T9] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 59120, setting to 1024
[  435.328554][    T9] usb 5-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  435.328677][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.440711][    T9] usb 5-1: invalid MIDI in EP 0
[  435.452544][    T9] snd-ua101 5-1:1.0: probe with driver snd-ua101 failed with error -22
[  435.596763][    T9] usb 5-1: USB disconnect, device number 37
[  435.870395][ T7502] syz.2.351 (7502): drop_caches: 2
[  436.088165][ T5751] net_ratelimit: 2 callbacks suppressed
[  436.088220][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.492279][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.584580][ T5648] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  436.724874][ T5648] usb 4-1: device descriptor read/64, error -71
[  436.725869][ T5649] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  436.753838][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.768116][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.782332][   T31] audit: type=1326 audit(1788521314.261:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.797231][   T31] audit: type=1326 audit(1788521314.281:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.816596][   T31] audit: type=1326 audit(1788521314.291:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.822775][   T31] audit: type=1326 audit(1788521314.291:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.823576][   T31] audit: type=1326 audit(1788521314.301:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.824266][   T31] audit: type=1326 audit(1788521314.301:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.833250][   T31] audit: type=1326 audit(1788521314.311:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.833569][   T31] audit: type=1326 audit(1788521314.311:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.836831][   T31] audit: type=1326 audit(1788521314.321:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.842007][   T31] audit: type=1326 audit(1788521314.321:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9ec579e159 code=0x7ffc0000
[  436.898348][ T5649] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  436.923215][ T5649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  436.923315][ T5649] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  436.923387][ T5649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  436.923508][ T5649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.015295][ T1556] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  437.018861][ T5649] usb 1-1: config 0 descriptor??
[  437.084985][ T5648] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  437.144301][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.196287][ T1556] usb 5-1: device descriptor read/64, error -71
[  437.244660][ T5648] usb 4-1: device descriptor read/64, error -71
[  437.355134][ T5648] usb usb4-port1: attempt power cycle
[  437.435012][ T1556] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  437.451281][ T5649] ath6kl: Failed to submit usb control message: -71
[  437.451366][ T5649] ath6kl: unable to send the bmi data to the device: -71
[  437.451423][ T5649] ath6kl: Unable to send get target info: -71
[  437.491139][ T5649] ath6kl: Failed to init ath6kl core: -71
[  437.498815][ T5649] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  437.545318][ T5649] usb 1-1: USB disconnect, device number 30
[  437.574729][ T1556] usb 5-1: device descriptor read/64, error -71
[  437.685046][ T1556] usb usb5-port1: attempt power cycle
[  437.734699][ T5648] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  437.765737][ T5648] usb 4-1: device descriptor read/8, error -71
[  437.998267][ T7529] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  438.010246][ T7529] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:5
[  438.016976][ T5648] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  438.044775][ T1556] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  438.053768][ T5648] usb 4-1: device descriptor read/8, error -71
[  438.075514][ T1556] usb 5-1: device descriptor read/8, error -71
[  438.155950][ T5648] usb usb4-port1: unable to enumerate USB device
[  438.174871][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.314566][ T1556] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  438.335797][ T1556] usb 5-1: device descriptor read/8, error -71
[  438.434621][ T5648] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  438.444941][ T1556] usb usb5-port1: unable to enumerate USB device
[  438.587531][ T5648] usb 1-1: unable to get BOS descriptor or descriptor too short
[  438.597544][ T5648] usb 1-1: not running at top speed; connect to a high speed hub
[  438.597609][ T5648] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  438.615898][ T5648] usb 1-1: config 8 has an invalid interface number: 43 but max is 1
[  438.615929][ T5648] usb 1-1: config 8 has an invalid interface number: 35 but max is 1
[  438.615950][ T5648] usb 1-1: config 8 has no interface number 0
[  438.615967][ T5648] usb 1-1: config 8 has no interface number 1
[  438.616046][ T5648] usb 1-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85
[  438.616079][ T5648] usb 1-1: config 8 interface 43 has no altsetting 0
[  438.616100][ T5648] usb 1-1: config 8 interface 35 has no altsetting 0
[  438.678620][ T5648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.678667][ T5648] usb 1-1: Product: syz
[  438.678704][ T5648] usb 1-1: Manufacturer: syz
[  438.678725][ T5648] usb 1-1: SerialNumber: syz
[  438.929551][ T5648] ums-alauda 1-1:8.43: USB Mass Storage device detected
[  438.947127][ T5648] scsi host1: usb-storage 1-1:8.43
[  438.963588][ T5648] hub 1-1:8.35: Invalid hub with more than one config or interface
[  438.974234][ T5648] hub 1-1:8.35: probe with driver hub failed with error -22
[  438.974960][ T5648] ums-alauda 1-1:8.35: USB Mass Storage device detected
[  438.976738][ T5649] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  439.081548][ T5648] usb 1-1: USB disconnect, device number 31
[  439.148125][ T5649] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  439.152946][ T5649] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  439.153027][ T5649] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  439.153098][ T5649] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  439.153162][ T5649] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  439.153217][ T5649] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  439.153318][ T5649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.243720][ T7542] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  439.244229][ T7542] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  439.251093][ T7542] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  439.272335][ T5649] mos7720 3-1:1.0: Moschip 2 port adapter converter detected
[  439.310510][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.482736][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.514390][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.557784][ T5649] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  439.570944][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.573986][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.598532][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.613623][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.635453][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.649732][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.675866][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.708459][ T7553] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  439.723157][ T5649] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  439.749450][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.751343][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.930852][ T7549] __nla_validate_parse: 60 callbacks suppressed
[  439.938155][ T7549] netlink: 112 bytes leftover after parsing attributes in process `syz.0.365'.
[  440.085940][  T989] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[  440.217524][  T989] usb 2-1: device descriptor read/64, error -71
[  440.341604][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  440.342619][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  440.355340][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.480933][  T989] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[  440.617167][  T989] usb 2-1: device descriptor read/64, error -71
[  440.727951][  T989] usb usb2-port1: attempt power cycle
[  441.065580][  T989] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  441.085416][  T989] usb 2-1: device descriptor read/8, error -71
[  441.326092][  T989] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  441.347781][  T989] usb 2-1: device descriptor read/8, error -71
[  441.364756][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.456230][  T989] usb usb2-port1: unable to enumerate USB device
[  441.735422][  T989] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  441.773045][    C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  441.773823][ T5649] usb 3-1: USB disconnect, device number 10
[  441.833797][ T5649] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  441.867545][ T5649] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  441.877822][ T5649] mos7720 3-1:1.0: device disconnected
[  441.885196][  T989] usb 1-1: Using ep0 maxpacket: 16
[  441.887075][  T989] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice= 1.6d
[  441.906024][  T989] usb 1-1: config 9 has an invalid interface number: 133 but max is 1
[  441.906086][  T989] usb 1-1: config 9 has an invalid interface number: 245 but max is 1
[  441.906123][  T989] usb 1-1: config 9 has no interface number 0
[  441.906176][  T989] usb 1-1: config 9 has no interface number 1
[  441.906325][  T989] usb 1-1: config 9 interface 133 has no altsetting 0
[  441.906370][  T989] usb 1-1: config 9 interface 245 has no altsetting 0
[  441.955974][  T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.956028][  T989] usb 1-1: Product: syz
[  441.956044][  T989] usb 1-1: Manufacturer: syz
[  441.956062][  T989] usb 1-1: SerialNumber: syz
[  442.028527][ T7582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.029679][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.073156][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.101336][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.139882][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'.
[  442.139929][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'.
[  442.139947][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'.
[  442.211467][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.213262][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.310243][  T989] videodev: could not get a free minor
[  442.310288][  T989] dsbr100 1-1:9.245: couldn't register video device
[  442.327808][  T989] dsbr100 1-1:9.245: probe with driver dsbr100 failed with error -23
[  442.346432][  T989] usb 1-1: USB disconnect, device number 32
[  442.355580][ T5649] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  442.439698][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.507239][ T5649] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  442.517805][ T5649] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[  442.541226][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.541281][ T5649] usb 3-1: Product: ᰵ
[  442.541298][ T5649] usb 3-1: Manufacturer: С
[  442.541337][ T5649] usb 3-1: SerialNumber: 艵⇞捂𢡊ⶃ㾢檾䅞嵵쮻㉹褥ؐ僕஭쬄੯䓀令攺餚׎ย卣뮵鮞殾甾픵힡띒ບ⢡᠌ቸ൧맆ஒᄟꢢ┭㩨癗䚒Ꟈ紋嗍㈺㢞뼋봶ቧᥛ梦奀좖యڻ翵䌷驍件궩쟁꒔ٜ죍醅翊駡ꦙ
[  442.655569][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.799155][ T5649] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  442.801459][ T5649] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  442.956087][ T5649] usb 3-1: USB disconnect, device number 11
[  443.456256][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.526393][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.577033][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'.
[  443.577143][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.385'.
[  443.610793][ T5649] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  443.767521][ T5649] usb 1-1: not running at top speed; connect to a high speed hub
[  443.767598][ T5649] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  443.788623][ T5649] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 40768, setting to 64
[  443.807681][ T5649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.807741][ T5649] usb 1-1: Product: syz
[  443.807775][ T5649] usb 1-1: Manufacturer: syz
[  443.807835][ T5649] usb 1-1: SerialNumber: syz
[  443.848774][ T7619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  443.870050][ T5649] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected
[  443.911961][ T5649] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  443.944053][ T5649] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  443.966648][    T9] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  443.980822][ T5649] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  444.004003][ T5649] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  444.155412][ T5649] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  444.318091][ T5649] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95
[  444.340542][ T5649] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  444.340638][ T5649] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3
[  444.368268][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.368329][ T5649] usb 2-1: Product: syz
[  444.368399][ T5649] usb 2-1: Manufacturer: syz
[  444.368599][ T5649] usb 2-1: SerialNumber: syz
[  444.484819][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.656179][ T5649] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  444.671318][ T5649] dvb_usb_af9015 2-1:2.0: probe with driver dvb_usb_af9015 failed with error -22
[  444.691040][ T5649] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  444.691181][ T5649] dvb_usb_af9035 2-1:2.0: probe with driver dvb_usb_af9035 failed with error -22
[  444.717651][ T5649] usb 2-1: USB disconnect, device number 30
[  444.864652][ T5648] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  445.046100][ T5648] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  445.058948][ T5648] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  445.069352][ T5648] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  445.069412][ T5648] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  445.069441][ T5648] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  445.069492][ T5648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.454876][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.530159][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.655577][ T5648] gud 5-1:1.0: probe with driver gud failed with error -71
[  445.833989][ T5648] usb 5-1: USB disconnect, device number 42
[  446.024710][ T1556] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  446.194568][ T1556] usb 2-1: Using ep0 maxpacket: 32
[  446.195531][ T1556] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  446.216732][ T1556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  446.216782][ T1556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  446.216819][ T1556] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  446.216847][ T1556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  446.285290][ T1556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.285789][ T1556] usb 2-1: Product: syz
[  446.285827][ T1556] usb 2-1: Manufacturer: syz
[  446.285846][ T1556] usb 2-1: SerialNumber: syz
[  446.328455][ T1556] usb 2-1: config 0 descriptor??
[  446.388940][ T1556] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17
[  446.437230][ T4970] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.471713][ T4970] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.526692][ T4970] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.564810][ T1556] net_ratelimit: 1 callbacks suppressed
[  446.564873][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.573487][ T4970] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.600763][ T7639] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.640822][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.647868][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.755958][ T4970] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.769551][ T5668] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.849754][ T4970] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.878305][ T4970] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  446.890520][ T7643] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  447.118090][ T5648] usb 1-1: USB disconnect, device number 33
[  447.179880][ T5648] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  447.230154][ T5648] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  447.262009][ T5648] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  447.287237][ T5648] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  447.288562][ T5648] keyspan 1-1:1.0: device disconnected
[  447.538917][ T5667] Bluetooth: hci2: command 0x0406 tx timeout
[  447.538982][ T5667] Bluetooth: hci3: command 0x0406 tx timeout
[  447.539058][ T5667] Bluetooth: hci0: command 0x0406 tx timeout
[  447.539090][ T5667] Bluetooth: hci4: command 0x0406 tx timeout
[  447.605015][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.646625][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.815629][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.197205][ T7632] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  449.205287][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  449.207151][    T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  449.208840][    T9] usb 4-1: unable to read config index 0 descriptor/start: -32
[  449.208895][    T9] usb 4-1: chopping to 0 config(s)
[  449.208960][    T9] usb 4-1: can't read configurations, error -32
[  449.307874][ T5713] usb 2-1: USB disconnect, device number 31
[  449.685679][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.756068][ T5648] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  449.804852][ T1556] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  449.875608][ T5747] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  449.885315][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  449.906839][ T5648] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  449.910065][ T5648] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  449.910138][ T5648] usb 5-1: config 1 has no interface number 0
[  449.916725][ T5648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.916752][ T5648] usb 5-1: Product: syz
[  449.916809][ T5648] usb 5-1: Manufacturer: syz
[  449.916875][ T5648] usb 5-1: SerialNumber: syz
[  449.960080][ T5648] usb 5-1: 3:1 : does not exist
[  449.960138][ T5648] usb 5-1: 3:2 : does not exist
[  449.976197][ T1556] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  449.980844][ T1556] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  449.980988][ T1556] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  449.981068][ T1556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  449.981142][ T1556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  449.981215][ T1556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  449.981352][ T1556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.002607][ T1556] usb 3-1: config 0 descriptor??
[  450.008064][ T7664] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  450.026107][ T5747] usb 1-1: device descriptor read/64, error -71
[  450.047539][    T9] usb 4-1: Using ep0 maxpacket: 32
[  450.061718][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  450.083253][    T9] usb 4-1: config 1 interface 0 altsetting 212 endpoint 0x82 has invalid wMaxPacketSize 0
[  450.083286][    T9] usb 4-1: config 1 interface 0 altsetting 212 bulk endpoint 0x82 has invalid maxpacket 0
[  450.083313][    T9] usb 4-1: config 1 interface 0 altsetting 212 bulk endpoint 0x3 has invalid maxpacket 16
[  450.083338][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  450.139084][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.139134][    T9] usb 4-1: Product: Р
[  450.139169][    T9] usb 4-1: Manufacturer: 뤧଀烯ե⢫ʟ뺔㧹汯꒐虅쐥ꭉ쟻轕﮸ᨏ㷸㣿⯔爄馚ꈕꞀ㽆ᚍ蕺慃둛긕
[  450.139197][    T9] usb 4-1: SerialNumber: Ћ
[  450.188678][ T7655] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  450.274600][ T5648] usb 5-1: USB disconnect, device number 43
[  450.298826][ T5747] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  450.368037][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  450.429857][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.437549][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.445439][ T5747] usb 1-1: device descriptor read/64, error -71
[  450.451921][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.459545][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.459584][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.459617][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.467410][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.467448][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.467476][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.467503][ T1556] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  450.514303][ T1556] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  450.555115][ T5747] usb usb1-port1: attempt power cycle
[  450.575924][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.600994][ T7655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.602249][ T7655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.608996][ T7655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.609773][ T7655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.620560][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  450.725324][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.743101][ T7664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.752882][ T7664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.814333][ T1556] usb 4-1: USB disconnect, device number 39
[  450.841430][ T5648] usb 3-1: USB disconnect, device number 12
[  450.915198][ T5747] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  450.936898][ T5747] usb 1-1: device descriptor read/8, error -71
[  451.000959][ T7682] input: syz1 as /devices/virtual/input/input18
[  451.185678][ T5747] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  451.209677][ T5747] usb 1-1: device descriptor read/8, error -71
[  451.315121][ T5747] usb usb1-port1: unable to enumerate USB device
[  451.535236][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  451.583820][ T7707] syz_tun: entered allmulticast mode
[  451.602923][ T7707] dvmrp6: entered allmulticast mode
[  451.629863][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.636000][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.650550][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.660668][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.696093][    T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  451.707611][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  451.719213][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.728452][ T7706] syz_tun: left allmulticast mode
[  451.769846][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.865951][ T5713] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  451.912665][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.920751][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.989637][    T9] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[  452.017312][    T9] wwan wwan0: port wwan0qmi0 attached
[  452.028575][ T5713] usb 4-1: unable to get BOS descriptor or descriptor too short
[  452.036604][ T5713] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  452.048822][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  452.060010][ T5713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  452.074146][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.083424][ T5713] usb 4-1: Product: syz
[  452.089120][ T5713] usb 4-1: Manufacturer: syz
[  452.089144][ T5713] usb 4-1: SerialNumber: syz
[  452.113894][ T5713] usb 4-1: selecting invalid altsetting 1
[  452.120668][ T5713] usb 4-1: unit 6 not found!
[  452.145313][ T5732] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  452.295614][ T5732] usb 3-1: Invalid ep0 maxpacket: 16
[  452.357077][    T9] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 42:b7:0f:6d:f9:75
[  452.427358][ T5732] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  452.581094][ T5732] usb 3-1: Invalid ep0 maxpacket: 16
[  452.582116][ T5732] usb usb3-port1: attempt power cycle
[  452.747994][ T7724] netlink: 'syz.0.415': attribute type 11 has an invalid length.
[  452.806492][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.912340][ T7721] syz.4.414 (7721): drop_caches: 2
[  452.925468][ T5732] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  452.942303][ T5713] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  452.973632][ T5732] usb 3-1: Invalid ep0 maxpacket: 16
[  453.007949][ T7721] syz.4.414 (7721): drop_caches: 2
[  453.115507][ T5732] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  453.142727][ T5732] usb 3-1: Invalid ep0 maxpacket: 16
[  453.143582][ T5732] usb usb3-port1: unable to enumerate USB device
[  453.208097][ T5713] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  453.243453][ T5713] usb 4-1: USB disconnect, device number 40
[  453.386863][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  453.608736][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.845525][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.036379][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'.
[  454.036452][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'.
[  454.084630][ T5747] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  454.225260][ T5747] usb 5-1: device descriptor read/64, error -71
[  454.288011][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'.
[  454.484957][ T5747] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  454.616127][ T5747] usb 5-1: device descriptor read/64, error -71
[  454.708756][ T5713] usb 2-1: USB disconnect, device number 32
[  454.726926][ T5747] usb usb5-port1: attempt power cycle
[  454.760021][ T5713] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[  454.884774][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.104896][ T5747] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  455.141139][ T5747] usb 5-1: device descriptor read/8, error -71
[  455.276650][ T7776] netlink: 52 bytes leftover after parsing attributes in process `syz.2.423'.
[  455.394560][ T5747] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  455.411852][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.422683][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.436936][ T5747] usb 5-1: device descriptor read/8, error -71
[  455.545696][ T5747] usb usb5-port1: unable to enumerate USB device
[  455.625280][  T989] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  455.728666][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'.
[  455.787047][  T989] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  455.790635][  T989] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  455.790763][  T989] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  455.790833][  T989] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  455.790897][  T989] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  455.791010][  T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.934713][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.949340][ T5713] wwan wwan0: port wwan0qmi0 disconnected
[  456.651192][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.717353][  T989] usb 3-1: USB disconnect, device number 17
[  456.970764][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.008638][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.017573][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.047297][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.004785][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.045794][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.445299][ T5713] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  459.596029][ T5713] usb 4-1: New USB device found, idVendor=91dd, idProduct=441e, bcdDevice=3f.87
[  459.617664][ T5713] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  459.617725][ T5713] usb 4-1: config 0 has no interface number 0
[  459.617791][ T5713] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  459.617938][ T5713] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  459.618019][ T5713] usb 4-1: config 0 interface 255 has no altsetting 0
[  459.675842][ T5713] usb 4-1: New USB device strings: Mfr=179, Product=46, SerialNumber=255
[  459.675904][ T5713] usb 4-1: Product: syz
[  459.675939][ T5713] usb 4-1: Manufacturer: syz
[  459.675955][ T5713] usb 4-1: SerialNumber: syz
[  459.707571][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.720248][ T5713] usb 4-1: config 0 descriptor??
[  459.938040][ T5713] usb 4-1: USB disconnect, device number 41
[  460.086158][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.231731][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.245068][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.454619][ T5648] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  460.618071][ T5648] usb 2-1: Using ep0 maxpacket: 16
[  460.629121][ T5648] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff9f, bcdDevice=d8.78
[  460.642009][ T5648] usb 2-1: config 7 has an invalid interface number: 21 but max is 3
[  460.642060][ T5648] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[  460.642101][ T5648] usb 2-1: config 7 has an invalid interface number: 7 but max is 3
[  460.642128][ T5648] usb 2-1: config 7 has an invalid interface number: 206 but max is 3
[  460.642155][ T5648] usb 2-1: config 7 has an invalid interface number: 17 but max is 3
[  460.642184][ T5648] usb 2-1: config 7 has no interface number 0
[  460.642205][ T5648] usb 2-1: config 7 has no interface number 1
[  460.642223][ T5648] usb 2-1: config 7 has no interface number 2
[  460.642243][ T5648] usb 2-1: config 7 has no interface number 3
[  460.642315][ T5648] usb 2-1: config 7 interface 21 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0
[  460.642347][ T5648] usb 2-1: config 7 interface 21 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  460.642375][ T5648] usb 2-1: config 7 interface 21 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  460.642418][ T5648] usb 2-1: config 7 interface 21 altsetting 5 has a duplicate endpoint with address 0xA, skipping
[  460.642446][ T5648] usb 2-1: config 7 interface 21 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  460.642475][ T5648] usb 2-1: config 7 interface 21 altsetting 5 has a duplicate endpoint with address 0x1, skipping
[  460.642517][ T5648] usb 2-1: config 7 interface 7 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  460.642551][ T5648] usb 2-1: config 7 interface 7 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[  460.642579][ T5648] usb 2-1: config 7 interface 7 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  460.642611][ T5648] usb 2-1: config 7 interface 7 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[  460.642649][ T5648] usb 2-1: config 7 interface 206 altsetting 203 has an invalid descriptor for endpoint zero, skipping
[  460.642678][ T5648] usb 2-1: config 7 interface 206 altsetting 203 has a duplicate endpoint with address 0xC, skipping
[  460.642707][ T5648] usb 2-1: config 7 interface 206 altsetting 203 endpoint 0xF has an invalid bInterval 0, changing to 7
[  460.642739][ T5648] usb 2-1: config 7 interface 206 altsetting 203 has an endpoint descriptor with address 0xD2, changing to 0x82
[  460.642772][ T5648] usb 2-1: config 7 interface 206 altsetting 203 endpoint 0x82 has an invalid bInterval 58, changing to 9
[  460.642803][ T5648] usb 2-1: config 7 interface 206 altsetting 203 endpoint 0x82 has invalid maxpacket 42968, setting to 1024
[  460.642835][ T5648] usb 2-1: config 7 interface 206 altsetting 203 has an invalid descriptor for endpoint zero, skipping
[  460.642860][ T5648] usb 2-1: config 7 interface 206 altsetting 203 has a duplicate endpoint with address 0xA, skipping
[  460.642888][ T5648] usb 2-1: config 7 interface 206 altsetting 203 has a duplicate endpoint with address 0x9, skipping
[  460.642916][ T5648] usb 2-1: config 7 interface 206 altsetting 203 has 8 endpoint descriptors, different from the interface descriptor's value: 6
[  460.642958][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  460.642986][ T5648] usb 2-1: config 7 interface 17 altsetting 2 endpoint 0x2 has an invalid bInterval 235, changing to 7
[  460.643019][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  460.643049][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0x6, skipping
[  460.643077][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  460.643104][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  460.643130][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  460.643157][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  460.643185][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  460.643213][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  460.643240][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  460.643267][ T5648] usb 2-1: config 7 interface 17 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  460.643295][ T5648] usb 2-1: config 7 interface 21 has no altsetting 0
[  460.643318][ T5648] usb 2-1: config 7 interface 7 has no altsetting 0
[  460.643341][ T5648] usb 2-1: config 7 interface 206 has no altsetting 0
[  460.643364][ T5648] usb 2-1: config 7 interface 17 has no altsetting 0
[  460.810825][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.857465][ T5648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.857497][ T5648] usb 2-1: Product: êᙧ펪౒苅眱쨯挧훮醿↗㔖薌ㆧ㣓ꚞ퐃肖ⳳ痰힦같⾲녈嶈夺깂醜桺䰢毉ᓖﶰ䴛빤㈝牥郳꧛뛪떕졥듄鳖ႅ쨋뚀缫죚럑ꔑ୻늜眠닻৶঴⚧깶喦藾玢¨㵛뗨쩨枒䢁늪뉑迻뱾ᨯ常莄앢䪷獜
[  460.857531][ T5648] usb 2-1: Manufacturer: ࠉ
[  460.857548][ T5648] usb 2-1: SerialNumber: 鬬䆔㍣ᆜ뉁衫㟖廾ꨳ뛰ᶎꎊ鸷荰➊㩯칏ⷆힿꐯ墡쫩ᘶ碪ሹ퓯覔岀퉒팁녩瑷䡑惛ܝ朌頋計≭㻢̊顁況憚ﻙ⭓⠬⸦ꖿ诬⦽䚠Έ逤峴༺亳䉕娐䅐뙏簦䞃蹇佸ᴪ즅ᚲ㬪
[  461.390691][ T5648] option 2-1:7.21: GSM modem (1-port) converter detected
[  461.407047][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[  461.420055][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[  461.431866][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[  461.442341][ T7875] netlink: 88 bytes leftover after parsing attributes in process `syz.0.440'.
[  461.495753][ T5648] cdc_ether 2-1:7.206: More than one union descriptor, skipping ...
[  461.497498][ T5648] cdc_ether 2-1:7.206: bad CDC descriptors
[  461.589741][ T5648] usb 2-1: USB disconnect, device number 33
[  461.605135][ T1556] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  461.639792][ T5648] option 2-1:7.21: device disconnected
[  461.755056][ T1556] usb 4-1: device descriptor read/64, error -71
[  462.029961][ T1556] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  462.164805][ T1556] usb 4-1: device descriptor read/64, error -71
[  462.172838][ T5749] net_ratelimit: 5 callbacks suppressed
[  462.172887][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.290321][ T1556] usb usb4-port1: attempt power cycle
[  462.634794][ T1556] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  462.656600][ T1556] usb 4-1: device descriptor read/8, error -71
[  462.904636][ T1556] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  462.932800][ T1556] usb 4-1: device descriptor read/8, error -71
[  463.011776][ T7907] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  463.011809][ T7907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  463.028960][ T7907] vhci_hcd vhci_hcd.0: Device attached
[  463.035033][ T1556] usb usb4-port1: unable to enumerate USB device
[  463.161013][ T7915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.449'.
[  463.201840][ T7921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.214991][ T5749] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  463.217541][ T7916] xt_hashlimit: size too large, truncated to 1048576
[  463.224818][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.274582][ T5747] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  463.375017][ T5749] usb 3-1: Using ep0 maxpacket: 8
[  463.376843][ T5749] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  463.386353][ T5749] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  463.386436][ T5749] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  463.386488][ T5749] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  463.386591][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.466233][ T5648] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  463.620572][ T5648] usb 1-1: unable to get BOS descriptor or descriptor too short
[  463.620657][ T5648] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=a1.2e
[  463.626899][ T5648] usb 1-1: config 255 has an invalid interface number: 199 but max is 0
[  463.626975][ T5648] usb 1-1: config 255 has no interface number 0
[  463.627082][ T5648] usb 1-1: config 255 interface 199 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8
[  463.628620][ T5648] usb 1-1: config 255 interface 199 has no altsetting 0
[  463.638394][ T5648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.638477][ T5648] usb 1-1: Product: syz
[  463.638519][ T5648] usb 1-1: Manufacturer: syz
[  463.638561][ T5648] usb 1-1: SerialNumber: syz
[  463.712369][ T7921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  463.729809][ T5772] usb 3-1: USB disconnect, device number 18
[  463.737160][ T7911] usb 37-1: recv xbuf, 0
[  463.749720][ T5752] vhci_hcd vhci_hcd.2: stop threads
[  463.759696][ T5752] vhci_hcd vhci_hcd.2: release socket
[  463.771397][ T5752] vhci_hcd vhci_hcd.2: disconnect device
[  463.804028][ T7931] batadv_slave_1: entered promiscuous mode
[  463.814947][ T5747] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  463.859317][ T7931] batadv_slave_1: left promiscuous mode
[  463.926287][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.938755][ T5648] kvaser_usb 1-1:255.199: error -ENODEV: Cannot get usb endpoint(s)
[  463.956242][ T5648] usb 1-1: USB disconnect, device number 38
[  464.187504][ T7943] binder: 7935:7943 ioctl 6f50 5 returned -22
[  464.245066][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.311814][ T7941] syz.1.453 (7941): drop_caches: 2
[  464.476499][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'.
[  464.537123][ T7947] bridge1: entered promiscuous mode
[  464.537178][ T7947] bridge1: entered allmulticast mode
[  464.670180][ T7947] batman_adv: batadv0: Adding interface: vlan2
[  464.670226][ T7947] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.671094][ T7947] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  465.023901][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'.
[  465.037221][ T5772] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  465.195176][ T5732] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  465.201598][ T5772] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  465.201724][ T5772] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  465.231980][ T5772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  465.232067][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  465.232125][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.253497][ T5772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  465.253657][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  465.253731][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.287745][ T5772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  465.287947][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  465.288032][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.300165][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.340718][ T5772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  465.340802][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  465.340896][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.359808][ T5772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  465.359957][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  465.360069][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.385147][ T5772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  465.385204][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  465.385232][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.399742][ T5772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  465.399883][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  465.399975][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.409987][ T5772] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  465.410191][ T5772] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  465.410271][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.459291][ T5772] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  465.459461][ T5772] usb 4-1: Product: syz
[  465.459511][ T5772] usb 4-1: Manufacturer: syz
[  465.459553][ T5772] usb 4-1: SerialNumber: syz
[  465.476544][ T5732] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  465.506329][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.506367][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.506391][ T5732] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  465.526800][ T5772] usb 4-1: config 0 descriptor??
[  465.541409][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  465.541440][ T5732] usb 5-1: Product: syz
[  465.620503][ T5732] usb 5-1: config 0 descriptor??
[  465.666368][ T5772] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  465.813483][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.828414][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.933629][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.121735][ T5732] hid_parser_main: 5 callbacks suppressed
[  466.121798][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.121834][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.121876][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.121908][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.121938][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.121969][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.121990][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.122028][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.122060][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.122089][ T5732] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0
[  466.224161][ T5732] pyra 0003:1E7D:2C24.000A: hidraw0: USB HID v80.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  466.336308][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.348155][ T5772] usb 5-1: USB disconnect, device number 48
[  466.678371][ T7967] fido_id[7967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  466.765180][ T7970] netlink: 'syz.2.460': attribute type 2 has an invalid length.
[  466.765224][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[  466.969364][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.084744][ T5772] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  467.246610][ T5772] usb 3-1: Using ep0 maxpacket: 8
[  467.264298][ T5772] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  467.278712][ T5772] usb 3-1: config 0 has an invalid interface number: 6 but max is 2
[  467.278764][ T5772] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  467.278787][ T5772] usb 3-1: config 0 has no interface number 1
[  467.278959][ T5772] usb 3-1: config 0 has no interface number 2
[  467.279158][ T5772] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[  467.279321][ T5772] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  467.279455][ T5772] usb 3-1: config 0 interface 0 has no altsetting 0
[  467.279548][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.353843][ T5772] usb 3-1: config 0 descriptor??
[  467.392835][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.612475][ T5772] usb 3-1: Could not set interface, error -71
[  467.698538][ T5772] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22
[  467.733150][ T5772] usb 3-1: USB disconnect, device number 19
[  467.865477][  T989] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  467.914237][ T7976] openvswitch: netlink: Missing key (keys=40, expected=100)
[  468.028443][  T989] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  468.042415][  T989] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  468.042498][  T989] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  468.042551][  T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  468.042583][  T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  468.042612][  T989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  468.119822][  T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  468.128732][  T989] usb 5-1: Product: syz
[  468.133088][  T989] usb 5-1: Manufacturer: syz
[  468.139133][  T989] usb 5-1: SerialNumber: syz
[  468.149017][  T989] usb 5-1: config 0 descriptor??
[  468.365862][  T989] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[  468.366234][  T989] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  468.417274][  T989] usb 5-1: USB disconnect, device number 49
[  468.427625][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.445479][ T5732] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  468.585454][ T5732] usb 1-1: device descriptor read/64, error -71
[  468.638158][ T5648] usb 4-1: USB disconnect, device number 46
[  468.649659][ T7987] openvswitch: netlink: Multiple metadata blocks provided
[  468.659706][ T5648] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  468.766193][ T5772] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  468.835821][ T5732] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  468.900471][ T7989] kAFS: unable to lookup cell '('
[  468.975405][ T5732] usb 1-1: device descriptor read/64, error -71
[  469.085732][ T5732] usb usb1-port1: attempt power cycle
[  469.446967][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.476412][ T5732] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  469.510315][ T5732] usb 1-1: device descriptor read/8, error -71
[  469.562994][ T8007] binder: 8001:8007 ioctl 6f50 5 returned -22
[  469.575867][ T8005] syz.4.470 (8005): drop_caches: 2
[  469.698355][ T8009] netlink: 'syz.3.471': attribute type 11 has an invalid length.
[  469.744741][ T5732] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  469.770942][ T5732] usb 1-1: device descriptor read/8, error -71
[  469.877165][ T5732] usb usb1-port1: unable to enumerate USB device
[  470.008132][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.485033][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.105224][  T989] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  471.213838][ T8017] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543
[  471.265296][  T989] usb 4-1: Using ep0 maxpacket: 16
[  471.272236][  T989] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  471.297311][  T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.307465][  T989] usb 4-1: Product: syz
[  471.307490][  T989] usb 4-1: Manufacturer: syz
[  471.307507][  T989] usb 4-1: SerialNumber: syz
[  471.336520][  T989] r8152-cfgselector 4-1: Unknown version 0x0000
[  471.343626][  T989] r8152-cfgselector 4-1: config 0 descriptor??
[  471.467676][ T8020] ALSA: mixer_oss: invalid OSS volume 'ELFJ

'
[  471.475483][ T8020] ALSA: mixer_oss: invalid OSS volume ''
[  471.482388][ T8020] ALSA: mixer_oss: invalid OSS volume '�U�B�@���ƒa'
[  471.526041][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.805210][   T31] kauditd_printk_skb: 13 callbacks suppressed
[  471.805258][   T31] audit: type=1326 audit(1788521349.281:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.3.472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f221019e159 code=0x0
[  471.905084][ T5648] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  471.966980][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.473'.
[  472.067833][ T5747] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  472.076193][ T5648] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  472.087083][ T5648] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  472.087116][ T5648] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  472.112733][ T5648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.121328][ T5648] usb 5-1: Product: syz
[  472.121352][ T5648] usb 5-1: Manufacturer: syz
[  472.121368][ T5648] usb 5-1: SerialNumber: syz
[  472.276621][ T5747] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  472.291724][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.300621][ T5747] usb 1-1: Product: syz
[  472.305079][ T5747] usb 1-1: Manufacturer: syz
[  472.309862][ T5747] usb 1-1: SerialNumber: syz
[  472.319115][ T5747] usb 1-1: config 0 descriptor??
[  472.550685][ T5648] usb 5-1: Limiting number of CPorts to U8_MAX
[  472.595113][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.045348][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.090852][ T5933] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  473.105826][ T8031] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  473.134902][ T5772] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  473.295550][ T5772] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[  473.306640][ T5772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  473.323677][ T5772] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  473.325629][ T5772] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  473.332920][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.332947][ T5772] usb 2-1: Product: syz
[  473.332963][ T5772] usb 2-1: Manufacturer: syz
[  473.332979][ T5772] usb 2-1: SerialNumber: syz
[  473.360488][ T5772] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (046d:0821)
[  473.360663][ T5772] uvcvideo 2-1:1.0: No valid video chain found.
[  473.443445][    C1] greybus greybus1: nonexistent connection (8 bytes dropped)
[  473.521558][ T5933] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  473.535645][ T8030] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  473.604853][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.639088][    C1] greybus greybus1: nonexistent connection (8 bytes dropped)
[  473.648464][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.661671][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.762933][    C1] usb 5-1: invalid arpc response id received: 0
[  473.866409][ T5648] r8152-cfgselector 4-1: USB disconnect, device number 47
[  473.998417][ T5747] usb 1-1: f81604_read: reg: 105 failed: -EPROTO
[  473.998574][ T5747] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  473.998605][ T5747] f81604 1-1:0.0: probe with driver f81604 failed with error -71
[  474.052223][ T5747] usb 1-1: USB disconnect, device number 43
[  474.354654][ T5648] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  474.514669][ T5648] usb 4-1: Using ep0 maxpacket: 32
[  474.516745][ T5648] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  474.523125][ T5648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.523296][ T5648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.523478][ T5648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.575301][ T5648] usb 4-1: config 0 descriptor??
[  474.646953][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.851435][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'.
[  474.957084][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.014402][ T5648] hid_parser_main: 28 callbacks suppressed
[  475.017172][ T5648] ft260 0003:0403:6030.000B: unknown main item tag 0x0
[  475.017352][ T5648] ft260 0003:0403:6030.000B: unknown main item tag 0x0
[  475.057123][ T8083] netlink: 156 bytes leftover after parsing attributes in process `syz.0.488'.
[  475.077216][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.159584][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.190215][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.194235][ T8080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.211955][ T5648] ft260 0003:0403:6030.000B: chip code: 0000 0000
[  475.223551][ T8081] sctp: [Deprecated]: syz.2.487 (pid 8081) Use of struct sctp_assoc_value in delayed_ack socket option.
[  475.223551][ T8081] Use struct sctp_sack_info instead
[  475.259145][ T8079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.333421][ T5772] usb 5-1: USB disconnect, device number 50
[  475.333506][    C1] usb 5-1: failed to resubmit arpc in-urb: -19
[  475.333698][    C1] usb 5-1: failed to resubmit in-urb: -19
[  475.333848][    C1] usb 5-1: failed to resubmit in-urb: -19
[  475.333965][    C1] usb 5-1: failed to resubmit in-urb: -19
[  475.334069][    C1] usb 5-1: failed to resubmit in-urb: -19
[  475.334161][    C1] usb 5-1: failed to resubmit arpc in-urb: -19
[  475.407344][ T5772] usb 5-1: failed to send ARPC request 4: -19
[  475.407587][ T5772] usb 5-1: failed to execute ARPC: -19
[  475.407709][ T5772] usb 5-1: failed to flush cport 0: -19
[  475.407761][ T5772] greybus greybus1: 0/0:0: failed to flush host cport: -19
[  475.436085][  T989] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  475.449263][ T5648] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  475.473569][ T5772] usb 5-1: failed to send ARPC request 2: -19
[  475.473806][ T5772] usb 5-1: failed to execute ARPC: -19
[  475.473980][ T5772] usb 5-1: failed to quiesce cport 0: -19 (0)
[  475.474035][ T5772] greybus greybus1: 0/0:0: failed to quiesce host cport: -19
[  475.479833][ T5772] usb 5-1: failed to send ARPC request 3: -19
[  475.479939][ T5772] usb 5-1: failed to execute ARPC: -19
[  475.479956][ T5772] usb 5-1: failed to clear cport 0: -19
[  475.479974][ T5772] greybus greybus1: 0/0:0: failed to clear host cport: -19
[  475.595253][  T989] usb 1-1: Using ep0 maxpacket: 32
[  475.607687][  T989] usb 1-1: unable to get BOS descriptor or descriptor too short
[  475.607760][  T989] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.40
[  475.627646][  T989] usb 1-1: unable to read config index 0 descriptor/start: -71
[  475.627707][  T989] usb 1-1: can't read configurations, error -71
[  475.649771][ T5648] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup
[  475.657996][ T5648] ft260 0003:0403:6030.000B: failed to retrieve status: -32
[  475.734589][ T5747] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  475.869846][ T8066] ft260 0003:0403:6030.000B: ft260_hid_output_report_check_status: failed to start transfer, ret -38
[  475.881767][ T5747] usb 3-1: device descriptor read/64, error -71
[  475.921111][ T5772] usb 2-1: USB disconnect, device number 35
[  476.000972][ T8094] netlink: 'syz.1.493': attribute type 1 has an invalid length.
[  476.033743][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[  476.047092][ T8066] ft260 0003:0403:6030.000B: failed to reset I2C controller: -108
[  476.062376][ T8094] veth4: entered allmulticast mode
[  476.112793][ T8096] bond2: (slave veth5): Enslaving as an active interface with a down link
[  476.126031][ T5747] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  476.137937][ T8094] bond2: entered promiscuous mode
[  476.138000][ T8094] bond2: entered allmulticast mode
[  476.150390][ T8094] 8021q: adding VLAN 0 to HW filter on device bond2
[  476.264776][ T5747] usb 3-1: device descriptor read/64, error -71
[  476.377120][ T5747] usb usb3-port1: attempt power cycle
[  476.463959][ T8099] netlink: 136 bytes leftover after parsing attributes in process `syz.1.495'.
[  476.479404][ T8105] kvm: user requested TSC rate below hardware speed
[  476.492226][ T8105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  476.629905][ T8111] netlink: 156 bytes leftover after parsing attributes in process `syz.1.499'.
[  476.668482][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'.
[  476.682724][    T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  476.726886][ T5747] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  476.753829][ T5747] usb 3-1: device descriptor read/8, error -71
[  476.769313][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.500'.
[  476.800217][ T8114] team0: Port device team_slave_0 removed
[  476.826483][    T9] usb 5-1: device descriptor read/64, error -71
[  476.994729][ T5747] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  477.019456][ T5747] usb 3-1: device descriptor read/8, error -71
[  477.065219][    T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  477.125065][ T5747] usb usb3-port1: unable to enumerate USB device
[  477.155314][ T5749] usb 4-1: reset high-speed USB device number 48 using dummy_hcd
[  477.166631][ T5749] usb 4-1: device reset changed ep0 maxpacket size!
[  477.179283][ T5713] usb 4-1: USB disconnect, device number 48
[  477.196225][    T9] usb 5-1: device descriptor read/64, error -71
[  477.305365][    T9] usb usb5-port1: attempt power cycle
[  477.345525][ T5713] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  477.495115][ T5713] usb 4-1: Using ep0 maxpacket: 16
[  477.496849][ T5713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  477.501111][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.501198][ T5713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  477.501271][ T5713] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  477.501337][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024
[  477.501397][ T5713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  477.501454][ T5713] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  477.508260][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  477.508340][ T5713] usb 4-1: SerialNumber: syz
[  477.510023][ T5749] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  477.538129][ T8122] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  477.547058][ T8122] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  477.655275][    T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  477.679039][    T9] usb 5-1: device descriptor read/8, error -71
[  477.702334][ T8149] net_ratelimit: 6 callbacks suppressed
[  477.702403][ T8149] ip_tables: iptables: counters copy to user failed while replacing table
[  477.717584][ T5749] usb 1-1: Using ep0 maxpacket: 16
[  477.724678][ T5749] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  477.736188][ T5749] usb 1-1: config index 0 descriptor too short (expected 65, got 36)
[  477.744412][ T5749] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  477.744559][ T5749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  477.744590][ T5749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  477.744620][ T5749] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  477.744666][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.801222][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.813017][ T5749] usb 1-1: config 0 descriptor??
[  477.821942][ T8144] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  477.837013][ T8118] loop4: detected capacity change from 0 to 7
[  477.853675][ T5749] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20
[  477.890292][ T8118]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  477.890343][ T8118] loop4: partition table partially beyond EOD, truncated
[  477.897776][ T8118] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  477.926107][    T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  477.947579][    T9] usb 5-1: device descriptor read/8, error -71
[  478.008706][ T5713] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  478.026655][ T5670] udevd[5670]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  478.034158][ T5713] usb 4-1: USB disconnect, device number 49
[  478.055595][    T9] usb usb5-port1: unable to enumerate USB device
[  478.081163][    T9] usb 1-1: USB disconnect, device number 46
[  478.117743][ T4970] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  478.463179][ T8153] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000)
[  478.467465][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[  478.467524][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[  478.467731][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[  478.804762][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.125499][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.314606][ T5749] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  479.464549][ T5749] usb 3-1: Using ep0 maxpacket: 16
[  479.478856][ T5749] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  479.485471][ T5749] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  479.485562][ T5749] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  479.491075][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.491146][ T5749] usb 3-1: Product: ⡩ౝ焰變髑쉮베薱ၯ˸徨ᘍꥱ譸玱ᬅ쎔䁅꒛Ｃ位罾赅접櫺嫘븛⿼䩑۝뷙Ō劣坈쓟딽箋聆㯢ﻴḦ傂꤀圁䭦瞵䣭雐膁屰
[  479.491385][ T5749] usb 3-1: SerialNumber: 冊⍓⫋呓㯥ჽ亱ﴻ埥쩴塞죑긧㤒鼮蹎麂碎肯都仵뭫东븕ꌘ疈宿쓾鋌娤୚᭝蒽⍅ө攢ꌡド෼읺쓘膊㦉ଂ⎓ꔲা䈗㚟塮䠺廡ԗ䉈ꆭ雘꫈勽ꃟ
[  479.742351][ T5749] cdc_ncm 3-1:1.0: bind() failure
[  479.765773][ T5749] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  479.765849][ T5749] cdc_ncm 3-1:1.1: bind() failure
[  479.808314][ T5749] usb 3-1: USB disconnect, device number 24
[  479.850611][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.921720][ T8177] netlink: 156 bytes leftover after parsing attributes in process `syz.4.512'.
[  480.144143][ T8183] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  480.277098][ T5749] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[  480.414988][ T5749] usb 3-1: device descriptor read/64, error -71
[  480.655653][ T5749] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[  480.798622][ T5749] usb 3-1: device descriptor read/64, error -71
[  480.885950][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.904936][ T5749] usb usb3-port1: attempt power cycle
[  481.257707][ T5749] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[  481.276414][ T5749] usb 3-1: device descriptor read/8, error -71
[  481.325211][ T5772] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  481.484692][ T5772] usb 2-1: Using ep0 maxpacket: 16
[  481.492166][ T5772] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  481.498614][ T5772] usb 2-1: config 4 has an invalid interface number: 9 but max is 0
[  481.498688][ T5772] usb 2-1: config 4 has no interface number 0
[  481.498803][ T5772] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  481.498874][ T5772] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  481.498939][ T5772] usb 2-1: config 4 interface 9 has no altsetting 0
[  481.511755][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.511784][ T5772] usb 2-1: Product: syz
[  481.511799][ T5772] usb 2-1: Manufacturer: syz
[  481.511816][ T5772] usb 2-1: SerialNumber: syz
[  481.542729][ T5749] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  481.559964][ T8188] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  481.560113][ T8188] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  481.570062][ T5749] usb 3-1: device descriptor read/8, error -71
[  481.660086][ T5772] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  481.676396][ T5749] usb usb3-port1: unable to enumerate USB device
[  481.858238][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.1.517'.
[  481.898838][ T5732] usb 2-1: USB disconnect, device number 36
[  481.901550][ T5752] usb 2-1: Failed to submit usb control message: -71
[  481.901658][ T5752] usb 2-1: unable to send the bmi data to the device: -71
[  481.901711][ T5752] usb 2-1: unable to get target info from device
[  481.901752][ T5752] usb 2-1: could not get target info (-71)
[  481.902651][ T5752] usb 2-1: could not probe fw (-71)
[  481.942879][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.166380][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.197312][ T8201] CUSE: unknown device info "�"
[  482.202430][ T8201] CUSE: unknown device info "�"
[  482.208446][ T8201] CUSE: unknown device info "
"
[  482.213497][ T8201] CUSE: unknown device info "�"
[  482.219479][ T8201] CUSE: unknown device info "����"
[  482.226732][ T8201] CUSE: unknown device info ""
[  482.232000][ T8201] CUSE: unknown device info ""
[  482.239318][ T8201] CUSE: unknown device info ""
[  482.247038][ T8201] CUSE: zero length info key specified
[  482.316144][ T8201] dvmrp6: left allmulticast mode
[  482.788025][ T8215] fuse: Bad value for 'fd'
[  482.793409][ T8207] CIFS: VFS: UNC: missing share name
[  482.794072][ T8207] CIFS: VFS: Malformed UNC in devname
[  482.943958][ T8226] netlink: 156 bytes leftover after parsing attributes in process `syz.0.525'.
[  482.965576][ T5713] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  482.966572][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.136185][ T5713] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  483.147658][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  483.147705][ T5713] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  483.147763][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.196188][ T5713] usb 2-1: probing VID:PID(0424:012C)   
[  483.215926][ T5713] usb 2-1: vub300 testing BULK IN EndPoint(0) 81
[  483.224160][ T5713] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02
[  483.224216][ T5713] usb 2-1: vub300 testing BULK IN EndPoint(2) 83
[  483.224241][ T5713] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04
[  483.224276][ T5713] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  483.285687][ T5772] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  483.364656][ T5659] Bluetooth: hci1: command 0x0406 tx timeout
[  483.411260][ T8233] ALSA: mixer_oss: invalid OSS volume 'ELFJ

'
[  483.411306][ T8233] ALSA: mixer_oss: invalid OSS volume ''
[  483.417319][ T8233] ALSA: mixer_oss: invalid OSS volume '�U�B�@���ƒa'
[  483.460387][ T5772] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  483.465241][ T5772] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.465394][ T5772] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  483.465461][ T5772] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  483.465549][ T5772] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  483.476085][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.476157][ T5772] usb 5-1: Product: syz
[  483.476199][ T5772] usb 5-1: Manufacturer: syz
[  483.476440][ T5772] usb 5-1: SerialNumber: syz
[  483.494184][ T8228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  483.614422][ T5713] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  483.813690][ T5713] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  484.009663][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.146928][ T8247] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  484.673427][ T5772] cdc_ncm 5-1:1.0: bind() failure
[  484.702804][ T5772] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  484.706998][    T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  484.718146][ T5772] cdc_ncm 5-1:1.1: bind() failure
[  484.844269][ T5772] usb 2-1: USB disconnect, device number 37
[  484.858527][ T5713] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  484.870048][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  484.870129][    T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=be01, bcdDevice=fa.67
[  484.877861][    T9] usb 1-1: config index 0 descriptor too short (expected 259, got 18)
[  484.877901][    T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  484.877932][    T9] usb 1-1: can't read configurations, error -22
[  484.950746][ T5772] USB vub300 remote SDIO host controller[0] now disconnected
[  484.982504][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.983646][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.017171][    T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  485.045211][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.137560][ T5772] usb 5-1: USB disconnect, device number 55
[  485.167417][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  485.167484][    T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=be01, bcdDevice=fa.67
[  485.186183][    T9] usb 1-1: config index 0 descriptor too short (expected 259, got 18)
[  485.186232][    T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  485.186267][    T9] usb 1-1: can't read configurations, error -22
[  485.187239][    T9] usb usb1-port1: attempt power cycle
[  485.206864][ T5732] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  485.211939][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.368569][ T5732] usb 4-1: unable to get BOS descriptor or descriptor too short
[  485.370008][ T5732] usb 4-1: not running at top speed; connect to a high speed hub
[  485.370101][ T5732] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d
[  485.373179][ T5732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  485.380142][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.380221][ T5732] usb 4-1: Product: syz
[  485.380263][ T5732] usb 4-1: Manufacturer: syz
[  485.380312][ T5732] usb 4-1: SerialNumber: syz
[  485.480198][ T8277] netlink: 156 bytes leftover after parsing attributes in process `syz.1.540'.
[  485.526570][    T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  485.549758][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  485.549893][    T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=be01, bcdDevice=fa.67
[  485.569950][ T5649] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  485.572394][    T9] usb 1-1: config index 0 descriptor too short (expected 259, got 18)
[  485.572521][    T9] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  485.572607][    T9] usb 1-1: can't read configurations, error -22
[  485.659860][ T5732] peak_usb 4-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  485.659921][ T5732] peak_usb 4-1:1.0: unable to read PCAN-USB serial number (err -22)
[  485.685039][    C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561
** replaying previous printk message **
[  485.685086][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5675, name: syz-executor
[  485.685123][    C0] preempt_count: 101, expected: 0
[  485.685139][    C0] RCU nest depth: 1, expected: 0
[  485.685167][    C0] locks held by syz-executor/5675: 5, last CPU#0:
[  485.685303][    C0]  #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[  485.685432][    C0]  #1: ffff88807ed2c378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  485.685523][    C0]  #2: ffff888025d09078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  485.685621][    C0]  #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  485.685708][    C0]  #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  485.685803][    C0] Preemption disabled at:
[  485.685814][    C0] [<ffffffff81336576>] preempt_schedule_thunk+0x16/0x40
[  485.685863][    C0] CPU: 0 UID: 0 PID: 5675 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.685896][    C0] Tainted: [L]=SOFTLOCKUP
[  485.685905][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.685923][    C0] Call Trace:
[  485.685937][    C0]  <IRQ>
[  485.685947][    C0]  dump_stack_lvl+0xe8/0x150
[  485.685983][    C0]  __might_resched+0x36a/0x4c0
[  485.686027][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  485.686057][    C0]  __cancel_work_sync+0x6d/0x110
[  485.686105][    C0]  mmc_free_host+0x19/0x30
[  485.686211][    C0]  call_timer_fn+0x18d/0x5f0
[  485.686241][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  485.686312][    C0]  ? call_timer_fn+0xd5/0x5f0
[  485.686339][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  485.686379][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  485.686457][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  485.686492][    C0]  __run_timer_base+0x652/0x8b0
[  485.686531][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  485.686628][    C0]  ? ktime_get+0x1f5/0x220
[  485.686717][    C0]  ? lapic_next_event+0x11/0x20
[  485.686814][    C0]  run_timer_softirq+0xb7/0x170
[  485.686898][    C0]  handle_softirqs+0x226/0x860
[  485.686982][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  485.687077][    C0]  __irq_exit_rcu+0xcb/0x220
[  485.687159][    C0]  irq_exit_rcu+0x9/0x30
[  485.687230][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  485.687332][    C0]  </IRQ>
[  485.687352][    C0]  <TASK>
[  485.687376][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  485.687440][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  485.687522][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f7 ed 50 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  485.687574][    C0] RSP: 0018:ffffc90004327020 EFLAGS: 00000206
[  485.687625][    C0] RAX: 00000000000f564d RBX: ffff8880b863c8e0 RCX: 8000000000000001
[  485.687675][    C0] RDX: 0000000000000006 RSI: ffffffff8e4744cc RDI: ffffffff8c6d9480
[  485.687715][    C0] RBP: ffffc90004327070 R08: ffffffff907a167f R09: 1ffffffff20f42cf
[  485.687751][    C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff88803588ddc0
[  485.687788][    C0] R13: ffff8880b863c8b8 R14: dffffc0000000000 R15: 1ffff110170c791c
[  485.687900][    C0]  __schedule+0x17e3/0x58f0
[  485.688027][    C0]  ? irqentry_exit+0x218/0x910
[  485.688132][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  485.688214][    C0]  ? __pfx___schedule+0x10/0x10
[  485.688326][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  485.688398][    C0]  preempt_schedule_common+0x7f/0xd0
[  485.688486][    C0]  ? copy_pmd_range+0x5145/0x5c10
[  485.688574][    C0]  preempt_schedule_thunk+0x16/0x40
[  485.688657][    C0]  _raw_spin_unlock+0x41/0x50
[  485.688729][    C0]  copy_pmd_range+0x5176/0x5c10
[  485.688843][    C0]  ? stack_depot_save_flags+0x33/0x7f0
[  485.689021][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  485.689123][    C0]  ? __lock_acquire+0x6df/0x2e50
[  485.689199][    C0]  ? mas_wr_store_type+0xf80/0x1980
[  485.689367][    C0]  copy_page_range+0xc82/0x1290
[  485.689495][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  485.689588][    C0]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  485.689691][    C0]  dup_mmap+0xf17/0x1dc0
[  485.689811][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  485.689894][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  485.690006][    C0]  ? lock_acquire+0x115/0x350
[  485.690111][    C0]  copy_mm+0x11a/0x480
[  485.690193][    C0]  ? copy_process+0xd3c/0x43e0
[  485.690266][    C0]  copy_process+0x1e75/0x43e0
[  485.690367][    C0]  ? copy_process+0xd3c/0x43e0
[  485.690492][    C0]  ? __pfx_copy_process+0x10/0x10
[  485.690598][    C0]  kernel_clone+0x2d7/0x940
[  485.690693][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  485.690842][    C0]  __x64_sys_clone+0x1b6/0x230
[  485.690948][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  485.691081][    C0]  ? do_user_addr_fault+0xc4c/0x1340
[  485.691165][    C0]  do_syscall_64+0x166/0x520
[  485.691258][    C0]  ? trace_irq_disable+0x3b/0x140
[  485.691327][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.691388][    C0]  ? clear_bhb_loop+0x70/0xc0
[  485.691454][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.691516][    C0] RIP: 0033:0x7fdafa5c6bd2
[  485.691576][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  485.691627][    C0] RSP: 002b:00007fdafa94fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  485.691689][    C0] RAX: ffffffffffffffda RBX: 00007fdafa94fc60 RCX: 00007fdafa5c6bd2
[  485.691731][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  485.691757][    C0] RBP: 00007fdafa94fdec R08: 0000000000000000 R09: 0000000000000001
[  485.691790][    C0] R10: 000055558fe747d0 R11: 0000000000000246 R12: 0000000000000001
[  485.691833][    C0] R13: 00000000000927c0 R14: 0000000000076876 R15: 00007fdafa94fe40
[  485.691917][    C0]  </TASK>
[  485.695971][    C0] 
[  486.095179][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.273594][    C0] =============================
[  486.278558][    C0] WARNING: suspicious RCU usage
[  486.283467][    C0] syzkaller #0 Tainted: G        W    L     
[  486.289516][    C0] -----------------------------
[  486.294509][    C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section!
[  486.306567][    C0] 
[  486.306567][    C0] other info that might help us debug this:
[  486.306567][    C0] 
[  486.316881][    C0] 
[  486.316881][    C0] rcu_scheduler_active = 2, debug_locks = 1
[  486.325056][    C0] locks held by syz-executor/5675: 5, last CPU#0:
[  486.331511][    C0]  #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[  486.340367][    C0]  #1: ffff88807ed2c378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  486.349564][    C0]  #2: ffff888025d09078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  486.358957][    C0]  #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  486.368571][    C0]  #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  486.379182][    C0] 
[  486.379182][    C0] stack backtrace:
[  486.385157][    C0] CPU: 0 UID: 0 PID: 5675 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  486.396240][    C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  486.401476][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  486.411576][    C0] Call Trace:
[  486.414914][    C0]  <IRQ>
[  486.417800][    C0]  dump_stack_lvl+0xe8/0x150
[  486.422457][    C0]  lockdep_rcu_suspicious+0x140/0x1d0
[  486.427900][    C0]  __synchronize_srcu+0x157/0x2f0
[  486.433005][    C0]  ? __pfx___synchronize_srcu+0x10/0x10
[  486.438596][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  486.443697][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  486.449565][    C0]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  486.455177][    C0]  ? synchronize_srcu+0x20a/0x260
[  486.460248][    C0]  wakeup_source_unregister+0x129/0x3f0
[  486.465974][    C0]  mmc_host_classdev_release+0x47/0x100
[  486.471581][    C0]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  486.477798][    C0]  device_release+0xc4/0x1f0
[  486.482526][    C0]  kobject_put+0x222/0x550
[  486.487023][    C0]  ? mmc_pwrseq_free+0x86/0xa0
[  486.491835][    C0]  call_timer_fn+0x18d/0x5f0
[  486.496470][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  486.503192][    C0]  ? call_timer_fn+0xd5/0x5f0
[  486.507915][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  486.513056][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.518289][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  486.524988][    C0]  __run_timer_base+0x652/0x8b0
[  486.529886][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  486.535273][    C0]  ? ktime_get+0x1f5/0x220
[  486.539744][    C0]  ? lapic_next_event+0x11/0x20
[  486.544645][    C0]  run_timer_softirq+0xb7/0x170
[  486.549530][    C0]  handle_softirqs+0x226/0x860
[  486.554355][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  486.559160][    C0]  __irq_exit_rcu+0xcb/0x220
[  486.563782][    C0]  irq_exit_rcu+0x9/0x30
[  486.568063][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  486.573714][    C0]  </IRQ>
[  486.576657][    C0]  <TASK>
[  486.579591][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.585600][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  486.591421][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f7 ed 50 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  486.611042][    C0] RSP: 0018:ffffc90004327020 EFLAGS: 00000206
[  486.617144][    C0] RAX: 00000000000f564d RBX: ffff8880b863c8e0 RCX: 8000000000000001
[  486.625141][    C0] RDX: 0000000000000006 RSI: ffffffff8e4744cc RDI: ffffffff8c6d9480
[  486.633122][    C0] RBP: ffffc90004327070 R08: ffffffff907a167f R09: 1ffffffff20f42cf
[  486.641119][    C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff88803588ddc0
[  486.649131][    C0] R13: ffff8880b863c8b8 R14: dffffc0000000000 R15: 1ffff110170c791c
[  486.657160][    C0]  __schedule+0x17e3/0x58f0
[  486.661734][    C0]  ? irqentry_exit+0x218/0x910
[  486.666525][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  486.671566][    C0]  ? __pfx___schedule+0x10/0x10
[  486.676444][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  486.681841][    C0]  preempt_schedule_common+0x7f/0xd0
[  486.687176][    C0]  ? copy_pmd_range+0x5145/0x5c10
[  486.692235][    C0]  preempt_schedule_thunk+0x16/0x40
[  486.697466][    C0]  _raw_spin_unlock+0x41/0x50
[  486.702159][    C0]  copy_pmd_range+0x5176/0x5c10
[  486.707067][    C0]  ? stack_depot_save_flags+0x33/0x7f0
[  486.712595][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  486.718033][    C0]  ? __lock_acquire+0x6df/0x2e50
[  486.723028][    C0]  ? mas_wr_store_type+0xf80/0x1980
[  486.728252][    C0]  copy_page_range+0xc82/0x1290
[  486.733146][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  486.738451][    C0]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  486.745414][    C0]  dup_mmap+0xf17/0x1dc0
[  486.749696][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  486.754390][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  486.759457][    C0]  ? lock_acquire+0x115/0x350
[  486.764208][    C0]  copy_mm+0x11a/0x480
[  486.768309][    C0]  ? copy_process+0xd3c/0x43e0
[  486.773085][    C0]  copy_process+0x1e75/0x43e0
[  486.777797][    C0]  ? copy_process+0xd3c/0x43e0
[  486.782588][    C0]  ? __pfx_copy_process+0x10/0x10
[  486.787656][    C0]  kernel_clone+0x2d7/0x940
[  486.792183][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  486.797257][    C0]  __x64_sys_clone+0x1b6/0x230
[  486.802061][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  486.807395][    C0]  ? do_user_addr_fault+0xc4c/0x1340
[  486.812720][    C0]  do_syscall_64+0x166/0x520
[  486.817324][    C0]  ? trace_irq_disable+0x3b/0x140
[  486.822354][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.828455][    C0]  ? clear_bhb_loop+0x70/0xc0
[  486.833190][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.839116][    C0] RIP: 0033:0x7fdafa5c6bd2
[  486.843559][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  486.863259][    C0] RSP: 002b:00007fdafa94fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  486.871687][    C0] RAX: ffffffffffffffda RBX: 00007fdafa94fc60 RCX: 00007fdafa5c6bd2
[  486.879688][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  486.887666][    C0] RBP: 00007fdafa94fdec R08: 0000000000000000 R09: 0000000000000001
[  486.895648][    C0] R10: 000055558fe747d0 R11: 0000000000000246 R12: 0000000000000001
[  486.903637][    C0] R13: 00000000000927c0 R14: 0000000000076876 R15: 00007fdafa94fe40
[  486.911668][    C0]  </TASK>
[  486.914794][    C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472
[  486.914817][ 
** replaying previous printk message **
[  486.914817][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5675, name: syz-executor
[  486.914876][    C0] preempt_count: 101, expected: 0
[  486.914915][    C0] RCU nest depth: 1, expected: 0
[  486.914954][    C0] locks held by syz-executor/5675: 5, last CPU#0:
[  486.915008][    C0]  #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[  486.915191][    C0]  #1: ffff88807ed2c378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  486.915367][    C0]  #2: ffff888025d09078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  486.915548][    C0]  #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  486.915709][    C0]  #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  486.915876][    C0] Preemption disabled at:
[  486.915890][    C0] [<ffffffff81336576>] preempt_schedule_thunk+0x16/0x40
[  486.915994][    C0] CPU: 0 UID: 0 PID: 5675 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  486.916081][    C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  486.916110][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  486.916138][    C0] Call Trace:
[  486.916168][    C0]  <IRQ>
[  486.916191][    C0]  dump_stack_lvl+0xe8/0x150
[  486.916283][    C0]  __might_resched+0x36a/0x4c0
[  486.916388][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  486.916477][    C0]  __synchronize_srcu+0x1a1/0x2f0
[  486.916536][    C0]  ? __pfx___synchronize_srcu+0x10/0x10
[  486.916589][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  486.916718][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  486.916786][    C0]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  486.916883][    C0]  ? synchronize_srcu+0x20a/0x260
[  486.916953][    C0]  wakeup_source_unregister+0x129/0x3f0
[  486.917049][    C0]  mmc_host_classdev_release+0x47/0x100
[  486.917139][    C0]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  486.917231][    C0]  device_release+0xc4/0x1f0
[  486.917304][    C0]  kobject_put+0x222/0x550
[  486.917374][    C0]  ? mmc_pwrseq_free+0x86/0xa0
[  486.917440][    C0]  call_timer_fn+0x18d/0x5f0
[  486.917506][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  486.917588][    C0]  ? call_timer_fn+0xd5/0x5f0
[  486.917670][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  486.917793][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.917874][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  486.917957][    C0]  __run_timer_base+0x652/0x8b0
[  486.918053][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  486.918137][    C0]  ? ktime_get+0x1f5/0x220
[  486.918199][    C0]  ? lapic_next_event+0x11/0x20
[  486.918282][    C0]  run_timer_softirq+0xb7/0x170
[  486.918348][    C0]  handle_softirqs+0x226/0x860
[  486.918433][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  486.918535][    C0]  __irq_exit_rcu+0xcb/0x220
[  486.918620][    C0]  irq_exit_rcu+0x9/0x30
[  486.918692][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  486.918781][    C0]  </IRQ>
[  486.918796][    C0]  <TASK>
[  486.918824][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.918889][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  486.918970][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f7 ed 50 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  486.919022][    C0] RSP: 0018:ffffc90004327020 EFLAGS: 00000206
[  486.919081][    C0] RAX: 00000000000f564d RBX: ffff8880b863c8e0 RCX: 8000000000000001
[  486.919125][    C0] RDX: 0000000000000006 RSI: ffffffff8e4744cc RDI: ffffffff8c6d9480
[  486.919174][    C0] RBP: ffffc90004327070 R08: ffffffff907a167f R09: 1ffffffff20f42cf
[  486.919230][    C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff88803588ddc0
[  486.919272][    C0] R13: ffff8880b863c8b8 R14: dffffc0000000000 R15: 1ffff110170c791c
[  486.919386][    C0]  __schedule+0x17e3/0x58f0
[  486.919511][    C0]  ? irqentry_exit+0x218/0x910
[  486.919597][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  486.919689][    C0]  ? __pfx___schedule+0x10/0x10
[  486.919792][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  486.919864][    C0]  preempt_schedule_common+0x7f/0xd0
[  486.919940][    C0]  ? copy_pmd_range+0x5145/0x5c10
[  486.920022][    C0]  preempt_schedule_thunk+0x16/0x40
[  486.920105][    C0]  _raw_spin_unlock+0x41/0x50
[  486.920171][    C0]  copy_pmd_range+0x5176/0x5c10
[  486.920304][    C0]  ? stack_depot_save_flags+0x33/0x7f0
[  486.920423][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  486.920547][    C0]  ? __lock_acquire+0x6df/0x2e50
[  486.920635][    C0]  ? mas_wr_store_type+0xf80/0x1980
[  486.920742][    C0]  copy_page_range+0xc82/0x1290
[  486.920851][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  486.920935][    C0]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  486.921046][    C0]  dup_mmap+0xf17/0x1dc0
[  486.921173][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  486.921249][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  486.921364][    C0]  ? lock_acquire+0x115/0x350
[  486.921467][    C0]  copy_mm+0x11a/0x480
[  486.921550][    C0]  ? copy_process+0xd3c/0x43e0
[  486.921632][    C0]  copy_process+0x1e75/0x43e0
[  486.921734][    C0]  ? copy_process+0xd3c/0x43e0
[  486.921856][    C0]  ? __pfx_copy_process+0x10/0x10
[  486.921996][    C0]  kernel_clone+0x2d7/0x940
[  486.922090][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  486.922204][    C0]  __x64_sys_clone+0x1b6/0x230
[  486.922296][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  486.922422][    C0]  ? do_user_addr_fault+0xc4c/0x1340
[  486.922515][    C0]  do_syscall_64+0x166/0x520
[  486.922601][    C0]  ? trace_irq_disable+0x3b/0x140
[  486.922678][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.922741][    C0]  ? clear_bhb_loop+0x70/0xc0
[  486.922812][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.922867][    C0] RIP: 0033:0x7fdafa5c6bd2
[  486.922927][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  486.922979][    C0] RSP: 002b:00007fdafa94fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  486.923032][    C0] RAX: ffffffffffffffda RBX: 00007fdafa94fc60 RCX: 00007fdafa5c6bd2
[  486.923081][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  486.923118][    C0] RBP: 00007fdafa94fdec R08: 0000000000000000 R09: 0000000000000001
[  486.923158][    C0] R10: 000055558fe747d0 R11: 0000000000000246 R12: 0000000000000001
[  486.923192][    C0] R13: 00000000000927c0 R14: 0000000000076876 R15: 00007fdafa94fe40
[  486.923298][    C0]  </TASK>
[  486.923331][    C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90004320000, but annotated.
[  486.925188][    C0] ------------[ cut here ]------------
[  486.925218][    C0] 1
[  486.925238][    C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz-executor/5675
[  487.570965][    C0] Modules linked in:
[  487.574897][    C0] CPU: 0 UID: 0 PID: 5675 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  487.585946][    C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  487.591197][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  487.601305][    C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  487.607235][    C0] Code: cc cc cc 41 ff c7 44 89 3d c9 75 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d fa 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 cd 6e 0a 3b 05 9f
[  487.626865][    C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046
[  487.632962][    C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 0978036a12caea00
[  487.640949][    C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  487.648934][    C0] RBP: ffff88803588dde0 R08: 0000000000000100 R09: 0000000000080000
[  487.656923][    C0] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: 1ffff92000000f4c
[  487.664920][    C0] R13: ffff888021b995e8 R14: dffffc0000000000 R15: 0000000000000001
[  487.672915][    C0] FS:  000055558fe74500(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000
[  487.681864][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  487.688469][    C0] CR2: 00007fdafb3556c8 CR3: 00000000640ca000 CR4: 00000000003526f0
[  487.696463][    C0] Call Trace:
[  487.699762][    C0]  <IRQ>
[  487.702631][    C0]  ? __init_swait_queue_head+0xa8/0x150
[  487.708239][    C0]  __synchronize_srcu+0x1d5/0x2f0
[  487.713330][    C0]  ? __pfx___synchronize_srcu+0x10/0x10
[  487.718918][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  487.723988][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  487.729822][    C0]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  487.735407][    C0]  ? synchronize_srcu+0x20a/0x260
[  487.740450][    C0]  wakeup_source_unregister+0x129/0x3f0
[  487.746032][    C0]  mmc_host_classdev_release+0x47/0x100
[  487.751637][    C0]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  487.757821][    C0]  device_release+0xc4/0x1f0
[  487.762443][    C0]  kobject_put+0x222/0x550
[  487.766883][    C0]  ? mmc_pwrseq_free+0x86/0xa0
[  487.771678][    C0]  call_timer_fn+0x18d/0x5f0
[  487.776316][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  487.783016][    C0]  ? call_timer_fn+0xd5/0x5f0
[  487.787716][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  487.792862][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  487.798092][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  487.804794][    C0]  __run_timer_base+0x652/0x8b0
[  487.809684][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  487.815105][    C0]  ? ktime_get+0x1f5/0x220
[  487.819563][    C0]  ? lapic_next_event+0x11/0x20
[  487.824469][    C0]  run_timer_softirq+0xb7/0x170
[  487.829367][    C0]  handle_softirqs+0x226/0x860
[  487.834174][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  487.838991][    C0]  __irq_exit_rcu+0xcb/0x220
[  487.843663][    C0]  irq_exit_rcu+0x9/0x30
[  487.847959][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  487.853651][    C0]  </IRQ>
[  487.856606][    C0]  <TASK>
[  487.859568][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  487.865579][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  487.871416][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f7 ed 50 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  487.891041][    C0] RSP: 0018:ffffc90004327020 EFLAGS: 00000206
[  487.897136][    C0] RAX: 00000000000f564d RBX: ffff8880b863c8e0 RCX: 8000000000000001
[  487.905159][    C0] RDX: 0000000000000006 RSI: ffffffff8e4744cc RDI: ffffffff8c6d9480
[  487.913155][    C0] RBP: ffffc90004327070 R08: ffffffff907a167f R09: 1ffffffff20f42cf
[  487.921160][    C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff88803588ddc0
[  487.929163][    C0] R13: ffff8880b863c8b8 R14: dffffc0000000000 R15: 1ffff110170c791c
[  487.937353][    C0]  __schedule+0x17e3/0x58f0
[  487.941992][    C0]  ? irqentry_exit+0x218/0x910
[  487.946817][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  487.951870][    C0]  ? __pfx___schedule+0x10/0x10
[  487.956753][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  487.962150][    C0]  preempt_schedule_common+0x7f/0xd0
[  487.967465][    C0]  ? copy_pmd_range+0x5145/0x5c10
[  487.972515][    C0]  preempt_schedule_thunk+0x16/0x40
[  487.977760][    C0]  _raw_spin_unlock+0x41/0x50
[  487.982462][    C0]  copy_pmd_range+0x5176/0x5c10
[  487.987357][    C0]  ? stack_depot_save_flags+0x33/0x7f0
[  487.992877][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  487.998108][    C0]  ? __lock_acquire+0x6df/0x2e50
[  488.003069][    C0]  ? mas_wr_store_type+0xf80/0x1980
[  488.008314][    C0]  copy_page_range+0xc82/0x1290
[  488.013200][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  488.018514][    C0]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  488.025479][    C0]  dup_mmap+0xf17/0x1dc0
[  488.029761][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  488.034466][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.039555][    C0]  ? lock_acquire+0x115/0x350
[  488.044271][    C0]  copy_mm+0x11a/0x480
[  488.048366][    C0]  ? copy_process+0xd3c/0x43e0
[  488.053148][    C0]  copy_process+0x1e75/0x43e0
[  488.057881][    C0]  ? copy_process+0xd3c/0x43e0
[  488.062687][    C0]  ? __pfx_copy_process+0x10/0x10
[  488.067760][    C0]  kernel_clone+0x2d7/0x940
[  488.072301][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  488.077368][    C0]  __x64_sys_clone+0x1b6/0x230
[  488.082163][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  488.087491][    C0]  ? do_user_addr_fault+0xc4c/0x1340
[  488.092807][    C0]  do_syscall_64+0x166/0x520
[  488.097425][    C0]  ? trace_irq_disable+0x3b/0x140
[  488.102479][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.108625][    C0]  ? clear_bhb_loop+0x70/0xc0
[  488.113346][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.119268][    C0] RIP: 0033:0x7fdafa5c6bd2
[  488.123735][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  488.143369][    C0] RSP: 002b:00007fdafa94fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  488.151830][    C0] RAX: ffffffffffffffda RBX: 00007fdafa94fc60 RCX: 00007fdafa5c6bd2
[  488.159820][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  488.167845][    C0] RBP: 00007fdafa94fdec R08: 0000000000000000 R09: 0000000000000001
[  488.175860][    C0] R10: 000055558fe747d0 R11: 0000000000000246 R12: 0000000000000001
[  488.183864][    C0] R13: 00000000000927c0 R14: 0000000000076876 R15: 00007fdafa94fe40
[  488.191875][    C0]  </TASK>
[  488.194950][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  488.202250][    C0] CPU: 0 UID: 0 PID: 5675 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  488.213317][    C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  488.218522][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  488.228605][    C0] Call Trace:
[  488.231918][    C0]  <IRQ>
[  488.234793][    C0]  vpanic+0x56d/0xa60
[  488.238849][    C0]  ? __pfx__printk+0x10/0x10
[  488.243463][    C0]  ? __pfx_vpanic+0x10/0x10
[  488.247996][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  488.253337][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  488.258568][    C0]  panic+0xc5/0xd0
[  488.262319][    C0]  ? __pfx_panic+0x10/0x10
[  488.266777][    C0]  __warn+0x315/0x4c0
[  488.270809][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  488.276124][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  488.281452][    C0]  __report_bug+0x276/0x570
[  488.286096][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  488.291420][    C0]  ? __pfx___report_bug+0x10/0x10
[  488.296515][    C0]  ? __wake_up_klogd+0xf0/0x130
[  488.301421][    C0]  ? vprintk_emit+0x4ee/0x560
[  488.306138][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  488.311201][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  488.316524][    C0]  report_bug+0x16b/0x220
[  488.320895][    C0]  ? __debug_object_init+0x2c4/0x3c0
[  488.326214][    C0]  ? __debug_object_init+0x2c6/0x3c0
[  488.331539][    C0]  handle_bug+0x9c/0x200
[  488.335813][    C0]  exc_invalid_op+0x1a/0x50
[  488.340345][    C0]  asm_exc_invalid_op+0x1a/0x20
[  488.345257][    C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  488.351200][    C0] Code: cc cc cc 41 ff c7 44 89 3d c9 75 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d fa 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 cd 6e 0a 3b 05 9f
[  488.370845][    C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046
[  488.376978][    C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 0978036a12caea00
[  488.384988][    C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  488.392991][    C0] RBP: ffff88803588dde0 R08: 0000000000000100 R09: 0000000000080000
[  488.401204][    C0] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: 1ffff92000000f4c
[  488.409211][    C0] R13: ffff888021b995e8 R14: dffffc0000000000 R15: 0000000000000001
[  488.417269][    C0]  ? __debug_object_init+0x2c3/0x3c0
[  488.422594][    C0]  ? __init_swait_queue_head+0xa8/0x150
[  488.428182][    C0]  __synchronize_srcu+0x1d5/0x2f0
[  488.433246][    C0]  ? __pfx___synchronize_srcu+0x10/0x10
[  488.438820][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.443901][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  488.449750][    C0]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  488.455350][    C0]  ? synchronize_srcu+0x20a/0x260
[  488.460407][    C0]  wakeup_source_unregister+0x129/0x3f0
[  488.465996][    C0]  mmc_host_classdev_release+0x47/0x100
[  488.471577][    C0]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  488.477763][    C0]  device_release+0xc4/0x1f0
[  488.482379][    C0]  kobject_put+0x222/0x550
[  488.486818][    C0]  ? mmc_pwrseq_free+0x86/0xa0
[  488.491610][    C0]  call_timer_fn+0x18d/0x5f0
[  488.496221][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  488.502913][    C0]  ? call_timer_fn+0xd5/0x5f0
[  488.507611][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  488.512759][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  488.517986][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  488.524689][    C0]  __run_timer_base+0x652/0x8b0
[  488.529612][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  488.535012][    C0]  ? ktime_get+0x1f5/0x220
[  488.539450][    C0]  ? lapic_next_event+0x11/0x20
[  488.544328][    C0]  run_timer_softirq+0xb7/0x170
[  488.549203][    C0]  handle_softirqs+0x226/0x860
[  488.553994][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  488.558784][    C0]  __irq_exit_rcu+0xcb/0x220
[  488.563398][    C0]  irq_exit_rcu+0x9/0x30
[  488.567664][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  488.573327][    C0]  </IRQ>
[  488.576276][    C0]  <TASK>
[  488.579223][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  488.585227][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  488.591055][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f7 ed 50 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  488.610686][    C0] RSP: 0018:ffffc90004327020 EFLAGS: 00000206
[  488.616862][    C0] RAX: 00000000000f564d RBX: ffff8880b863c8e0 RCX: 8000000000000001
[  488.624877][    C0] RDX: 0000000000000006 RSI: ffffffff8e4744cc RDI: ffffffff8c6d9480
[  488.632870][    C0] RBP: ffffc90004327070 R08: ffffffff907a167f R09: 1ffffffff20f42cf
[  488.640857][    C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff88803588ddc0
[  488.648843][    C0] R13: ffff8880b863c8b8 R14: dffffc0000000000 R15: 1ffff110170c791c
[  488.656853][    C0]  __schedule+0x17e3/0x58f0
[  488.661407][    C0]  ? irqentry_exit+0x218/0x910
[  488.666288][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.671345][    C0]  ? __pfx___schedule+0x10/0x10
[  488.676235][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  488.681632][    C0]  preempt_schedule_common+0x7f/0xd0
[  488.686944][    C0]  ? copy_pmd_range+0x5145/0x5c10
[  488.691999][    C0]  preempt_schedule_thunk+0x16/0x40
[  488.697229][    C0]  _raw_spin_unlock+0x41/0x50
[  488.701926][    C0]  copy_pmd_range+0x5176/0x5c10
[  488.706844][    C0]  ? stack_depot_save_flags+0x33/0x7f0
[  488.712350][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  488.717581][    C0]  ? __lock_acquire+0x6df/0x2e50
[  488.722574][    C0]  ? mas_wr_store_type+0xf80/0x1980
[  488.727804][    C0]  copy_page_range+0xc82/0x1290
[  488.732688][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  488.738002][    C0]  ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10
[  488.744972][    C0]  dup_mmap+0xf17/0x1dc0
[  488.749257][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  488.753955][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.759015][    C0]  ? lock_acquire+0x115/0x350
[  488.763723][    C0]  copy_mm+0x11a/0x480
[  488.767820][    C0]  ? copy_process+0xd3c/0x43e0
[  488.772611][    C0]  copy_process+0x1e75/0x43e0
[  488.777322][    C0]  ? copy_process+0xd3c/0x43e0
[  488.782134][    C0]  ? __pfx_copy_process+0x10/0x10
[  488.787194][    C0]  kernel_clone+0x2d7/0x940
[  488.791729][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  488.796794][    C0]  __x64_sys_clone+0x1b6/0x230
[  488.801587][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  488.806912][    C0]  ? do_user_addr_fault+0xc4c/0x1340
[  488.812226][    C0]  do_syscall_64+0x166/0x520
[  488.816845][    C0]  ? trace_irq_disable+0x3b/0x140
[  488.821887][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.827972][    C0]  ? clear_bhb_loop+0x70/0xc0
[  488.832671][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.838578][    C0] RIP: 0033:0x7fdafa5c6bd2
[  488.843010][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  488.862631][    C0] RSP: 002b:00007fdafa94fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  488.871070][    C0] RAX: ffffffffffffffda RBX: 00007fdafa94fc60 RCX: 00007fdafa5c6bd2
[  488.879055][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  488.887043][    C0] RBP: 00007fdafa94fdec R08: 0000000000000000 R09: 0000000000000001
[  488.895035][    C0] R10: 000055558fe747d0 R11: 0000000000000246 R12: 0000000000000001
[  488.903025][    C0] R13: 00000000000927c0 R14: 0000000000076876 R15: 00007fdafa94fe40
[  488.911034][    C0]  </TASK>
[  488.914692][    C0] Kernel Offset: disabled
[  488.919045][    C0] Rebooting in 86400 seconds..