last executing test programs:

2m42.966155204s ago: executing program 0 (id=238):
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
r2 = dup(r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x68)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000200)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}], [{@subj_role={'subj_role', 0x3d, 'J'}}]}, 0x1, 0x572, &(0x7f0000000c40)="$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")
socket$packet(0x11, 0x2, 0x300)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000180)=0x1, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r5 = socket$inet6(0xa, 0x80000, 0x201)
setsockopt$inet6_int(r5, 0x29, 0x1e, 0x0, 0x11)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f00000003c0)={0x2, 0x64000000})
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x3, 0x80000000, 0x5, 0xfff, 0x6, 0x1ff, 0x0, 0xa}, &(0x7f0000000140)={0x9, 0x6, 0x0, 0x9, 0xcf9, 0x0, 0x4, 0x7}, 0x0, 0x0, 0x0)

2m41.515467162s ago: executing program 0 (id=245):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[<r0=>0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x3})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000000180)={0x11b0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff8}}}}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5b, 0x3, "a143aeec62cef7784344b3d27721eae629d0dfa03feb68ab04a7499d38339b2b58563294c6620ca84618f869f0d31259d74691c42bd6808923b083bf4be3bda11dcec2ed29d0606dc72fe994eea40b83816bef620d1693"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x50, 0x3, "1062da1f809c3bbad45e04b529a50377ee363a2ec11b0928786ab32d117d76165c4faa397b5dc263782db4ed3299a0b192d7ca525228ef45ac09c84eba4a47ab238fb8b7a3dee5691f73f3cd"}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x34, 0x3, "c181eb620725686a5a9305d596be03acea5333d3457d9a7623d13b8b7d06f277e25e707404c354300a6782e53235e4fd"}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x11b0}, 0x1, 0x0, 0x0, 0x8050}, 0x4008804)
socket$l2tp(0x2, 0x2, 0x73) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000013c0)={@empty, @remote, @multicast1}, 0xc)
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000001480)={r0, 0x0, 0x8e, 0x9, &(0x7f0000001400)=[{0x3ff0, 0x400, 0x4, 0x3}, {0x0, 0x3, 0xb3be, 0xc0}, {0x800, 0x4, 0xa, 0x9939}, {0x2, 0x6, 0xd521, 0xa9e}, {0x40, 0x400, 0x8, 0x200}, {0x4, 0x2, 0xd, 0x8000}, {0x1, 0x5, 0x8, 0x2}, {0x2, 0x0, 0x3, 0x4}, {0xff, 0x1, 0xe, 0xffff}]})
openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/stat\x00', 0x0, 0x0) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/stat\x00', 0x0, 0x0)
syz_create_resource$binfmt(&(0x7f0000001500)='./file0\x00') (async)
r4 = syz_create_resource$binfmt(&(0x7f0000001500)='./file0\x00')
execveat$binfmt(r3, r4, &(0x7f00000016c0)={[&(0x7f0000001540)='%:\\*${!\x00', &(0x7f0000001580)=':\'&(/{*+\x00', &(0x7f00000015c0)='eth', &(0x7f0000001600)='\x00', &(0x7f0000001640)='^:\x00', &(0x7f0000001680)='@+\x00']}, &(0x7f0000001780)={[&(0x7f0000001700)='syz1\x00', &(0x7f0000001740)='\\\x00']}, 0x100) (async)
execveat$binfmt(r3, r4, &(0x7f00000016c0)={[&(0x7f0000001540)='%:\\*${!\x00', &(0x7f0000001580)=':\'&(/{*+\x00', &(0x7f00000015c0)='eth', &(0x7f0000001600)='\x00', &(0x7f0000001640)='^:\x00', &(0x7f0000001680)='@+\x00']}, &(0x7f0000001780)={[&(0x7f0000001700)='syz1\x00', &(0x7f0000001740)='\\\x00']}, 0x100)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001900)=0xe8)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001940), &(0x7f0000001980)=0xc) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0, <r7=>0x0}, &(0x7f0000001980)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x0)
getresgid(&(0x7f0000001a80), &(0x7f0000001ac0)=<r9=>0x0, &(0x7f0000001b00))
getresuid(&(0x7f0000001b40)=<r10=>0x0, &(0x7f0000001b80), &(0x7f0000001bc0)=<r11=>0x0)
getgroups(0x1, &(0x7f0000001c00)=[<r12=>0xee01])
write$FUSE_DIRENTPLUS(r3, &(0x7f0000001c40)={0x1e8, 0x0, 0x0, [{{0x1, 0x0, 0xc, 0x5, 0x9, 0x3, {0x0, 0x7, 0xfffffffffffff03d, 0x4, 0x7ff, 0x5, 0xffffff22, 0xa440, 0x9e, 0x4000, 0x7, r6, r7, 0x394, 0x7}}, {0x6, 0x6dc, 0x1, 0x3800000, '('}}, {{0x2, 0x3, 0x6, 0x3, 0x7, 0x9, {0x5, 0x6, 0x7, 0x9, 0x1, 0x77c, 0x4, 0x3, 0x88, 0xa000, 0x2a7, r8, r9, 0x7, 0x7fff}}, {0x6, 0x7, 0x0, 0x8}}, {{0x4, 0x3, 0x0, 0x8, 0x0, 0x401, {0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xb7, 0x8, 0x5, 0x6000, 0x7, r10, r12, 0x7ff, 0xc6}}, {0x6, 0xbad491a, 0x1, 0x2, '\x00'}}]}, 0x1e8)
r13 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
setsockopt$inet_udp_encap(r13, 0x11, 0x64, &(0x7f0000001e40)=0x2, 0x4)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r13, 0x6, &(0x7f0000001ec0)={0x9, 0x0, &(0x7f0000001e80)=[r3, r5, r1, r5, r5, r2, r5]}, 0x7) (async)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r13, 0x6, &(0x7f0000001ec0)={0x9, 0x0, &(0x7f0000001e80)=[r3, r5, r1, r5, r5, r2, r5]}, 0x7)
quotactl_fd$Q_SETINFO(r5, 0x2, r8, &(0x7f0000001f00)={0x1000, 0x1000, 0x0, 0x6})
setresuid(r10, r6, r11)
r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001f40), 0x448000, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0), 0x4000)
setsockopt$MRT_DEL_VIF(r13, 0x0, 0xcb, &(0x7f0000002040)={0x1, 0x0, 0xf8, 0x2, @vifc_lcl_addr=@loopback, @broadcast}, 0x10)
r15 = signalfd4(r14, &(0x7f0000002080)={[0x5]}, 0x8, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r15, 0x541c, &(0x7f00000020c0))
syz_open_dev$dri(&(0x7f0000002100), 0x7, 0x400) (async)
r16 = syz_open_dev$dri(&(0x7f0000002100), 0x7, 0x400)
ioctl$DRM_IOCTL_MAP_BUFS(r16, 0xc0186419, &(0x7f0000002540)={0x5, &(0x7f0000002140)=""/195, &(0x7f00000024c0)=[{0x80000000, 0xbd, 0x6, &(0x7f0000002240)=""/189}, {0x6, 0xaa, 0x9, &(0x7f0000002300)=""/170}, {0xc1, 0x6c, 0xffffffff, &(0x7f00000023c0)=""/108}, {0x2, 0x31, 0x6, &(0x7f0000002440)=""/49}, {0x9, 0x38, 0x10000, &(0x7f0000002480)=""/56}]}) (async)
ioctl$DRM_IOCTL_MAP_BUFS(r16, 0xc0186419, &(0x7f0000002540)={0x5, &(0x7f0000002140)=""/195, &(0x7f00000024c0)=[{0x80000000, 0xbd, 0x6, &(0x7f0000002240)=""/189}, {0x6, 0xaa, 0x9, &(0x7f0000002300)=""/170}, {0xc1, 0x6c, 0xffffffff, &(0x7f00000023c0)=""/108}, {0x2, 0x31, 0x6, &(0x7f0000002440)=""/49}, {0x9, 0x38, 0x10000, &(0x7f0000002480)=""/56}]})
ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0)

2m41.413240201s ago: executing program 0 (id=246):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
utime(0x0, 0xfffffffffffffffc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf0aa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}})
io_uring_enter(r6, 0x154e, 0x0, 0x41, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m38.340433324s ago: executing program 0 (id=260):
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x92, 0x8, 0x0, 0x0}}, 0x4a) (async)
syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x80800) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ptrace$setregs(0xd, 0x0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d") (async, rerun: 64)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x192)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async, rerun: 64)
unshare(0xc020400) (async, rerun: 64)
mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84000, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x10}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x6000, 0x0, 0xa, 0x7, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0xf, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0xdddd0000, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8, 0x401]}) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m37.905865185s ago: executing program 0 (id=262):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x5, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x3fd, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0xb, 0x5, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x21, 0x3e5, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x4, 0x80a2ed, 0x4], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x7, 0x0, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x6, 0x7e, 0x100, 0x9602, 0x1, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000003f)
dup(0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x29)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c00014000000000000000041400000011000100000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
close(r5)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@nouuid}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x979e, &(0x7f0000009780)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

2m36.816814691s ago: executing program 0 (id=264):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="a8", 0x1}, {&(0x7f0000000180)="e7ab00", 0x3}], 0x2, 0x2, 0xc78)
socket$tipc(0x1e, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'multiq3\x00', [0x2f00, 0x6, 0x10d09a, 0x2, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0x0, 0xffff, 0x100006, 0xffffffff, 0xa, 0x77fc9e55, 0x5, 0x10000, 0x2, 0x1, 0xe2df, 0xfffffffe, 0x80008001, 0x7, 0x401, 0x7, 0x5, 0x4712]})
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0x80000000, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x4c080)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000006c0), 0x35c, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/4107, 0x100b}], 0x1, 0x20000000, 0x2000006)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000740)="b8941ab2da59d8416a19ca6b599b7e8ee47a2ed4908a947b7bb7e1a8a7345e0cb913ce76eadb143bdf19d0cd3b9c01c99ec754b0316061734d1278a95fba67bb1efdf9106880978c0099fb26aa0dd79eda57894c69428077d03ef20041642a7b49af37342f3bfa0a2947c76bff10a997b7c2fde6fc5c87ec752c52b7", 0x7c}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)={0x77359400}, 0x1, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4017)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x3, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x2, 0x35, 0x0, 0x0, 0x5], 0x0, 0x40000})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0xde, 0x1, 0x5, 0x0, 0x2, 0x4, 0x1, 0xc, 0x6, 0x3, 0x6, 0x3, 0x0, 0x7, 0x1, 0xbd, 0x0, 0x47, 0x5, '\x00', 0x4, 0x2})

2m21.732402225s ago: executing program 32 (id=264):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="a8", 0x1}, {&(0x7f0000000180)="e7ab00", 0x3}], 0x2, 0x2, 0xc78)
socket$tipc(0x1e, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'multiq3\x00', [0x2f00, 0x6, 0x10d09a, 0x2, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0x0, 0xffff, 0x100006, 0xffffffff, 0xa, 0x77fc9e55, 0x5, 0x10000, 0x2, 0x1, 0xe2df, 0xfffffffe, 0x80008001, 0x7, 0x401, 0x7, 0x5, 0x4712]})
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0x80000000, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x4c080)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000006c0), 0x35c, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/4107, 0x100b}], 0x1, 0x20000000, 0x2000006)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000740)="b8941ab2da59d8416a19ca6b599b7e8ee47a2ed4908a947b7bb7e1a8a7345e0cb913ce76eadb143bdf19d0cd3b9c01c99ec754b0316061734d1278a95fba67bb1efdf9106880978c0099fb26aa0dd79eda57894c69428077d03ef20041642a7b49af37342f3bfa0a2947c76bff10a997b7c2fde6fc5c87ec752c52b7", 0x7c}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)={0x77359400}, 0x1, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4017)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x3, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x2, 0x35, 0x0, 0x0, 0x5], 0x0, 0x40000})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0xde, 0x1, 0x5, 0x0, 0x2, 0x4, 0x1, 0xc, 0x6, 0x3, 0x6, 0x3, 0x0, 0x7, 0x1, 0xbd, 0x0, 0x47, 0x5, '\x00', 0x4, 0x2})

2m14.215220729s ago: executing program 2 (id=341):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
r2 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
semget$private(0x0, 0x3, 0x451)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
listen(r3, 0x4)
sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x8, @remote, 0x80000000}, {0xa, 0x4e22, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}, r1, 0x728}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @local}}}, 0x118)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
writev(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000100)='./file0\x00', 0x204)

2m13.244818255s ago: executing program 2 (id=346):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0xffff, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async, rerun: 32)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32)

2m11.964150694s ago: executing program 2 (id=348):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}}, 0x2000c050)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
clock_gettime(0xf0ffffff7f0000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x0) (async)
mkdir(0x0, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async)
openat$audio(0xffffffffffffff9c, 0x0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910280000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2a}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910280000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x40ffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x4, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x40ffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x4, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, 0x0, 0x0)

2m11.293128226s ago: executing program 2 (id=350):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000200)='}', 0x1}], 0x2, 0xe, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000011b1ac00c2f39f49ae9f95f06ce3134add7028e533bc5444630214254c8be5c3cfae1498a0e3e34c7369740a55a5e96f6b88ffb898fbfff000896c9ce63b648db7e5bbbc2289d8df8c920e4efd531dffb402feac23abddcb6dcbbe", @ANYRES16=r6, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0082006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x8)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
r8 = fanotify_init(0x200, 0x40000)
fanotify_mark(r8, 0x1, 0x8000009, r3, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$getownex(r9, 0x10, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r11 = dup(r10)
write$UHID_INPUT(r11, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x4c403}, 0x18)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r12, &(0x7f0000000c40)={0xa, 0x4e21, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6}, 0x1c)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

2m9.876924798s ago: executing program 2 (id=355):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91103a0000000000956088fe0000ddb4"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

2m9.663288725s ago: executing program 2 (id=356):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000800200380012800b0001006272696467650000"], 0x58}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f00000006c0), &(0x7f0000000880)}, 0x20)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffff5, 0xffffead7, 0x3, 0x3c, 0xfffffffa, 0x4, 0x8000000, 0xdffffffa]})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r6, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f0000001dc0)={0x87}, 0x20)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b00010000000009"], 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)

1m54.325341886s ago: executing program 33 (id=356):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000800200380012800b0001006272696467650000"], 0x58}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f00000006c0), &(0x7f0000000880)}, 0x20)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffff5, 0xffffead7, 0x3, 0x3c, 0xfffffffa, 0x4, 0x8000000, 0xdffffffa]})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r6, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f0000001dc0)={0x87}, 0x20)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b00010000000009"], 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)

1m54.01333106s ago: executing program 1 (id=411):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1)
r2 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m52.939294038s ago: executing program 1 (id=413):
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x808000, 0x88}, 0x18)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x9, 0x0, 0xcc}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304050001000000240012800e001000028008000d000300000004001200"/44], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1m52.661135606s ago: executing program 1 (id=415):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001a00010025b97000fbdbdf250a80800000000044"], 0xc8}, 0x1, 0x0, 0x0, 0x494}, 0x20000050)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x4, 0x5}, 0x1c}}, @TCA_CSUM_PARMS={0xb, 0x1, {{0x2, 0x583, 0x5, 0x2b095fe3, 0x8e}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x3b, 0x8, {0x0, 0x1}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

1m52.396154522s ago: executing program 1 (id=418):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async)
r0 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000009fc0)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x9, @empty, 0x2}, 0x1c, 0x0}}], 0x1, 0x20000811) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x40048094)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d", 0x13}], 0x1) (async)
prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0) (async)
sched_setscheduler(0x0, 0x5, 0x0) (async)
r2 = getpid()
sched_setscheduler(r2, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x22, 0x0, 0x0)
mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='jfs\x00', 0x1a0c000, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x2)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{0x40, 0x6, 0x90, 0x7ff}, {0x6, 0x7, 0x2, 0x2}]}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400a600cc1c2c96acb5f71200010065b82862e98398866ce5694fcc81a42e813864f30e69c4c2339f55dffe110d3db2abee1032e319a91eeb9f9e0feaa11e73d5ae60c013c079da7316c176948a0b04fea76a8e4dc56fe9ffdbb75a59f4d42ddbadbe6732985c477f24c5b8124c9755512bdbc413017fffb85ad9409d161e1c377796645e2e4b43d172fc4281db004584af2165192e82842f55e9fe13b7934fee4b24d7f02cf6299984afc838c43ca6fba6307f80d30cef8beb6c02a9105d0ecb95e610cdcd4417403e20480feeea5ded7aa4b022", @ANYRES32=0x0, @ANYBLOB="2000000000d005001400030076657468305f766972745f7769666900"], 0x34}}, 0x8000)

1m51.175471667s ago: executing program 1 (id=424):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='pim6reg0\x00', 0x10) (async)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x4a, 0x4) (async)
recvmsg(r0, &(0x7f0000001600)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/5, 0x5}], 0x7}, 0x10002) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
sendmsg$SOCK_DESTROY(r2, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x168, 0x15, 0x200, 0x70bd2a, 0x25dfdbfc, {0x1, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x68, 0x1, "7f9ba1bf1741f048c109efc8e9f6465055f6c8be9ee3636ea2df2dc1f342dee81a4c5c1578e2f3e51784e3a21aa10a62a406633e55a063b7c18d597153f1f53e2101b8f5b2bceb6f15032a5c7df4bf5f3d95bfbba28a8e641bf8146f41ee28567101a1f6"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "6e8c5305b826c7bad8bfb3afadf13ad6591a9468e60054d1b8b41d785ed18e61b88c09f61e3cb2bb385b0f8b3fe9479e4d78b899dd06ac3b2bb130f9cf39a5bcc2a767ae94254c059e73254f2013f5ba65aade9162a40b5db7b781c6ceff5869579ab08c077b1709d33c8f3b5f371a200e71134494cc7de42a06bd9daa9fe16365cf0c97a48d436056faf7508da765438dc84383ae889fa6c1523fbae1b55763bec578fc08a7ffb16dfcdbb66423878203817d91a9001b28f6b3acbddaa645cf75c70e210f3a3c1d34d509efea7873c07a0b083492e7d33e5b3e07b905c1eb3cb9464dc59e5122d9"}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000018c0)={0x1, @vbi={0xffffffff, 0x4, 0xf9, 0x32314d54, [0x1000, 0x9], [0x7f, 0x3], 0x2}}) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f00000019c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001a00)={<r4=>0x0, 0x8}, &(0x7f0000001a40)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001b00)={<r5=>r4, 0x78, &(0x7f0000001a80)=[@in6={0xa, 0x4e21, 0xcf, @mcast2, 0x6c1}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0xa9b9, @local, 0x80}]}, &(0x7f0000001b40)=0x10) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000001b80)) (async)
getpid()
close(r3) (async)
r6 = accept4$netrom(r2, &(0x7f0000001bc0)={{0x3, @rose}, [@remote, @netrom, @default, @bcast, @remote, @remote, @rose, @null]}, &(0x7f0000001c40)=0x48, 0x80800)
getsockname$netrom(r6, &(0x7f0000001c80)={{0x3, @netrom}, [@bcast, @netrom, @default, @bcast, @remote, @default, @bcast, @null]}, &(0x7f0000001d00)=0x48) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0xbc, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_PROTOINFO={0x34, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x30, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xba1f}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xb}]}}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2048809}, 0x80) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000001ec0)={<r7=>0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000001f00)={<r8=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000001f40)={<r9=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000001fc0)={&(0x7f0000001f80)=[r7, 0x0, r8, r9], 0xccc, 0x4, 0x2}) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000002000)={r5, 0x80}, 0x8) (async)
r10 = io_uring_setup(0x1de9, &(0x7f0000002040)={0x0, 0x13e3, 0x8, 0x0, 0x3ae, 0x0, r2})
io_uring_enter(r10, 0x338c, 0x936a, 0xa, &(0x7f00000020c0)={[0x5]}, 0x8)
r11 = dup2(r2, r3)
sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f00000022c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4d73b05ec7433503}, 0xc, &(0x7f0000002280)={&(0x7f0000002140)={0x120, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb0, 0xa8, @random="d1dc0c27bf85bb936365e1d4234b5c7922937c5b9a24fb72ce865094be5850722a1bf187b5baa348b3cb2a1c1dd40109a689c1fb334738dc238de4f7df2ee1ded3ccc1d67a9f7bdb81fae98d11bf28aa11cf524d6c860ed58c51ac1e248479908dce66af3ec165a300e095200fed75c68f8f49f001141468c57edf792b44b93b558664bd145c4cfb8b1d8a255129ffcc8cb619b193416c4da868d2c18ee5bd78186583a21d895db915be6005"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x120}, 0x1, 0x0, 0x0, 0x5}, 0x40000) (async)
socket$can_raw(0x1d, 0x3, 0x1)

1m50.997282986s ago: executing program 1 (id=425):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000180)={0x0, 0x0})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x7ef)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r5 = socket(0x1d, 0xa, 0x802)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
r6 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m34.668297335s ago: executing program 34 (id=425):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000180)={0x0, 0x0})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x7ef)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r5 = socket(0x1d, 0xa, 0x802)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
r6 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

10.730976344s ago: executing program 4 (id=739):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x4, &(0x7f0000000200)=0x7f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000000300)={0x1, 0x1})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r5 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r5, 0x0, 0x0)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000300)={0x17, 0xa, 0x2, "ba2000fc0000000000ffff00", 0x3247504d})
listen(r5, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00'})
close(r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
gettid()

6.282627152s ago: executing program 6 (id=752):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010068469e64bfed953ef5788d5c00000000000000000100000008000100030000002400048005000300011100000500030000000000050003008000000005605802549e192e0f7233ae4786f2f3012f67723097143bce34358aee082a64c12c501d18c686ca23fde0ef820a4431056756c02cfc5f00"/133, @ANYRES64=r0], 0x48}}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x3ff, 0x4)
connect$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0xe, 0x3e, 0x0, 0xf9, @random="e517269107a5"}, 0x10)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x101ff, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_io_uring_setup(0x234, 0x0, &(0x7f0000000280), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
syz_io_uring_setup(0x12556, &(0x7f0000000380)={0x0, 0x80d2eb, 0x2000, 0x0, 0x15a}, &(0x7f0000000100), &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x5, 0x0)
ioprio_get$pid(0x2, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102388, 0x18ff4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0xfffffdf4)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket(0x2, 0x2, 0x40002)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25cfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="8fc15fe73d6fe9", @ANYBLOB="fddd827e77fb918b7e0295cbb055c98f581552539ebbd53ccd0f6316fc8d097d9e381a1c5bcae687ef17237c39809c9e5d76010efcd1487476e85b0066c92d5c6c24a18696e2f0476ab01fd6396b114db4f612b33915aef5c6ea55c26d77ad7a9dcf805358395ba28596ad1f20addca64f1ee9c261bba400690f0dc709265c38a363ba5e2087f4153b6b7690a013cec3cbfb7f972cbae2c7ffffffff7023bc05462809c891de222eb389c3987e351b10c9883f8e5448fbe4b4ba4c2927ef063b00ae297873b6f70a26198b3dac37b109daedcd54aa6f994ff0", @ANYRES32=0x0], 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.841232968s ago: executing program 4 (id=756):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000200000000000000000008500000061000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

5.781127397s ago: executing program 6 (id=757):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffffd410a400000000001c010000000000009500000000000000dae28b99db2e6c9338478f0763789e1011ce79d56c73e324c294ee"], 0x0, 0x5}, 0x94)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0)
ioprio_set$uid(0x3, 0x0, 0x4007)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182)
ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0xfffffffd, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x7, 0xe})
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0)
sendfile(r3, r3, 0x0, 0x74)
syz_usb_control_io(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_io_uring_setup(0xe3e, &(0x7f0000000140)={0x0, 0x9146, 0x1000, 0x7, 0x4}, &(0x7f0000000240)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x260102, 0x0, 0xd}, &(0x7f0000000040)='./file0/file0\x00', 0x18})
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x0, 0x23, 0x4a, {0x4a, 0x10, "d23c82a71bd3724504ecc212ed775dd61178f9004a97ee7f5fae1c4ecbbf8410461dbe2bb950ea3a4823944303c192a468dfe27cc2e07150807b88341afe6539b6a857df4d0336b6"}}, &(0x7f0000000140)={0x0, 0x3, 0x8, @string={0x8, 0x3, "56ac72bf2621"}}, &(0x7f0000000180)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x3, "956f0377"}, @global=@item_012={0x1, 0x1, 0xb, "8d"}, @global=@item_4={0x3, 0x1, 0x9, "459dc66e"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8a, 0x1, {0x22, 0x246}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0x16, 0xc4, "0de2a858b32e2ab31c27eeba328545c5f0760049dba105b4a00bfb53dd66b052bef971ef7a4e6a80b4815a7bf9896b53f50eb2d631e699c64c28df62a2f78cd1f064d6962e601ed25aad0b5747c4e64b800137a17346b40f55a9263fb2e9fd030060241a2760ab368a6557a5aaf25e51072ee84d37771330a687227cc527a46ccea95d8358fe59900c7143a8836401ecd69cd7724b435e84cfc4a7559b45f26b9f281bb9451db8d3eb461505cf749186a905decde3c058428c1033d41a83ef344796f547"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa1}, &(0x7f0000000480)={0x20, 0x1, 0xa7, "15f8e51ecad0143b3778be1ce1054f97ad3d506de31e8e12964a53931e57e96ad186fe33c69bd2cc4f371bcbeb44d0ba2a9d3b35aaaffee83afb29f25d8f40a1f6cb78bba7b15f5acb3780af615c6215848eff4c7555b4cd50d8b930a2dfe86911d0b5358a81cd397359d22433c435c178c3a4a90653cab3925c90412a34a5a0f191402aeb180190e9ee9257e5f6a0cb42581e04789ace1d6d1a3c29bf58a4d9f8f362f36b29ee"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x2}})

5.779104872s ago: executing program 5 (id=758):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e})
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fe8610bb", @ANYRES16=r8, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff010000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x8000)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r10 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x3507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

5.67877819s ago: executing program 4 (id=759):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r0=>0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x34}}, 0x0)
rt_sigqueueinfo(r0, 0x2a, &(0x7f0000000080)={0x21, 0x4, 0x2})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x24004001}, 0x0)

4.921081635s ago: executing program 3 (id=760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffeff}, 0x1c)
shutdown(r7, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
close(r7)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

4.809139435s ago: executing program 4 (id=761):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
semget$private(0x0, 0x4, 0x400)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x40, 0x1})
r4 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000280)={0x2, 0x9, 0x2, 0x0, 0x7})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
inotify_init()
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

4.632054262s ago: executing program 5 (id=763):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000380)=[{0x6, 0x40, 0x1, 0x7fffffff}, {0x6, 0x4, 0x2, 0x9}]})
r0 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x53)
setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000180)=0x8, 0x4)
membarrier(0x10, 0x0)
membarrier(0x8, 0x0)

3.908795371s ago: executing program 3 (id=764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

3.789242888s ago: executing program 7 (id=765):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0xffff0006}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cc, 0xfffffffffffffffe)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x30]}}}}]})

3.758219185s ago: executing program 5 (id=766):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000490000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x64}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000490000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x64}}, 0x0) (async)

3.552553494s ago: executing program 7 (id=767):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=<r2=>0x0)
setuid(r2) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020100030a0000002abd700000000000030006000000000002000000e00000090000000000000000030005000000000002000000e00000010000000000000000020010"], 0x50}}, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x4c4, r1, 0x1, 0x0, 0x1, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x49c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x14c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x324, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2d4, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0xf5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

3.387635191s ago: executing program 5 (id=768):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r0}}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = syz_io_uring_setup(0x8cf, &(0x7f0000000240)={0x0, 0x3, 0x80, 0x2}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b00010000000009040000012e6d0a000905", @ANYRES16], 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x41, "2ebbde21ee6e59d18fc0a066c3476b8828ce2f85c55cd7f10920f2194b9a62894cebf8a52fc140787d4311e5c5ccffdf7e81668a2db99b95433bf6c394a9ab991e"}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000d00)={0x9, 0xff, 0x4, 0x9, 0x1, 0x0, [{0x3, 0x4683, 0x8000000000000000, '\x00', 0x2000}]})
syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0x0, 0xf7, 0x3, 0x2, 0x6, 0x0, 0xc, {{0x9, 0x24, 0x6, 0x0, 0x0, "5f01183a"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x1ff, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0xcd9, 0xf, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xd7, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x20, 0xf, 0x9}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x23, 0x5, 0x8, 0x10, 0x6}, 0xc4, &(0x7f0000000140)={0x5, 0xf, 0xc4, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x6, 0x4}, @ptm_cap={0x3}, @generic={0xa8, 0x10, 0x4, "5c84907f582bfcdb3013ea2a6754da208ddd96bf04d001a824e00a3f73e264e90d33509de90334f71fe46d1ffba8c3147baabf87822b04c37823a63266d01d52681d29147fba8d08b39caf24834740b0ee320267fb233a36fb0a8ef5d1d0179e02ea6940f094a050af6b802f22fd2d6f53805edd8f33b8c3f92600017c41eaeef426f5bd0e4fd3b115c3f2af59046fda77bb33b6983657c68d98d421ac89c15c01825662f5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0xb, 0x100}]}, 0xa, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x42, &(0x7f0000000300)=@string={0x42, 0x3, "6f200bc754ca3a6193e5f6fbeab3f63d47a945aa16252b3eeba62a74ae9d43528d18dc01f100165f71acc130393e01e6c1fceb229d030571cca1662c13db4c06"}}, {0xd0, &(0x7f0000000380)=@string={0xd0, 0x3, "b1f8548ebe6834318a7410ffe9a0e0d1b4195fda034c12a4a726843abfe4f98a2132b40abec3b6aff385bc62c64fc62682cb7701f2c2c92d78ed6eaeffac48ab28c56cab0fa4fcb6abe3587e0372d2e2403bb07b17ef142f634363da4921c4f25d23ece04fa9f996ae5e6e01bc58f38965c31b545aa2a372e8a151237ad47e0590155d4b96e91cc529b01621c5eb030753926640384963eff685a712839010a0c1256fbc83169ebf6c7861acf07a633ccf1afecbc8b69d0c797b91b45476f2987099eda0f6c029a3532786e44e48"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x810}}, {0xef, &(0x7f00000004c0)=@string={0xef, 0x3, "1a61aaa2db554ff9c466c4c9b9ffa074f27be0fe39edfa520063c9f2a430a7ad058f2463b465cda75c7a71b8059297f9ccb374a5431724ad671c32b2489017a854fb4d37398811082da94079ec0601224d3d165e00e2234c15e7457f26d860dac0c963a279c70f5d95a0e77ce59a7dc826b1fc1e563bfc047822f13b8efd27b287136c682eda26bc61c88e12d7f4e5310c6743e48895a75746312031ed93fdcaa67d536edc549c4c793ec614e125ce76ab1a74caac3a4f22e37e7a75aa68d7533263b3d0ea6f4a4804809942a04487292c81b1a07962e0b75f285a25c3073360bc28cd2d1f9c60693f6e7f29a5"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x13, &(0x7f0000000840)=@string={0x13, 0x3, "0c50f0e3e89d8682870844a33402d667c3"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3009}}, {0x90, &(0x7f0000000680)=@string={0x90, 0x3, "fda1503141c325c4b86731c09fa8f97fc387de1055c6e81a2caea07ee7c73eb57606b68480ecfc07fd057126c412a5a1f6251e1f76a8a82e2dbc3d54943bd47f6d97e25e0efb0129ae32440de59ba592e150ad3c47194f6bed9aa34475da55f360f2e239ab869407af601662c081c54fc416ca14ce62414ea9f975c9cfc67d3093e4edf55907e05970bf879bc387"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2e}}]})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac1(0x6, 0xce, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0xf, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf82d, 0xfc}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x61, "70d43558"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xa, 0x890, 0x5, "09a5"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0xe, 0xa, "61c3"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x1, 0x3, 0x4, "dbf5669ab954aa46"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xa6, 0x1, 0x2, 0x0, "d3e281", "a80824"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf2, 0x1, 0x6, {0x7, 0x25, 0x1, 0x0, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x7, 0x9, "", "84"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x3, 0x3}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x2, 0xa, 0x1, "8bd2d0b4395bb84134"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x2, 0x3, {0x7, 0x25, 0x1, 0x1, 0x8, 0xf}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x250, 0x3, 0x7, 0x0, 0x8, 0x5}, 0x46, &(0x7f0000000bc0)={0x5, 0xf, 0x46, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0xe, 0x4}, @ptm_cap={0x3}, @generic={0x37, 0x10, 0xa, "64efacf7e091a9c456af15064c5004ce8fc071972b42161390f58b65644265f8cd0b6c39596c11ab307e5753c5d4b1ac845a0c77"}]}, 0x1, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x816}}]})
sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000d80)={0x160, 0x0, 0x700, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0xffffffb1, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d344fc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a191577}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4949a1f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ac055d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ecb61f5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a9c04a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b88f801}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaf7c8a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c1ea7b5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23ff7782}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37395acc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x109fced3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e43faab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a33361c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2903ffdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d11ea6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x200480c4}, 0x20000010)

3.305183446s ago: executing program 3 (id=769):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000200000000000000000008500000061000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

3.232650849s ago: executing program 7 (id=770):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.965299717s ago: executing program 3 (id=771):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000140)="00c2", 0x2, 0xfffffffffffffffd)
add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "1e6c6d14f13fbc088c4d30950630a06cd8ee6cee0fb2ae3b9d9cbecf87cbb3026f3d747d7ea9f5b6897a0625d496cfc36c231bccbc5852d23f8527ba83e91462", 0x17}, 0x48, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000100), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r1}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}, &(0x7f0000000080)='h', 0x1})
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x1000000b, 0x7, 0xe, 0x9, 0x7})
mlock(&(0x7f0000aa0000/0x4000)=nil, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e08010069703665727370616e00000020000900000005001700010000000500160002000000"], 0x54}}, 0x0)

2.947861388s ago: executing program 7 (id=772):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r3, 0xffffffff, 0xcc7d}, &(0x7f00000004c0)=0xc)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r3, 0x7fff}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @remote}}, 0x2, 0x100, 0x1, 0x4, 0x200040}, &(0x7f0000000480)=0x98)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240b08000000000000f60006ffffff7f0000000060a3346f350f03db3700238200000000", @ANYRES32=r0, @ANYBLOB="5a0cc8eed9146feb158dc5b778b541cab8dd39f8922524a6bc22bf885692a43f951d59ccbaeb7694c4aa07466579dfe53f76c3c1ac919e753218dea3090920ffe1775db20fea1276c5418606fee2a718f0ee7db90ce36d9586d4914fd1b601269c3624a2aa167f354a7159f763df9c005d374f80cbb1f40cbbb10731e0162d45c297ae3dc96e0ac9", @ANYRES16=r2], 0x24}}, 0x48041)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x1, 0x658, 0xc52, 0x2, 0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_GETNSID={0x24, 0x5a, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x20008000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6e, 0xb1, 0x80, 0x8, 0x61d, 0xc180, 0x5efe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x38, 0x39}}]}}]}}, 0x0)

1.653422931s ago: executing program 6 (id=773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70d5}]}]}, 0x58}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', <r2=>0x0, 0x29, 0xac, 0x5, 0x4df6, 0x19, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x9, 0xfffffff7}})
sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd29, 0x25dfdbfd, {0x7, r2}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000001)

1.481179736s ago: executing program 5 (id=774):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x554, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c)
recvmsg(r0, &(0x7f0000000740)={0x0, 0x700df6df844ba292, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x2041)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0x0, 0x0, 0x102, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x115040)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc058534b, &(0x7f0000000440)={{0x1}, {0x85}, 0xfffffffe})
syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fanotify_init(0x200, 0x0)
r3 = memfd_create(&(0x7f0000000800)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17\rQW\xd5\x06\x05\x17W\xa8bZ\xaf\xcc)\x14\x1cN\x1b\x95Ire\x88\x95\xa8\xba\xb6)k\x1dp\xa4 4\xad\xa5\x95\xe5\x92^K\x14\xa3\xb7\xd4\xfb\xee\xea\xed\x05\xa1<\x7f\xd9q\xc5\xba\x95 \xb9W\x06\xf2\x8a\x02u\xd8\xe9M\x88\xcen\xc0\x90\xa5(7\x9d\xe5<~\xce\xaf\xe4\x8cgo\\\xda\xa5\x18\x90V\x82q@7\xc9O]\t\xc5\\\x87?\x0e\xf8\x94y\xdc\xb9\xa6\xae\x9a\xa3', 0x1)
r4 = dup(r3)
fanotify_mark(r2, 0x1, 0x8001055, r4, 0x0)
memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c8030000000000004000000000000000f605430000000000000001000500380046"], 0x78)
execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x100)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000, 0x0)
read$msr(r5, &(0x7f0000019540)=""/102400, 0x19000)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @broadcast}, 0x10, 0x0}, 0x3000c085)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0x1)

1.405098082s ago: executing program 6 (id=775):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000000000)=0x64)
r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT=r0], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000a7f000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x1010, 0xffffffffffffffff, 0xa9c44000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
sendto$inet(r5, &(0x7f0000000440)="d9cbb3ccc8a2ea4b9563baee4b68619ac27f3c6877aed8ce985ef2a579fe78c7a18f23b83d3eaf1bae4ccedd564f12b333cbdae4ee367c8fbc16c55904c6a94e2a6b21b70e1b745f1469df1b312b279949a58664fa42f04844603b7ab50fafa6d24e0b444d8ac8635f377f082a05c3c86de47ce2c9420f89a9bcf96367a457cb876b87c1e8cf04957e00567fa2aef4e28fc5bda990cd8dd7e14fed51c387a665aa1d4e99e49883db40f75411f5e2e88db13b4ef5bda79fff7a34e896fbe2", 0xbe, 0x801, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000040)=0x68)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r6, 0x2)
accept4(r5, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002000b33f00000000000010000a00"/28], 0x24}}, 0x0)

1.373327465s ago: executing program 7 (id=776):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) (async, rerun: 64)
io_setup(0x8000, &(0x7f0000000000)=<r0=>0x0) (async, rerun: 64)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) (async, rerun: 32)
syz_clone3(&(0x7f0000000300)={0x22800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 32)
io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
r2 = socket(0x22, 0x2, 0x4)
ioctl$IMGETCOUNT(r2, 0x80044944, &(0x7f0000000000))

1.277321891s ago: executing program 3 (id=777):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0x8)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES32=r5, @ANYRES64=r4, @ANYRES64=r2, @ANYBLOB="c54bf03a4deb44639c47254d6c47a8d566c07253ca01002c7f0c67c34c15e121115d57ce5eeda8d9625ef9fa8ca8bc09b069740712592296284fa4bab1c2ba16ba88242e0b81944c4d6018f5384d50f7b6f33891cb7adb6776b4784562a4ff65ba5aa1b60abb433e3cc3254dff430d27b431edbcf4a436"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc020800)
ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)='veth0_to_batadv\x00', 0x1, 0x2aa, 0x7})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in, @in6=@private2}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000280)=0x4)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000340)={0x0, r3})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340})
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0180000004001f0008355b0009"], 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000380))
socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0)
r9 = inotify_init()
inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x1400037e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb)
read$FUSE(r9, &(0x7f0000001fc0)={0x2020}, 0x2020)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

1.20952598s ago: executing program 4 (id=778):
close(0x3)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_emit_ethernet(0x9e, &(0x7f0000000380)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x68, 0x3c, 0xff, @remote, @mcast2, {[@hopopts={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @generic={0x0, 0x4, '\x00\x00\x00\x00'}]}], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "3baf3f40e7560eaa00e40f74235dcbe4cb1f5ec052d732ff", "7edcf63d0322223af76b456f051e3de00c45257d795b1ddbed3330afcaf01b26"}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x20, 0x103)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setrlimit(0xc, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000]}, 0x45c)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000006480))
recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{&(0x7f0000002100)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000043c0)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000002180)=""/115, 0x73}, {&(0x7f0000002200)=""/28, 0x1c}, {0x0}], 0x4}, 0xfffffffb}, {{&(0x7f0000004b80)=@llc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004c00)=""/105, 0x69}, {&(0x7f0000004c80)=""/117, 0x75}, {0x0}, {0x0}], 0x4}, 0x8}], 0x2, 0x40000000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f80000001a000700005a4b44b07e2e91acc3ba00000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="64010101000000000000000000000000000000002b0000006401010000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000300000000000000000000000000000000000000000000000100000000000000ffffff7f000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a00020070000000000000000800160008000000"], 0xf8}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
r7 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200, 0x0)
read$FUSE(r7, &(0x7f00000000c0)={0x2020}, 0x2020)

1.103146675s ago: executing program 5 (id=779):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c)
syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="052e"], 0x0)
pipe2(&(0x7f0000000040), 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r2, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) (async)
syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="052e"], 0x0) (async)

721.121462ms ago: executing program 7 (id=780):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0)

263.359095ms ago: executing program 6 (id=781):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000200000000000000000008500000061000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

160.617093ms ago: executing program 6 (id=782):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)=0x5)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) (async)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x80, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = gettid()
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r9 = fcntl$dupfd(r7, 0x406, r7)
bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5})
r10 = socket(0xa, 0x3, 0x3a)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) (async)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

28.354776ms ago: executing program 4 (id=783):
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0)

0s ago: executing program 3 (id=784):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0)
fstat(r0, &(0x7f00000000c0)) (async)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
getgroups(0x3, &(0x7f0000000140)=[r1, r2, r3]) (async)
getgroups(0x3, &(0x7f0000000140)=[r1, r2, r3])
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xcd, 0x9c, 0x0, 0x1, [@nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494e84e35fe93ff248cd58762e1ca3a5ba1c51a336b72632c46bcf08d87929e1c80497d9e0782"]}]}, 0xe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

new low-speed USB device number 6 using dummy_hcd
[  105.296770][ T5999] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  105.321317][ T6493] hfsplus: Bad value for 'uid'
[  105.346645][ T5999] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  105.385326][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  105.424506][ T6491] overlayfs: missing 'lowerdir'
[  105.441253][ T6493] netlink: 64 bytes leftover after parsing attributes in process `syz.3.139'.
[  105.453296][ T6491] comedi comedi0: comedi_config --init_data is deprecated
[  105.456324][ T5999] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  105.597296][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  105.607788][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  105.626212][ T5999] usb 5-1: string descriptor 0 read error: -22
[  105.632519][ T5999] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  105.648354][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.667211][ T5999] usb 5-1: config 0 descriptor??
[  105.672881][ T6474] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  105.691738][ T5999] hub 5-1:0.0: bad descriptor, ignoring hub
[  105.707615][ T5999] hub 5-1:0.0: probe with driver hub failed with error -5
[  105.739771][ T5999] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  105.767334][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'.
[  105.889545][   T43] usb 5-1: USB disconnect, device number 6
[  105.889545][    C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19
[  106.519943][ T6537] blk_print_req_error: 3 callbacks suppressed
[  106.519961][ T6537] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  106.552720][ T6537] EXT4-fs (loop4): unable to read superblock
[  106.579616][ T6540] netlink: 76 bytes leftover after parsing attributes in process `syz.0.153'.
[  106.794714][ T5911] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  106.996526][ T5911] usb 4-1: Using ep0 maxpacket: 16
[  107.032690][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.071530][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  107.083508][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  107.100855][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  107.100873][   T30] audit: type=1800 audit(1892655580.528:33): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.154" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  107.113645][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  107.324805][ T6548] hub 9-0:1.0: USB hub found
[  107.330528][ T6548] hub 9-0:1.0: 1 port detected
[  107.566235][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  107.593356][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  107.614806][ T5911] usb 4-1: Manufacturer: syz
[  107.627672][ T5911] usb 4-1: config 0 descriptor??
[  107.661775][ T6557] hfsplus: Bad value for 'uid'
[  107.678299][ T6557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.156'.
[  107.771911][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.779555][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.877690][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.894934][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.928894][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'.
[  107.968465][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.159'.
[  108.034606][   T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  108.047914][ T5999] usb 4-1: USB disconnect, device number 15
[  108.084623][   T77] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.097846][   T77] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.101393][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[  108.108850][   T77] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.141487][   T77] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.223065][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  108.244097][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  108.263893][   T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  108.295572][   T43] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  108.308932][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.317357][   T43] usb 1-1: Product: syz
[  108.322453][   T43] usb 1-1: Manufacturer: syz
[  108.328198][   T43] usb 1-1: SerialNumber: syz
[  108.552643][   T43] usb 1-1: config 0 descriptor??
[  108.705155][   T43] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  108.943076][ T5959] kernel read not supported for file /vcs (pid: 5959 comm: kworker/0:5)
[  109.192258][ T6588] netlink: 'syz.4.165': attribute type 15 has an invalid length.
[  109.307813][ T6585] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  109.323114][ T6585] EXT4-fs (loop1): unable to read superblock
[  109.410476][ T6593] ntfs3: Unknown parameter '`iscard'
[  110.268892][ T6593] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  110.297044][ T5930] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  110.393501][ T6610] netlink: 'syz.1.171': attribute type 1 has an invalid length.
[  110.472085][ T6610] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.484309][ T5930] usb 5-1: Using ep0 maxpacket: 16
[  110.621147][ T5930] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  110.678256][ T5930] usb 5-1: config 0 has no interface number 0
[  110.713319][ T5930] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  110.809637][ T5930] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  110.857216][ T5930] usb 5-1: config 0 interface 255 has no altsetting 0
[  110.873800][ T5999] usb 1-1: USB disconnect, device number 8
[  110.921727][ T5930] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  110.970853][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.988112][ T5930] usb 5-1: Product: syz
[  110.994979][ T5930] usb 5-1: Manufacturer: syz
[  111.000512][ T5930] usb 5-1: SerialNumber: syz
[  111.016236][ T5930] usb 5-1: config 0 descriptor??
[  111.040814][ T5930] ums-onetouch 5-1:0.255: USB Mass Storage device detected
[  111.230835][ T5930] usb 5-1: USB disconnect, device number 7
[  111.518910][ T6631] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  111.536160][ T5999] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  111.816156][ T5999] usb 1-1: not running at top speed; connect to a high speed hub
[  111.838143][ T5999] usb 1-1: config 8 has an invalid interface number: 110 but max is 0
[  111.847896][ T5999] usb 1-1: config 8 has no interface number 0
[  111.857101][ T5999] usb 1-1: config 8 interface 110 has no altsetting 0
[  111.875410][ T5999] usb 1-1: New USB device found, idVendor=0403, idProduct=f9e9, bcdDevice=38.da
[  111.884919][ T5999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.892973][ T5999] usb 1-1: Product: syz
[  111.897872][ T5999] usb 1-1: Manufacturer: syz
[  111.902560][ T5999] usb 1-1: SerialNumber: syz
[  112.194576][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout
[  112.734320][ T5999] usb 1-1: USB disconnect, device number 9
[  112.955595][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'.
[  112.983669][ T5959] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  113.165675][ T6659] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  113.175137][ T6659] EXT4-fs (loop2): unable to read superblock
[  114.129300][ T5959] usb 2-1: Using ep0 maxpacket: 32
[  114.972817][ T6659] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  114.982349][ T6659] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  114.990779][ T6659] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  115.000171][ T6659] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  115.007963][ T6659] bcachefs: bch2_fs_get_tree() error: EIO
[  115.024857][ T5959] usb 2-1: config 0 has an invalid interface number: 109 but max is 0
[  115.033080][ T5959] usb 2-1: config 0 has no interface number 0
[  115.063587][ T5959] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  115.072722][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.092305][ T5959] usb 2-1: Product: syz
[  115.105926][ T5959] usb 2-1: Manufacturer: syz
[  115.110735][ T5959] usb 2-1: SerialNumber: syz
[  115.934732][ T5959] usb 2-1: config 0 descriptor??
[  115.978025][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.187'.
[  116.207822][ T5959] usb 2-1: can't set config #0, error -71
[  116.245910][ T6675] hfsplus: Bad value for 'uid'
[  116.349518][ T5959] usb 2-1: USB disconnect, device number 10
[  117.005002][ T6694] netlink: 'syz.0.197': attribute type 62 has an invalid length.
[  117.050201][ T6696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.196'.
[  117.413951][  T940] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  117.573650][ T5962] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  117.745109][  T940] usb 4-1: Using ep0 maxpacket: 32
[  118.203651][ T5962] usb 5-1: Using ep0 maxpacket: 32
[  118.209817][  T940] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  118.222867][  T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.225020][ T5962] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  118.265398][  T940] usb 4-1: config 0 descriptor??
[  118.304246][  T940] gspca_main: sq930x-2.14.0 probing 041e:403c
[  118.352194][ T5962] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac
[  118.362735][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.371791][ T5962] usb 5-1: Product: syz
[  118.376029][ T5962] usb 5-1: Manufacturer: syz
[  118.380619][ T5962] usb 5-1: SerialNumber: syz
[  118.480221][ T6723] tipc: Started in network mode
[  118.487239][ T6723] tipc: Node identity d60c5ab114f8, cluster identity 4711
[  118.495863][ T6723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.504292][ T6723] syzkaller0: entered promiscuous mode
[  118.509919][ T6723] syzkaller0: entered allmulticast mode
[  118.543124][ T6723] tipc: Resetting bearer <eth:syzkaller0>
[  118.553030][ T6722] tipc: Resetting bearer <eth:syzkaller0>
[  118.569893][ T6722] tipc: Disabling bearer <eth:syzkaller0>
[  119.018396][ T6730] netlink: 64 bytes leftover after parsing attributes in process `syz.0.207'.
[  119.403066][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'.
[  119.456491][ T6739] netlink: 'syz.1.210': attribute type 10 has an invalid length.
[  119.467167][ T6740] cramfs: Unknown parameter '/dev/full'
[  119.507957][ T6739] team0: entered promiscuous mode
[  119.516992][ T6739] team_slave_0: entered promiscuous mode
[  119.523044][ T6739] team_slave_1: entered promiscuous mode
[  119.538414][ T6739] 8021q: adding VLAN 0 to HW filter on device team0
[  119.554960][ T6739] bond0: (slave team0): Enslaving as an active interface with an up link
[  119.596934][ T6742] netlink: 'syz.0.211': attribute type 9 has an invalid length.
[  119.685725][ T6745] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  119.695269][ T6745] EXT4-fs (loop1): unable to read superblock
[  119.866440][ T6745] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  119.875967][ T6745] bcachefs (/dev/loop1): error reading default superblock: IO error: -5
[  119.884436][ T6745] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  119.893854][ T6745] bcachefs (/dev/loop1): error reading superblock: IO error: -5
[  119.901700][ T6745] bcachefs: bch2_fs_get_tree() error: EIO
[  119.922750][  T940] gspca_sq930x: ucbus_write failed -110
[  119.939235][  T940] sq930x 4-1:0.0: probe with driver sq930x failed with error -110
[  120.086804][ T6750] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  120.101641][ T6750] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  120.238948][ T6761] netlink: 'syz.0.216': attribute type 10 has an invalid length.
[  120.252910][ T6761] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  120.415157][ T5962] usb 5-1: USB disconnect, device number 8
[  120.423963][  T940] usb 4-1: USB disconnect, device number 16
[  120.935383][ T6760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.766947][ T6776] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  121.776895][ T6776] EXT4-fs (loop2): unable to read superblock
[  121.792682][ T6779] afs: Unknown parameter 'ÿÿÿÿ'
[  121.888225][ T6781] capability: warning: `syz.1.223' uses deprecated v2 capabilities in a way that may be insecure
[  121.969353][ T6775] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  121.978979][ T6775] FAT-fs (loop2): unable to read boot sector
[  122.195288][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[  123.322329][ T6816] use of bytesused == 0 is deprecated and will be removed in the future,
[  123.331426][ T6816] use the actual size instead.
[  123.764382][ T6821] overlayfs: failed to resolve './file1': -2
[  125.042787][ T6833] syz.0.234 (6833) used greatest stack depth: 16432 bytes left
[  126.612948][ T6875] comedi comedi0: Minor 32752 is invalid!
[  127.124189][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'.
[  128.257641][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'.
[  128.738630][ T6907] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  128.748360][ T6907] gfs2: error -5 reading superblock
[  128.762716][ T5962] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  129.227650][ T5962] usb 2-1: Using ep0 maxpacket: 32
[  129.331375][ T5962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.404605][ T5962] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  129.416890][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.450586][ T5962] usb 2-1: Product: syz
[  129.462927][ T5962] usb 2-1: Manufacturer: syz
[  129.473602][ T5962] usb 2-1: SerialNumber: syz
[  129.489824][ T5962] usb 2-1: config 0 descriptor??
[  129.508199][ T5962] usb 2-1: bad CDC descriptors
[  129.524335][ T5962] usb 2-1: unsupported MDLM descriptors
[  129.559972][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'.
[  129.779924][ T5999] usb 2-1: USB disconnect, device number 11
[  130.431260][ T6953] bridge_slave_0: left allmulticast mode
[  130.437235][ T6953] bridge_slave_0: left promiscuous mode
[  130.443107][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.555503][ T6953] bridge_slave_1: left allmulticast mode
[  130.587391][ T6953] bridge_slave_1: left promiscuous mode
[  130.593251][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.687628][ T6953] bond0: (slave bond_slave_0): Releasing backup interface
[  130.749546][ T6953] bond0: (slave bond_slave_1): Releasing backup interface
[  131.287122][ T6953] team0: Port device team_slave_0 removed
[  131.321364][ T6953] team0: Port device team_slave_1 removed
[  131.338474][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.354010][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.433857][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.442462][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.474630][ T6953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.805461][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'.
[  132.646477][ T7004] 
: entered promiscuous mode
[  132.807726][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  132.822868][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  133.278521][ T7008] mmap: syz.2.272 (7008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  133.451155][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'.
[  133.675128][ T7010] ntfs3: Unknown parameter 'ÿÿÿÿ'
[  133.685065][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.741219][ T7010] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  133.803581][ T5930] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  133.974118][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.086120][ T5930] usb 4-1: Using ep0 maxpacket: 8
[  134.106566][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  134.154635][ T5930] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3
[  134.182590][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.213633][ T5930] usb 4-1: Product: syz
[  134.232049][ T5930] usb 4-1: Manufacturer: syz
[  134.253362][ T5930] usb 4-1: SerialNumber: syz
[  134.294038][ T5930] usb 4-1: config 0 descriptor??
[  134.522636][   T43] usb 4-1: USB disconnect, device number 17
[  135.339619][ T7034] netlink: 140 bytes leftover after parsing attributes in process `syz.2.278'.
[  136.302509][ T7040] hfsplus: Bad value for 'uid'
[  136.406701][ T7040] netlink: 64 bytes leftover after parsing attributes in process `syz.3.280'.
[  136.434207][ T7040] netlink: 64 bytes leftover after parsing attributes in process `syz.3.280'.
[  136.622299][ T7044] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  136.689048][ T7044] EXT4-fs (loop1): unable to read superblock
[  136.776407][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'.
[  136.928567][ T7051] netlink: 68 bytes leftover after parsing attributes in process `syz.1.285'.
[  136.946968][ T7051] exfat: Unknown parameter 'É#�q\£;!'
[  137.303719][ T5999] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  137.473672][ T5999] usb 2-1: Using ep0 maxpacket: 8
[  137.504910][ T5999] usb 2-1: unable to get BOS descriptor or descriptor too short
[  137.573189][ T5999] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[  137.581963][ T5999] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  137.632273][ T5999] usb 2-1: config 4 has no interface number 0
[  137.771086][ T5999] usb 2-1: string descriptor 0 read error: -22
[  137.829705][ T5999] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  137.901039][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.013302][ T5999] uvcvideo 2-1:4.147: Found UVC 0.02 device <unnamed> (04f2:b746)
[  138.021368][ T5999] uvcvideo 2-1:4.147: No valid video chain found.
[  138.311122][ T7053] hfsplus: Bad value for 'uid'
[  138.359842][ T7053] netlink: 64 bytes leftover after parsing attributes in process `syz.1.286'.
[  138.384712][ T7053] netlink: 64 bytes leftover after parsing attributes in process `syz.1.286'.
[  138.401274][ T5911] usb 2-1: USB disconnect, device number 12
[  138.674609][ T7065] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  138.684523][ T7065] EXT4-fs (loop4): unable to read superblock
[  138.749022][ T7065] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.758970][ T7065] FAT-fs (loop4): unable to read boot sector
[  138.869038][ T7065] udf: Unknown parameter 'lastblocy'
[  139.593630][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  139.771941][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  139.818664][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.881516][    T9] usb 4-1: Product: syz
[  139.923572][    T9] usb 4-1: Manufacturer: syz
[  139.928190][    T9] usb 4-1: SerialNumber: syz
[  141.226418][ T5959] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  141.884759][ T5999] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  142.466107][ T5999] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  142.532923][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.590221][ T5999] usb 5-1: config 0 descriptor??
[  142.645175][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  142.681329][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.682140][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  142.714391][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.788839][ T7070] pimreg: entered allmulticast mode
[  142.888099][ T7150] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  143.038445][ T7156] netlink: 'syz.1.305': attribute type 3 has an invalid length.
[  143.144778][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO
[  143.169724][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  143.207234][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  143.240800][    T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  143.349948][    T9] usb 4-1: USB disconnect, device number 18
[  143.996769][ T7164] hfsplus: Bad value for 'uid'
[  144.094093][ T5999] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  144.110973][ T5999] [drm:udl_init] *ERROR* Selecting channel failed
[  144.132321][ T7165] netlink: 64 bytes leftover after parsing attributes in process `syz.3.308'.
[  144.176541][ T5999] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  144.183275][ T5999] [drm] Initialized udl on minor 2
[  144.229697][ T5999] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.229766][ T7165] netlink: 64 bytes leftover after parsing attributes in process `syz.3.308'.
[  144.284326][ T5999] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  144.302099][ T7167] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  144.335702][    T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.363694][ T5999] usb 5-1: USB disconnect, device number 9
[  144.394230][    T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  144.664302][ T7180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.964340][    T9] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  145.310567][    T9] usb 2-1: device descriptor read/64, error -71
[  145.323590][ T5999] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  145.503172][ T5999] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  145.533237][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.563642][ T5999] usb 5-1: Product: syz
[  145.573683][ T5999] usb 5-1: Manufacturer: syz
[  145.583624][    T9] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  145.591306][ T5999] usb 5-1: SerialNumber: syz
[  145.640892][ T5999] usb 5-1: config 0 descriptor??
[  145.763624][    T9] usb 2-1: device descriptor read/64, error -71
[  145.884035][    T9] usb usb2-port1: attempt power cycle
[  146.062966][ T5999] usb 5-1: f81604_write: reg: 105 data: 8a failed: -EPROTO
[  146.090638][ T5999] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  146.110900][ T5999] f81604 5-1:0.0: probe with driver f81604 failed with error -71
[  146.160389][ T5999] usb 5-1: USB disconnect, device number 10
[  146.245744][    T9] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  146.268513][ T7184] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.284248][ T7184] I/O error, dev loop3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.304894][    T9] usb 2-1: device descriptor read/8, error -71
[  146.334734][ T7184] Mount JFS Failure: -5
[  146.341502][ T7184] jfs_mount failed w/return code = -5
[  146.563603][    T9] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  146.654153][    T9] usb 2-1: device descriptor read/8, error -71
[  146.745592][ T7214] netlink: 256 bytes leftover after parsing attributes in process `syz.4.317'.
[  146.772957][ T7214] netlink: 10 bytes leftover after parsing attributes in process `syz.4.317'.
[  146.793032][    T9] usb usb2-port1: unable to enumerate USB device
[  147.345720][ T7225] hfsplus: Bad value for 'uid'
[  147.386482][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  147.398185][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  147.416103][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  147.426133][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  147.432801][ T7225] netlink: 64 bytes leftover after parsing attributes in process `syz.1.319'.
[  147.446620][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.521372][ T7225] netlink: 64 bytes leftover after parsing attributes in process `syz.1.319'.
[  147.604980][ T7226] lo speed is unknown, defaulting to 1000
[  148.588038][ T7244] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.624660][ T7244] FAT-fs (loop4): unable to read boot sector
[  149.214603][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'.
[  149.449577][ T7226] chnl_net:caif_netlink_parms(): no params data found
[  149.481063][   T30] audit: type=1800 audit(1892655622.898:34): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.320" name="bus" dev="ramfs" ino=14249 res=0 errno=0
[  149.500619][    C0] vkms_vblank_simulate: vblank timer overrun
[  149.523692][ T5863] Bluetooth: hci5: command tx timeout
[  150.538257][ T7275] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  150.572055][ T7275] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  150.639023][ T7275] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  150.653256][ T7275] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  150.669694][ T7275] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  150.677109][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.685881][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.693248][ T7226] bridge_slave_0: entered allmulticast mode
[  150.700951][ T7226] bridge_slave_0: entered promiscuous mode
[  150.709687][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.727260][ T7275] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  150.825354][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.853862][ T7226] bridge_slave_1: entered allmulticast mode
[  150.868254][ T7275] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  150.893088][ T7226] bridge_slave_1: entered promiscuous mode
[  150.912496][ T7275] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  150.960558][ T7275] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  151.007205][ T7275] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  151.037063][ T7275] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  151.071516][ T7275] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  151.105802][ T7275] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  151.122822][ T7275] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  151.147623][ T7275] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  151.158085][ T7226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.218757][ T7226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.414525][ T7226] team0: Port device team_slave_0 added
[  151.428932][ T7226] team0: Port device team_slave_1 added
[  151.468077][ T7303] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  151.508213][ T7303] UDF-fs: Scanning with blocksize 512 failed
[  151.541670][ T7303] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  151.559425][ T7303] UDF-fs: Scanning with blocksize 1024 failed
[  151.594312][ T7303] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  151.644561][ T7303] UDF-fs: Scanning with blocksize 2048 failed
[  151.651018][ T7303] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  151.692675][ T7303] UDF-fs: Scanning with blocksize 4096 failed
[  151.884757][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.901959][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.029445][ T7226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.094645][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.138626][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.280337][ T7226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.316093][ T5999] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  152.440255][ T7226] hsr_slave_0: entered promiscuous mode
[  152.473663][ T5999] usb 2-1: Using ep0 maxpacket: 8
[  153.318761][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout
[  153.318783][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout
[  153.324942][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout
[  153.330851][ T5876] Bluetooth: hci3: command 0x0c1a tx timeout
[  153.337543][ T5863] Bluetooth: hci5: command 0x040f tx timeout
[  153.356021][ T7226] hsr_slave_1: entered promiscuous mode
[  153.394987][ T7226] debugfs: 'hsr0' already exists in 'hsr'
[  153.400784][ T7226] Cannot create hsr debugfs directory
[  153.528201][ T7340] lo speed is unknown, defaulting to 1000
[  153.550500][ T7340] lo speed is unknown, defaulting to 1000
[  153.563010][ T7339] lo speed is unknown, defaulting to 1000
[  153.579147][ T7340] lo speed is unknown, defaulting to 1000
[  153.608445][ T7340] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  153.727547][ T5999] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  153.736640][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.746628][ T5999] usb 2-1: Product: syz
[  153.759067][ T5999] usb 2-1: Manufacturer: syz
[  153.759087][ T5999] usb 2-1: SerialNumber: syz
[  153.771996][ T5999] usb 2-1: config 0 descriptor??
[  153.829006][ T7340] lo speed is unknown, defaulting to 1000
[  153.879577][ T7340] lo speed is unknown, defaulting to 1000
[  153.908342][ T7340] lo speed is unknown, defaulting to 1000
[  153.942759][ T7340] lo speed is unknown, defaulting to 1000
[  153.972196][ T7340] lo speed is unknown, defaulting to 1000
[  153.995974][ T5999] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  154.001790][ T7340] lo speed is unknown, defaulting to 1000
[  154.053330][ T7340] lo speed is unknown, defaulting to 1000
[  154.142654][ T7226] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  154.175833][ T7226] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  154.222551][ T7226] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  154.303603][ T7226] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  154.392591][ T7359] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  154.412716][ T5999] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  154.433156][ T7359] EXT4-fs (loop3): unable to read superblock
[  154.455504][ T5999] usb 2-1: USB disconnect, device number 18
[  154.605655][ T7226] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.672152][ T7226] 8021q: adding VLAN 0 to HW filter on device team0
[  154.709955][  T980] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.717216][  T980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.751004][  T980] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.758196][  T980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.873974][ T5959] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  155.009174][ T5959] usb 4-1: device descriptor read/64, error -71
[  155.234718][ T7372] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  155.395916][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout
[  155.402110][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout
[  155.408367][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout
[  155.424492][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout
[  155.430681][ T5863] Bluetooth: hci5: command 0x040f tx timeout
[  155.703661][ T5959] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  155.862808][ T5959] usb 4-1: device descriptor read/64, error -71
[  155.957658][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.004857][ T5959] usb usb4-port1: attempt power cycle
[  156.363777][ T5959] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  156.568525][ T5959] usb 4-1: device descriptor read/8, error -71
[  157.073618][ T5959] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  157.287764][ T5959] usb 4-1: device descriptor read/8, error -71
[  157.527004][ T5873] Bluetooth: hci5: command 0x040f tx timeout
[  157.527118][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  157.539327][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout
[  157.545441][ T5876] Bluetooth: hci2: command 0x0c1a tx timeout
[  157.551559][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout
[  157.558953][ T5959] usb usb4-port1: unable to enumerate USB device
[  157.598742][ T7226] veth0_vlan: entered promiscuous mode
[  157.610213][ T7226] veth1_vlan: entered promiscuous mode
[  157.652757][ T7226] veth0_macvtap: entered promiscuous mode
[  157.657134][ T7226] veth1_macvtap: entered promiscuous mode
[  157.682958][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.689538][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.719757][ T1162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.721617][ T1162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.722031][   T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.722195][   T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.766953][ T7394] cgroup2: Unknown parameter 'ÿÿÿÿ'
[  158.024061][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.024083][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.173191][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.173213][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.810180][ T7420] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.873771][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  159.563619][ T5911] usb 6-1: Using ep0 maxpacket: 32
[  159.590773][ T5911] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  159.600165][ T5874] Bluetooth: hci5: command 0x040f tx timeout
[  159.613955][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.621962][ T5911] usb 6-1: Product: syz
[  159.629038][ T5911] usb 6-1: Manufacturer: syz
[  159.639317][ T5911] usb 6-1: SerialNumber: syz
[  159.650479][ T5911] usb 6-1: config 0 descriptor??
[  159.666076][ T5911] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  159.793665][ T5999] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  159.953736][ T5999] usb 4-1: device descriptor read/64, error -71
[  160.213858][ T5999] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  160.276771][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.306650][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.364920][ T5999] usb 4-1: device descriptor read/64, error -71
[  160.474156][ T5999] usb usb4-port1: attempt power cycle
[  160.823664][ T5999] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  160.878577][ T5999] usb 4-1: device descriptor read/8, error -71
[  161.037958][ T7430] netlink: 'syz.4.359': attribute type 1 has an invalid length.
[  161.143673][ T5999] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  161.192996][ T7430] bond1: entered promiscuous mode
[  161.198875][ T7430] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.228636][ T5999] usb 4-1: device descriptor read/8, error -71
[  161.279731][ T7433] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.304400][ T7433] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  161.333688][ T7433] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  161.343999][ T5999] usb usb4-port1: unable to enumerate USB device
[  161.366467][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.384955][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.404638][ T7433] bond1: (slave wireguard0): making interface the new active one
[  161.433081][ T7433] wireguard0: entered promiscuous mode
[  161.445881][ T7433] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  161.683619][ T5874] Bluetooth: hci5: command 0x040f tx timeout
[  162.143826][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.363'.
[  162.152835][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.363'.
[  162.225112][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'.
[  162.254377][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'.
[  162.293339][ T7441] netlink: 'syz.3.363': attribute type 6 has an invalid length.
[  162.906734][ T5911] gspca_stk1135: reg_w 0x351 err -110
[  162.913364][ T5911] gspca_stk1135: serial bus timeout: status=0x00
[  162.924648][ T5911] gspca_stk1135: Sensor write failed
[  162.930116][ T5911] gspca_stk1135: serial bus timeout: status=0x00
[  162.970605][ T7453] tipc: Started in network mode
[  162.975716][ T7453] tipc: Node identity ac14140f, cluster identity 4711
[  162.985824][ T7453] tipc: New replicast peer: 255.255.255.255
[  162.993436][ T7453] tipc: Enabled bearer <udp:syz2>, priority 10
[  163.059314][ T5911] gspca_stk1135: Sensor write failed
[  163.553601][ T5911] gspca_stk1135: serial bus timeout: status=0x00
[  163.559970][ T5911] gspca_stk1135: Sensor read failed
[  163.586353][ T7456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  163.612572][ T5911] gspca_stk1135: serial bus timeout: status=0x00
[  163.632670][ T5911] gspca_stk1135: Sensor read failed
[  163.661609][ T5911] gspca_stk1135: Detected sensor type unknown (0x0)
[  163.699140][ T5911] gspca_stk1135: serial bus timeout: status=0x00
[  163.743393][ T5911] gspca_stk1135: Sensor read failed
[  163.757466][ T5911] gspca_stk1135: serial bus timeout: status=0x00
[  163.769182][ T5874] Bluetooth: hci5: command 0x040f tx timeout
[  163.775858][ T5911] gspca_stk1135: Sensor read failed
[  163.781084][ T5911] gspca_stk1135: serial bus timeout: status=0x00
[  163.787528][ T5911] gspca_stk1135: Sensor write failed
[  163.792828][ T5911] gspca_stk1135: serial bus timeout: status=0x00
[  163.799239][ T5911] gspca_stk1135: Sensor write failed
[  163.804663][ T5911] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110
[  163.814902][ T5911] usb 6-1: USB disconnect, device number 2
[  163.968309][ T7470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.371'.
[  163.997032][  T940] tipc: Node number set to 2886997007
[  164.083665][   T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  164.484563][   T43] usb 2-1: device descriptor read/64, error -71
[  164.566601][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.372'.
[  164.619953][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'.
[  164.763769][   T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  164.903663][   T43] usb 2-1: device descriptor read/64, error -71
[  165.034375][   T43] usb usb2-port1: attempt power cycle
[  165.093640][ T5930] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  165.253606][ T5930] usb 6-1: Using ep0 maxpacket: 8
[  165.270526][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short
[  165.285608][ T5930] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  165.297181][ T5930] usb 6-1: config 1 interface 0 has no altsetting 0
[  165.309880][ T5930] usb 6-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  165.319297][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.330083][ T5930] usb 6-1: Product: syz
[  165.335500][ T5930] usb 6-1: Manufacturer: syz
[  165.340266][ T5930] usb 6-1: SerialNumber: syz
[  165.383703][   T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  165.419198][   T43] usb 2-1: device descriptor read/8, error -71
[  165.663652][   T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  165.694462][   T43] usb 2-1: device descriptor read/8, error -71
[  165.805306][   T43] usb usb2-port1: unable to enumerate USB device
[  166.341866][ T7502] netlink: 'syz.4.380': attribute type 4 has an invalid length.
[  166.359603][ T7502] netlink: 'syz.4.380': attribute type 4 has an invalid length.
[  166.710034][ T7487] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  166.745225][ T7487] I/O error, dev loop5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  166.787650][ T7487] Mount JFS Failure: -5
[  166.791828][ T7487] jfs_mount failed w/return code = -5
[  166.918957][ T7487] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  167.455054][ T5930] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input9
[  167.514627][ T5219] bcm5974 6-1:1.0: could not read from device
[  167.560241][ T5219] bcm5974 6-1:1.0: could not read from device
[  167.584357][ T5930] usb 6-1: USB disconnect, device number 3
[  167.599377][ T5219] bcm5974 6-1:1.0: could not read from device
[  167.618691][ T5219] bcm5974 6-1:1.0: could not read from device
[  167.958193][ T7533] netlink: 'syz.1.389': attribute type 3 has an invalid length.
[  168.003639][ T5962] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  168.173681][ T5962] usb 5-1: Using ep0 maxpacket: 8
[  168.202180][ T5962] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  168.288565][ T5962] usb 5-1: config 2 has no interface number 0
[  168.314163][ T7536] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.390'.
[  168.713681][ T5962] usb 5-1: config 2 interface 31 has no altsetting 0
[  168.754406][ T5962] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  168.790452][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.803577][ T5962] usb 5-1: Product: syz
[  168.807751][ T5962] usb 5-1: Manufacturer: syz
[  168.852988][ T5962] usb 5-1: SerialNumber: syz
[  168.870228][ T7538] pimreg: left allmulticast mode
[  169.547550][ T7547] EXT4-fs: Ignoring removed mblk_io_submit option
[  169.554140][ T7547] EXT4-fs: inline encryption not supported
[  169.560612][ T7547] EXT4-fs: Ignoring removed mblk_io_submit option
[  169.575763][ T7547] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  169.585992][ T7547] EXT4-fs (loop1): unable to read superblock
[  170.315991][ T7550] netlink: 'syz.4.388': attribute type 1 has an invalid length.
[  170.536403][ T7550] bond2: (slave bridge1): Enslaving as an active interface with a down link
[  170.609797][ T5962] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[  170.640301][ T5962] usb 5-1: USB disconnect, device number 11
[  170.763312][ T7562] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  170.825560][ T7561] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  170.829966][ T7559] lo speed is unknown, defaulting to 1000
[  170.895195][ T7561] EXT4-fs (loop1): unable to read superblock
[  171.053848][ T7559] lo speed is unknown, defaulting to 1000
[  172.741672][ T7585] ntfs3: Unknown parameter ''
[  173.205433][ T7595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.406'.
[  173.224002][ T7597] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.405'.
[  174.845978][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.859061][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.870717][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.886657][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.897226][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.122197][ T7614] lo speed is unknown, defaulting to 1000
[  175.278778][ T7614] lo speed is unknown, defaulting to 1000
[  175.523210][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'.
[  175.834834][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[  175.851687][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[  175.939258][ T7614] chnl_net:caif_netlink_parms(): no params data found
[  175.953673][  T940] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  176.136905][  T940] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64
[  176.166695][  T940] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.197015][ T7641] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.419'.
[  176.211210][ T7637] ./cgroup: Can't lookup blockdev
[  176.223621][  T940] usb 6-1: config 0 interface 0 has no altsetting 0
[  176.257872][  T940] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  176.310697][  T940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.334773][  T940] usb 6-1: config 0 descriptor??
[  176.355075][ T7625] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  176.582502][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.633980][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.796391][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.810937][ T7649] sctp: [Deprecated]: syz.3.421 (pid 7649) Use of int in maxseg socket option.
[  176.810937][ T7649] Use struct sctp_assoc_value instead
[  176.832377][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.904009][ T7614] bridge_slave_0: entered allmulticast mode
[  176.925249][  T940] kye 0003:0458:5015.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  176.938076][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.420'.
[  176.945728][ T7614] bridge_slave_0: entered promiscuous mode
[  176.963641][ T5874] Bluetooth: hci6: command tx timeout
[  177.005245][  T940] kye 0003:0458:5015.0002: unknown main item tag 0x0
[  177.061445][  T940] kye 0003:0458:5015.0002: unknown main item tag 0x0
[  177.064956][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.099778][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.125507][ T7614] bridge_slave_1: entered allmulticast mode
[  177.130638][  T940] kye 0003:0458:5015.0002: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0
[  177.137797][ T7614] bridge_slave_1: entered promiscuous mode
[  177.225203][  T940] kye 0003:0458:5015.0002: tablet-enabling feature report not found
[  177.303653][  T940] kye 0003:0458:5015.0002: tablet enabling failed
[  177.335247][  T940] usb 6-1: USB disconnect, device number 4
[  177.605660][ T7614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.649861][ T7614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.770746][ T7679] netlink: 'syz.5.428': attribute type 1 has an invalid length.
[  177.827681][ T7681] netlink: 'syz.5.428': attribute type 1 has an invalid length.
[  177.913999][  T940] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  178.075225][  T940] usb 5-1: config 0 has an invalid interface number: 217 but max is 0
[  178.155772][  T940] usb 5-1: config 0 has no interface number 0
[  178.168778][  T940] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  178.183633][  T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.202184][  T940] usb 5-1: Product: syz
[  178.209755][  T940] usb 5-1: Manufacturer: syz
[  178.220172][  T940] usb 5-1: SerialNumber: syz
[  178.237077][  T940] usb 5-1: config 0 descriptor??
[  178.262829][  T940] hub 5-1:0.217: bad descriptor, ignoring hub
[  178.272799][  T940] hub 5-1:0.217: probe with driver hub failed with error -5
[  178.446188][ T7614] team0: Port device team_slave_0 added
[  178.464490][  T940] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  178.494197][ T7614] team0: Port device team_slave_1 added
[  178.578030][  T940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  178.800825][ T7687] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1
[  178.810403][ T7687] SQUASHFS error: Failed to read block 0x0: -5
[  178.816737][ T7687] unable to read squashfs_super_block
[  179.003370][  T940] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  179.012246][  T940] usb 5-1: media controller created
[  179.033868][ T5874] Bluetooth: hci6: command tx timeout
[  179.076862][  T940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.112564][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.120509][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.174670][ T7614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.188843][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.199588][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.230002][  T940] DVB: Unable to find symbol dib7000p_attach()
[  179.243841][  T940] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  179.252522][ T7614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.411743][ T7614] hsr_slave_0: entered promiscuous mode
[  179.542697][  T940] rc_core: IR keymap rc-dib0700-rc5 not found
[  179.549537][  T940] Registered IR keymap rc-empty
[  179.554774][  T940] dvb-usb: could not initialize remote control.
[  179.563862][ T7614] hsr_slave_1: entered promiscuous mode
[  179.570340][ T7614] debugfs: 'hsr0' already exists in 'hsr'
[  179.576147][  T940] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  180.090800][ T7614] Cannot create hsr debugfs directory
[  180.107329][  T940] usb 5-1: USB disconnect, device number 12
[  180.284538][  T940] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  180.338987][ T7701] hfsplus: Bad value for 'uid'
[  180.714217][  T940] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  180.928202][  T940] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  180.977939][  T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.994971][  T940] usb 5-1: Product: syz
[  181.007102][  T940] usb 5-1: Manufacturer: syz
[  181.019585][  T940] usb 5-1: SerialNumber: syz
[  181.029664][  T940] usb 5-1: config 0 descriptor??
[  181.091605][ T7614] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  181.114374][ T5874] Bluetooth: hci6: command tx timeout
[  181.124653][ T7614] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  181.170481][ T7614] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  181.182136][ T7614] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  181.267641][  T940] hso 5-1:0.0: Failed to find BULK IN ep
[  181.294528][  T940] usb-storage 5-1:0.0: USB Mass Storage device detected
[  181.442607][ T7727] overlayfs: failed to resolve './file0': -2
[  181.484682][  T940] usb 5-1: USB disconnect, device number 13
[  181.512533][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.569013][ T7614] 8021q: adding VLAN 0 to HW filter on device team0
[  181.610890][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.618040][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.699403][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.706582][ T6932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.821225][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'.
[  181.994708][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'.
[  182.408871][ T7750] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744071562067969)
[  182.433836][ T7750] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  182.473847][  T940] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  182.562255][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.694256][  T940] usb 5-1: Using ep0 maxpacket: 8
[  182.720808][  T940] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  182.733738][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  182.763671][  T940] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  182.789416][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  182.801948][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  182.824565][  T940] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  182.863601][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  182.911044][  T940] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  182.933966][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  182.963754][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  183.006359][  T940] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  183.033663][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  183.084815][  T940] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  183.123795][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  183.134448][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'.
[  183.173579][  T940] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  183.194735][ T5873] Bluetooth: hci6: command tx timeout
[  183.220966][  T940] usb 5-1: string descriptor 0 read error: -22
[  183.233680][  T940] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  183.235656][ T5999] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  183.260374][  T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.315967][  T940] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  183.433783][ T5999] usb 6-1: Using ep0 maxpacket: 32
[  183.477592][ T7614] veth0_vlan: entered promiscuous mode
[  183.489070][ T5999] usb 6-1: config 0 has no interfaces?
[  183.498447][ T5999] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  183.526864][ T7743] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  183.530100][ T7614] veth1_vlan: entered promiscuous mode
[  183.533486][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  183.554123][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.563726][ T7743] vhci_hcd vhci_hcd.0: Device attached
[  183.567146][ T5999] usb 6-1: config 0 descriptor??
[  183.590908][ T7783] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14)
[  183.597522][ T7783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  183.605932][ T7783] vhci_hcd vhci_hcd.0: Device attached
[  183.619280][ T7743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  183.667645][ T7783] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18)
[  183.674249][ T7783] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  183.715055][ T7783] vhci_hcd vhci_hcd.0: Device attached
[  183.733355][ T7614] veth0_macvtap: entered promiscuous mode
[  183.758472][ T7743] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17)
[  183.763714][ T7614] veth1_macvtap: entered promiscuous mode
[  183.765090][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  183.784501][  T940] vhci_hcd: vhci_device speed not set
[  183.808428][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.823332][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.858821][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.877962][   T43] usb 6-1: USB disconnect, device number 5
[  183.889306][  T940] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  183.933905][ T7743] vhci_hcd vhci_hcd.0: Device attached
[  183.952535][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.963688][ T7794] program syz.3.454 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.985157][   T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.012645][ T7743] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(21)
[  184.019254][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  184.036344][ T1162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.065634][ T1162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.066877][ T7799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  184.099430][ T1162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.108520][ T7743] vhci_hcd vhci_hcd.0: Device attached
[  184.157133][ T7783] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  184.205833][ T7799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  184.378185][ T7795] vhci_hcd: connection closed
[  184.379726][ T6931] vhci_hcd: stop threads
[  184.381662][ T5930] usb 5-1: USB disconnect, device number 14
[  184.384637][ T7778] vhci_hcd: connection reset by peer
[  184.415584][ T7786] vhci_hcd: connection closed
[  184.415811][ T7790] vhci_hcd: connection closed
[  184.430642][ T7784] vhci_hcd: connection closed
[  184.430857][ T6931] vhci_hcd: release socket
[  184.457543][ T6931] vhci_hcd: disconnect device
[  184.464331][ T6931] vhci_hcd: stop threads
[  184.468622][ T6931] vhci_hcd: release socket
[  184.476310][ T6932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.499305][ T6932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.512077][ T6931] vhci_hcd: disconnect device
[  184.531238][ T6931] vhci_hcd: stop threads
[  184.541674][ T6931] vhci_hcd: release socket
[  184.547531][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  184.643039][ T6931] vhci_hcd: disconnect device
[  184.700532][ T6931] vhci_hcd: stop threads
[  184.763817][ T6931] vhci_hcd: release socket
[  184.973869][ T6931] vhci_hcd: disconnect device
[  185.008715][    T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  185.024579][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.036037][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.046170][ T6931] vhci_hcd: stop threads
[  185.049675][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.064852][    T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  185.084725][ T6931] vhci_hcd: release socket
[  185.089485][    T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  185.097750][    T9] usb 4-1: Manufacturer: syz
[  185.103891][ T6931] vhci_hcd: disconnect device
[  185.113465][    T9] usb 4-1: config 0 descriptor??
[  185.274408][ T5873] Bluetooth: hci6: command 0x0405 tx timeout
[  185.278738][    T9] rc_core: IR keymap rc-hauppauge not found
[  185.296628][    T9] Registered IR keymap rc-empty
[  185.316766][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  185.342110][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11
[  185.375795][ T7813] 9pnet_fd: Insufficient options for proto=fd
[  185.415418][    C0] igorplugusb 4-1:0.0: Error: urb status = -32
[  185.478932][ T7815] iso9660: Bad value for 'check'
[  185.508148][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.537117][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.702444][ T6037] usb 4-1: USB disconnect, device number 27
[  186.044539][ T7838] hfsplus: Bad value for 'uid'
[  186.071024][ T7838] netlink: 64 bytes leftover after parsing attributes in process `syz.4.463'.
[  186.073757][ T5930] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  186.088716][ T7838] netlink: 64 bytes leftover after parsing attributes in process `syz.4.463'.
[  186.113727][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  186.265554][ T5930] usb 7-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.267448][    T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  186.290593][ T5930] usb 7-1: config 0 interface 0 has no altsetting 0
[  186.313594][ T5930] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  186.318049][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.344383][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'.
[  186.351464][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.372353][    T9] usb 6-1: Product: syz
[  186.383675][    T9] usb 6-1: Manufacturer: syz
[  186.386522][ T5930] usb 7-1: config 0 descriptor??
[  186.394399][    T9] usb 6-1: SerialNumber: syz
[  186.430794][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'.
[  186.443749][   T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  186.617278][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  186.632825][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  186.649229][   T43] usb 5-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb
[  186.674588][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.699918][   T43] usb 5-1: Product: syz
[  186.710270][   T43] usb 5-1: Manufacturer: syz
[  186.737586][    T9] rtl8150 6-1:1.0: couldn't reset the device
[  186.738972][   T43] usb 5-1: SerialNumber: syz
[  186.895049][    T9] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[  186.905873][   T43] usb 5-1: config 0 descriptor??
[  186.928951][   T43] keyspan 5-1:0.0: Keyspan - (without firmware) converter detected
[  187.045469][    T9] usb 6-1: USB disconnect, device number 6
[  187.155325][ T7840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.177307][ T7840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.188691][ T7840] tipc: Can't bind to reserved service type 1
[  187.221979][ T7840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.232458][ T7840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.374965][ T5930] sony 0003:054C:024B.0003: unbalanced delimiter at end of report description
[  187.419124][ T5930] sony 0003:054C:024B.0003: parse failed
[  187.444913][ T5930] sony 0003:054C:024B.0003: probe with driver sony failed with error -22
[  187.815395][ T7858] hub 9-0:1.0: USB hub found
[  187.823384][ T7858] hub 9-0:1.0: 1 port detected
[  188.507172][ T5930] usb 5-1: USB disconnect, device number 15
[  188.529855][ T5930] keyspan 5-1:0.0: device disconnected
[  188.540815][ T7862] kvm: pic: non byte write
[  189.028071][  T940] vhci_hcd: vhci_device speed not set
[  189.375357][ T5930] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  189.533596][ T5930] usb 4-1: Using ep0 maxpacket: 8
[  189.542738][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short
[  189.551865][ T5930] usb 4-1: config 4 has too many interfaces: 110, using maximum allowed: 32
[  189.576724][ T5930] usb 4-1: config 4 has an invalid interface number: 147 but max is 109
[  189.585441][ T5911] usb 7-1: USB disconnect, device number 2
[  189.623858][   T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  189.648196][ T5930] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[  189.663655][ T5930] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  189.688627][ T5930] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 110
[  189.714585][ T5930] usb 4-1: config 4 has no interface number 0
[  189.743255][ T5930] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  189.814023][   T43] usb 5-1: Using ep0 maxpacket: 16
[  189.826478][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.835910][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.856157][ T5930] usb 4-1: Product: syz
[  189.864012][   T43] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  189.881364][ T5930] usb 4-1: Manufacturer: syz
[  189.893798][ T5930] usb 4-1: SerialNumber: syz
[  189.898559][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.982084][   T43] usb 5-1: config 0 descriptor??
[  190.321223][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'.
[  190.457865][   T43] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  190.694392][   T43] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  190.791192][   T43] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  190.940397][   T43] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  191.172755][ T5999] usb usb42-port1: attempt power cycle
[  191.254313][   T43] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  191.872811][   T43] monterey 0003:0566:3004.0004: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.4-1/input0
[  192.443293][   T43] usb 5-1: USB disconnect, device number 16
[  193.755987][ T7899] fido_id[7899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  193.817340][ T5999] usb usb42-port1: unable to enumerate USB device
[  194.032606][ T5930] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  194.081085][ T5930] uvcvideo 4-1:4.147: No valid video chain found.
[  194.154099][ T5930] usb 4-1: USB disconnect, device number 28
[  194.247384][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.391522][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.436352][ T5999] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  195.145359][ T5999] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30
[  195.166104][ T5999] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  195.196946][ T5999] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.298121][ T5999] usb 5-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  195.363277][ T5999] usb 5-1: config 1 interface 0 has no altsetting 0
[  195.391064][ T5999] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.424531][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  195.453584][ T5999] usb 5-1: SerialNumber: syz
[  195.478709][ T5999] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12
[  195.594675][ T5873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  195.604350][ T5873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  195.612003][ T5873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  195.620302][ T5873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  195.627981][ T5873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  195.705803][    T9] usb 5-1: USB disconnect, device number 17
[  195.757502][ T7917] lo speed is unknown, defaulting to 1000
[  195.786433][ T7917] lo speed is unknown, defaulting to 1000
[  197.287212][ T7917] chnl_net:caif_netlink_parms(): no params data found
[  197.307917][ T7938] hfsplus: Unknown parameter 'nodecompËÄöƒ¶Î	Þd'
[  197.385594][ T7938] netlink: 64 bytes leftover after parsing attributes in process `syz.4.491'.
[  197.446713][ T7938] netlink: 64 bytes leftover after parsing attributes in process `syz.4.491'.
[  197.453859][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.6.492'.
[  197.561274][ T7916] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.591402][ T7916] I/O error, dev loop5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.604225][ T7916] Mount JFS Failure: -5
[  197.608391][ T7916] jfs_mount failed w/return code = -5
[  197.683854][ T5874] Bluetooth: hci7: command tx timeout
[  198.257415][ T1162] Bluetooth: hci8: Frame reassembly failed (-84)
[  198.401913][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.414935][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.424494][ T7917] bridge_slave_0: entered allmulticast mode
[  198.437735][ T7917] bridge_slave_0: entered promiscuous mode
[  198.458013][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.478077][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.496795][ T7917] bridge_slave_1: entered allmulticast mode
[  198.509697][ T7917] bridge_slave_1: entered promiscuous mode
[  198.648009][ T5938] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  198.813606][ T5938] usb 7-1: Using ep0 maxpacket: 8
[  198.836564][ T5938] usb 7-1: config 0 has an invalid interface number: 122 but max is 0
[  198.849667][ T7917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.873507][ T5938] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.897246][ T7917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.908120][ T5938] usb 7-1: config 0 has no interface number 0
[  198.914874][ T5938] usb 7-1: config 0 interface 122 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  198.925719][ T5938] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  198.937006][ T5938] usb 7-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  198.948211][ T5938] usb 7-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[  198.972360][ T5938] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  198.983590][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.996383][ T5938] usb 7-1: Product: syz
[  199.000667][ T5938] usb 7-1: Manufacturer: syz
[  199.009285][ T5938] usb 7-1: SerialNumber: syz
[  199.028584][ T7917] team0: Port device team_slave_0 added
[  199.036589][ T5938] usb 7-1: config 0 descriptor??
[  199.056121][ T7917] team0: Port device team_slave_1 added
[  199.064916][ T7955] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  199.077665][ T7955] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  199.308939][ T7955] trusted_key: syz.6.494 sent an empty control message without MSG_MORE.
[  199.349835][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.372333][ T5938] usb 7-1: NFC: intf ffff888020fff000 id ffffffff8ed5d780
[  199.396795][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.401429][ T5938] usb 7-1: USB disconnect, device number 3
[  199.527852][ T7917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.601637][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.617147][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.643329][ T7917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.753663][ T5873] Bluetooth: hci7: command tx timeout
[  199.801521][ T7917] hsr_slave_0: entered promiscuous mode
[  199.813846][ T7917] hsr_slave_1: entered promiscuous mode
[  199.830197][ T7917] debugfs: 'hsr0' already exists in 'hsr'
[  199.836147][ T7917] Cannot create hsr debugfs directory
[  200.085769][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.500'.
[  200.176440][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.184799][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.313802][ T5874] Bluetooth: hci8: Opcode 0x1003 failed: -110
[  200.804199][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.503'.
[  200.864438][ T7983] hfsplus: Bad value for 'uid'
[  200.907454][ T7983] netlink: 64 bytes leftover after parsing attributes in process `syz.6.502'.
[  201.019189][ T7983] netlink: 64 bytes leftover after parsing attributes in process `syz.6.502'.
[  201.029870][ T7989] @: renamed from vlan0
[  201.084750][ T7989] netlink: 'syz.4.505': attribute type 142 has an invalid length.
[  201.764057][ T8002] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  201.773887][ T8002] EXT4-fs (loop6): unable to read superblock
[  201.843689][ T5874] Bluetooth: hci7: command tx timeout
[  202.549517][ T8002] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  202.559424][ T8002] bcachefs (/dev/loop6): error reading default superblock: IO error: -5
[  202.568093][ T8002] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  202.577699][ T8002] bcachefs (/dev/loop6): error reading superblock: IO error: -5
[  202.586146][ T8002] bcachefs: bch2_fs_get_tree() error: EIO
[  203.298251][ T7917] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  203.536570][ T8007] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.508'.
[  203.546071][ T8007] openvswitch: netlink: Message has 512 unknown bytes.
[  203.889178][ T7917] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  203.913637][ T5874] Bluetooth: hci7: command tx timeout
[  203.927751][ T7917] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  203.959519][ T7917] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  204.683747][  T980] Bluetooth: hci8: Frame reassembly failed (-84)
[  204.962602][ T7917] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.980111][ T8037] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.041097][ T8037] hpfs: hpfs_map_sector(): read error
[  205.114941][ T7917] 8021q: adding VLAN 0 to HW filter on device team0
[  205.225403][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.232664][ T6926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.288858][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.296113][ T6926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.403140][ T8034] lo speed is unknown, defaulting to 1000
[  205.449889][ T8034] lo speed is unknown, defaulting to 1000
[  206.058042][ T8047] hfsplus: Bad value for 'uid'
[  206.164611][ T8047] netlink: 64 bytes leftover after parsing attributes in process `syz.6.515'.
[  206.215768][ T8047] netlink: 64 bytes leftover after parsing attributes in process `syz.6.515'.
[  206.462820][ T8056] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  206.544128][ T8056] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  206.553669][ T5874] Bluetooth: hci8: Opcode 0x1003 failed: -110
[  206.626260][ T8056] EXT4-fs (loop6): unable to read superblock
[  206.652427][ T7917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.933950][   T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  208.046463][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.518'.
[  208.108299][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.518'.
[  208.258827][   T43] usb 4-1: Using ep0 maxpacket: 16
[  208.279055][   T43] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  208.310020][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.335922][   T43] usb 4-1: Product: syz
[  208.344115][   T43] usb 4-1: Manufacturer: syz
[  208.348731][   T43] usb 4-1: SerialNumber: syz
[  208.358000][   T43] usb 4-1: config 0 descriptor??
[  208.377889][ T7917] veth0_vlan: entered promiscuous mode
[  208.423015][ T7917] veth1_vlan: entered promiscuous mode
[  208.572025][   T43] speedtch 4-1:0.0: speedtch_bind: data interface not found!
[  208.582895][ T7917] veth0_macvtap: entered promiscuous mode
[  208.617631][   T43] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  208.639497][ T7917] veth1_macvtap: entered promiscuous mode
[  208.672174][   T43] usb 4-1: USB disconnect, device number 29
[  208.709570][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.751720][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.777800][ T6931] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.788395][ T6931] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.818406][ T6931] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.886241][ T6931] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.073621][ T6932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.081458][ T6932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.129696][ T6925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.140785][ T6925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.532346][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.6.529'.
[  209.744910][ T8104] evm: overlay not supported
[  209.826358][ T5874] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  209.834499][ T5874] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  210.060112][ T8107] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  210.068023][ T8107] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  210.076858][ T8107] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  210.084605][ T8107] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  212.823942][ T8132] netlink: 666 bytes leftover after parsing attributes in process `syz.4.537'.
[  214.409491][ T5959] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  214.764387][ T5959] usb 7-1: Using ep0 maxpacket: 32
[  214.805232][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.999312][ T5959] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  215.023327][ T5959] usb 7-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0
[  215.048112][ T5959] usb 7-1: Manufacturer: syz
[  215.061580][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.072101][ T5959] usb 7-1: config 0 descriptor??
[  215.082336][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.113960][   T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  215.157898][ T5874] Bluetooth: hci5: ACL packet for unknown connection handle 201
[  215.244785][ T5874] Bluetooth: hci5: ACL packet for unknown connection handle 201
[  215.254178][   T43] usb 4-1: device descriptor read/64, error -71
[  215.286760][ T8155] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  215.303940][ T5930] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  215.320254][ T8155] FAT-fs (loop6): unable to read boot sector
[  215.584336][   T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  216.156402][   T43] usb 4-1: device descriptor read/64, error -71
[  216.175496][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.235924][ T5930] usb 5-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e4.df
[  216.267118][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.278883][   T43] usb usb4-port1: attempt power cycle
[  216.311127][ T5930] usb 5-1: config 0 descriptor??
[  216.333923][ T5930] pwc: Philips PCA646VC USB webcam detected.
[  216.524017][ T5930] pwc: send_video_command error -71
[  216.545349][ T5930] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  216.570976][ T5930] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  216.607051][ T5930] usb 5-1: USB disconnect, device number 18
[  216.644999][   T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  216.673638][ T5938] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  216.689560][   T43] usb 4-1: device descriptor read/8, error -71
[  216.853586][ T5938] usb 8-1: Using ep0 maxpacket: 32
[  216.872324][ T5938] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  216.898391][ T5938] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.929113][ T5938] usb 8-1: config 0 descriptor??
[  216.943645][   T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  216.975455][ T5938] gspca_main: sq930x-2.14.0 probing 041e:403c
[  216.982650][   T43] usb 4-1: device descriptor read/8, error -71
[  217.115078][   T43] usb usb4-port1: unable to enumerate USB device
[  217.197733][ T5959] usbhid 7-1:0.0: can't add hid device: -71
[  217.218559][ T5959] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  217.389497][ T5959] usb 7-1: USB disconnect, device number 4
[  217.785604][ T8187] IPVS: set_ctl: invalid protocol: 129 127.0.0.1:20001
[  218.195136][ T8193] tmpfs: Bad value for 'mpol'
[  218.408397][ T5938] gspca_sq930x: ucbus_write failed -71
[  218.460324][ T5938] sq930x 8-1:0.0: probe with driver sq930x failed with error -71
[  218.498615][ T8203] netlink: 72 bytes leftover after parsing attributes in process `syz.3.554'.
[  218.511250][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'.
[  218.658834][ T5938] usb 8-1: USB disconnect, device number 2
[  218.903794][ T5999] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  219.883881][ T5999] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  219.892946][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.970821][ T5999] usb 5-1: Product: syz
[  219.996350][ T5999] usb 5-1: Manufacturer: syz
[  220.000969][ T5999] usb 5-1: SerialNumber: syz
[  220.018120][ T5999] usb 5-1: config 0 descriptor??
[  220.111925][ T8220] netlink: 140 bytes leftover after parsing attributes in process `syz.3.561'.
[  220.202487][ T8223] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  220.229612][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.236830][ T8223] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  220.345533][    T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  220.493158][    T9] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  220.547383][ T8223] exfat: Deprecated parameter 'utf8'
[  220.567703][ T8223] exFAT-fs (loop7): mounting with "discard" option, but the device does not support discard
[  220.591576][ T8223] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  220.602681][ T8223] exFAT-fs (loop7): unable to read boot sector
[  220.609171][ T8223] exFAT-fs (loop7): failed to read boot sector
[  220.615689][ T8223] exFAT-fs (loop7): failed to recognize exfat type
[  221.641299][ T8227] fido_id[8227]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  221.845612][ T5999] usb 5-1: Firmware version (0.0) predates our first public release.
[  221.859454][ T5999] usb 5-1: Please update to version 0.2 or newer
[  221.883501][ T8235] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  221.894003][ T8235] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock
[  221.902928][ T8235] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  221.911099][ T8235] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock
[  222.049601][ T8238] veth1_to_bond: entered allmulticast mode
[  222.265791][ T5999] usb 5-1: USB disconnect, device number 19
[  222.493232][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'.
[  222.602912][ T8249] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.669486][ T8249] FAT-fs (loop5): unable to read boot sector
[  222.737339][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.568'.
[  222.813091][ T8233] veth1_to_bond: left allmulticast mode
[  222.852406][ T8247] netlink: 'syz.3.566': attribute type 8 has an invalid length.
[  222.863754][ T5959] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  223.045686][ T5959] usb 4-1: device descriptor read/64, error -71
[  223.303644][   T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  223.370964][ T5959] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  223.455898][   T24] usb 7-1: config 0 has an invalid interface number: 78 but max is 0
[  223.553620][ T5959] usb 4-1: device descriptor read/64, error -71
[  223.636497][ T8272] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  223.646444][ T8272] EXT4-fs (loop5): unable to read superblock
[  224.527356][   T24] usb 7-1: config 0 has no interface number 0
[  224.943974][ T5959] usb usb4-port1: attempt power cycle
[  225.176956][   T24] usb 7-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21
[  225.216667][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.275424][   T24] usb 7-1: Product: syz
[  225.280523][   T24] usb 7-1: Manufacturer: syz
[  225.292504][   T24] usb 7-1: SerialNumber: syz
[  225.316797][   T24] usb 7-1: config 0 descriptor??
[  225.513836][ T5959] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  225.538319][   T24] usbhid 7-1:0.78: couldn't find an input interrupt endpoint
[  225.813629][ T5959] usb 4-1: device not accepting address 36, error -71
[  225.948999][   T24] usb 7-1: USB disconnect, device number 5
[  226.016466][ T8272] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  226.035930][ T8272] bcachefs (/dev/loop5): error reading default superblock: IO error: -5
[  226.047674][ T8272] I/O error, dev loop5, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  226.063969][ T8272] bcachefs (/dev/loop5): error reading superblock: IO error: -5
[  226.149446][ T8272] bcachefs: bch2_fs_get_tree() error: EIO
[  226.159677][ T8283] netlink: 'syz.3.578': attribute type 10 has an invalid length.
[  226.178341][ T8283] syz_tun: entered promiscuous mode
[  226.191703][ T8283] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  226.893653][ T5959] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  226.994439][ T5959] usb 4-1: Using ep0 maxpacket: 8
[  227.139553][ T5959] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  227.183204][ T5959] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  227.472412][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.664462][ T5959] usb 4-1: Product: syz
[  227.684823][ T5959] usb 4-1: Manufacturer: syz
[  227.702383][ T5959] usb 4-1: SerialNumber: syz
[  227.824462][ T5959] usb 4-1: config 0 descriptor??
[  227.845934][ T5959] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  228.054882][ T5959] gspca_zc3xx: reg_w_i err -71
[  228.315478][ T8315] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1
[  228.325266][ T8315] hfsplus: unable to find HFS+ superblock
[  228.525342][ T8288] netlink: 152 bytes leftover after parsing attributes in process `syz.3.581'.
[  228.595961][ T8288] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  228.706589][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'.
[  228.754468][ T5959] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  228.761112][ T5959] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  228.781047][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'.
[  228.845629][ T5959] usb 4-1: USB disconnect, device number 37
[  230.265513][ T8333] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  230.275625][ T8333] EXT4-fs (loop4): unable to read superblock
[  230.343626][ T5930] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  231.029266][ T8333] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  231.039089][ T8333] bcachefs (/dev/loop4): error reading default superblock: IO error: -5
[  231.047734][ T8333] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  231.057362][ T8333] bcachefs (/dev/loop4): error reading superblock: IO error: -5
[  231.065625][ T8333] bcachefs: bch2_fs_get_tree() error: EIO
[  231.773759][ T5930] usb 8-1: Using ep0 maxpacket: 16
[  231.788289][ T5930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.866610][ T5930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.887988][ T8339] delete_channel: no stack
[  231.892760][ T5930] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  231.903741][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.935186][ T5930] usb 8-1: config 0 descriptor??
[  232.185950][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.225763][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.536479][   T30] audit: type=1804 audit(1892655705.988:35): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.593" name="file0" dev="ramfs" ino=23875 res=1 errno=0
[  233.153717][    T9] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  233.315235][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.332345][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  233.354722][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  233.377082][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.422773][    T9] usb 4-1: Product: syz
[  233.440516][    T9] usb 4-1: Manufacturer: syz
[  233.453985][    T9] usb 4-1: SerialNumber: syz
[  233.559194][ T5930] usbhid 8-1:0.0: can't add hid device: -71
[  233.568850][ T5930] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  233.610110][ T5930] usb 8-1: USB disconnect, device number 3
[  233.703647][ T5959] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  233.849806][    T9] usb 4-1: 0:2 : does not exist
[  233.902304][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  233.916247][ T5959] usb 5-1: Using ep0 maxpacket: 32
[  233.939123][ T5959] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  233.972959][ T5959] usb 5-1: config 0 has no interface number 0
[  234.022375][ T5959] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  234.046739][    T9] usb 4-1: USB disconnect, device number 38
[  234.208597][ T8387] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  234.218428][ T8387] EXT4-fs (loop7): unable to read superblock
[  234.308007][ T5959] usb 5-1: config 0 interface 85 has no altsetting 0
[  234.615020][ T5959] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  234.714608][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.897538][ T5959] usb 5-1: Product: syz
[  234.999815][ T5959] usb 5-1: Manufacturer: syz
[  235.314436][ T8387] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  235.324213][ T8387] bcachefs (/dev/loop7): error reading default superblock: IO error: -5
[  235.332976][ T8387] I/O error, dev loop7, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  235.342586][ T8387] bcachefs (/dev/loop7): error reading superblock: IO error: -5
[  235.351013][ T8387] bcachefs: bch2_fs_get_tree() error: EIO
[  235.572117][ T5959] usb 5-1: SerialNumber: syz
[  235.827293][ T5959] usb 5-1: config 0 descriptor??
[  235.951804][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  236.297656][ T8393] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  236.305155][ T8393] 8021q: VLANs not supported on sit0
[  236.768693][ T5959] appletouch 5-1:0.85: Geyser mode initialized.
[  236.836597][    T9] kernel read not supported for file /input/event1 (pid: 9 comm: kworker/0:0)
[  236.877794][ T5959] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input12
[  236.980606][    C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  237.190969][ T5959] usb 5-1: USB disconnect, device number 20
[  237.326185][ T5959] appletouch 5-1:0.85: input: appletouch disconnected
[  237.435870][ T8412] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  237.489686][ T8414] program syz.6.613 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  237.717047][ T8416] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  237.725209][ T8418] hfsplus: Bad value for 'uid'
[  237.733650][ T5962] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  237.773799][ T8416] EXT4-fs (loop7): unable to read superblock
[  237.838516][ T8418] netlink: 64 bytes leftover after parsing attributes in process `syz.4.615'.
[  237.888707][ T8418] netlink: 64 bytes leftover after parsing attributes in process `syz.4.615'.
[  237.983638][ T5962] usb 7-1: Using ep0 maxpacket: 8
[  238.015296][ T5962] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.037765][ T5962] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  238.061802][ T5962] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  238.087184][ T5962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  238.230057][ T5962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  238.363367][ T5962] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  238.373456][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.393401][ T5962] hub 7-1:1.0: bad descriptor, ignoring hub
[  238.412382][ T5962] hub 7-1:1.0: probe with driver hub failed with error -5
[  238.620084][ T5962] cdc_wdm 7-1:1.0: skipping garbage
[  238.641559][ T5962] cdc_wdm 7-1:1.0: skipping garbage
[  239.088149][ T5962] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  239.127762][ T5962] usb 7-1: USB disconnect, device number 6
[  239.619373][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.7.622'.
[  240.331387][ T5999] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  240.500536][ T8460] hfsplus: Bad value for 'uid'
[  240.579504][ T8460] netlink: 64 bytes leftover after parsing attributes in process `syz.5.627'.
[  240.599880][ T5999] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  240.684800][ T8460] netlink: 64 bytes leftover after parsing attributes in process `syz.5.627'.
[  240.717785][ T5999] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  240.756122][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.629'.
[  240.880494][ T5999] usb 7-1: config 0 has no interface number 0
[  240.933786][ T5999] usb 7-1: config 0 interface 12 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  240.955842][ T5999] usb 7-1: config 0 interface 12 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  240.968900][ T5999] usb 7-1: config 0 interface 12 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[  241.008289][ T5999] usb 7-1: New USB device found, idVendor=2100, idProduct=9e64, bcdDevice=4c.42
[  241.051670][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.096854][ T5999] usb 7-1: Product: syz
[  241.109701][ T5999] usb 7-1: Manufacturer: syz
[  241.126985][ T5999] usb 7-1: SerialNumber: syz
[  241.601358][ T5962] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  241.632510][ T5999] usb 7-1: config 0 descriptor??
[  241.648146][ T8454] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  241.665239][ T5999] ftdi_sio 7-1:0.12: FTDI USB Serial Device converter detected
[  241.694972][ T5999] ftdi_sio ttyUSB0: unknown device type: 0x4c42
[  241.838638][ T5962] usb 6-1: Using ep0 maxpacket: 8
[  241.853156][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  241.871356][ T5962] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  241.885940][ T6037] usb 7-1: USB disconnect, device number 7
[  241.896609][ T6037] ftdi_sio 7-1:0.12: device disconnected
[  241.938856][ T5962] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=8a.1e
[  241.953683][ T5930] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  241.955526][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.973102][ T5962] usb 6-1: Product: syz
[  241.979312][ T5962] usb 6-1: Manufacturer: syz
[  241.984790][ T5962] usb 6-1: SerialNumber: syz
[  242.010280][ T5962] usb 6-1: config 0 descriptor??
[  242.023804][ T5962] cyberjack 6-1:0.0: Reiner SCT Cyberjack USB card reader converter detected
[  242.033689][ T5999] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  242.044870][ T5962] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  242.084512][ T5962] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  242.194938][ T5999] usb 8-1: device descriptor read/64, error -71
[  242.200923][ T5930] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  242.231970][ T5962] usb 6-1: USB disconnect, device number 7
[  242.242469][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0
[  242.267300][ T5962] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  242.287743][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  242.309745][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  242.314190][ T5962] cyberjack 6-1:0.0: device disconnected
[  242.320851][ T5930] usb 5-1: Product: syz
[  242.340213][ T5930] usb 5-1: Manufacturer: syz
[  242.353783][ T5930] usb 5-1: SerialNumber: syz
[  242.378918][ T8485] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.634'.
[  242.388941][ T5930] usb 5-1: config 0 descriptor??
[  242.402760][ T5930] usb 5-1: selecting invalid altsetting 0
[  242.453672][ T5999] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  242.603683][ T5999] usb 8-1: device descriptor read/64, error -71
[  242.749145][ T5999] usb usb8-port1: attempt power cycle
[  243.170455][ T5930] usb 5-1: USB disconnect, device number 21
[  243.323770][ T5962] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  243.539817][ T5999] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  243.708723][ T8497] netlink: 'syz.4.637': attribute type 1 has an invalid length.
[  243.993906][ T8497] netlink: 224 bytes leftover after parsing attributes in process `syz.4.637'.
[  244.148010][ T5962] usb 7-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  244.160157][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.174636][ T5999] usb 8-1: device descriptor read/8, error -71
[  244.220879][ T5962] ums-cypress 7-1:1.0: USB Mass Storage device detected
[  244.443698][ T5999] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  244.514909][ T5999] usb 8-1: device descriptor read/8, error -71
[  244.568016][ T5962] usb 7-1: USB disconnect, device number 8
[  244.644151][ T5999] usb usb8-port1: unable to enumerate USB device
[  244.722004][ T8510] hfsplus: Bad value for 'uid'
[  244.751288][ T8513] hfsplus: Bad value for 'uid'
[  244.764756][ T8510] netlink: 64 bytes leftover after parsing attributes in process `syz.4.641'.
[  244.774273][ T8510] netlink: 64 bytes leftover after parsing attributes in process `syz.4.641'.
[  245.406251][ T8534] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  245.416189][ T8534] EXT4-fs (loop3): unable to read superblock
[  245.953982][   T43] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  246.271018][ T8534] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  246.280872][ T8534] bcachefs (/dev/loop3): error reading default superblock: IO error: -5
[  246.289549][ T8534] I/O error, dev loop3, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  246.299186][ T8534] bcachefs (/dev/loop3): error reading superblock: IO error: -5
[  246.307473][ T8534] bcachefs: bch2_fs_get_tree() error: EIO
[  247.383783][   T43] usb 8-1: config 5 has an invalid interface number: 123 but max is 0
[  247.393834][   T43] usb 8-1: config 5 has no interface number 0
[  247.402825][   T43] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  247.424646][   T43] usb 8-1: config 5 interface 123 has no altsetting 0
[  247.448503][   T43] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  247.471268][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.518084][   T43] usb 8-1: Product: syz
[  248.047728][   T43] usb 8-1: Manufacturer: syz
[  248.077911][   T43] usb 8-1: SerialNumber: syz
[  250.029807][   T43] usb 8-1: can't set config #5, error -71
[  250.424557][   T43] usb 8-1: USB disconnect, device number 8
[  250.772930][ T8553] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  250.783100][ T8553] EXT4-fs (loop7): unable to read superblock
[  251.733010][ T8553] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  251.743238][ T8553] bcachefs (/dev/loop7): error reading default superblock: IO error: -5
[  251.752492][ T8553] I/O error, dev loop7, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  251.762420][ T8553] bcachefs (/dev/loop7): error reading superblock: IO error: -5
[  251.770944][ T8553] bcachefs: bch2_fs_get_tree() error: EIO
[  252.208132][ T8556] binder: 8555:8556 ioctl c0306201 0 returned -14
[  252.238610][ T8550] hfsplus: Bad value for 'uid'
[  254.980424][ T8626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.090405][ T8626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.139264][ T8626] overlayfs: missing 'lowerdir'
[  255.155333][ T8630] hfsplus: Bad value for 'uid'
[  255.193817][ T5999] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  255.236346][ T8630] netlink: 64 bytes leftover after parsing attributes in process `syz.5.672'.
[  255.261191][ T8630] netlink: 64 bytes leftover after parsing attributes in process `syz.5.672'.
[  255.346001][ T8636] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744071562067969)
[  255.425203][ T8636] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  255.505818][   T30] audit: type=1804 audit(1892655728.958:36): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.673" name="/newroot/156/file0" dev="tmpfs" ino=855 res=1 errno=0
[  255.527809][    C0] vkms_vblank_simulate: vblank timer overrun
[  255.677395][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  257.633718][ T5999] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  257.733701][   T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  257.913731][ T5999] usb 7-1: Using ep0 maxpacket: 8
[  257.926310][ T5999] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  257.927544][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  257.938190][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.497340][ T5999] usb 7-1: Product: syz
[  258.501552][ T5999] usb 7-1: Manufacturer: syz
[  258.506369][ T5999] usb 7-1: SerialNumber: syz
[  258.522479][ T5999] usb 7-1: config 0 descriptor??
[  258.543724][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  258.556207][   T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  258.569790][   T43] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  258.596229][ T5999] gspca_main: vc032x-2.14.0 probing 046d:0896
[  259.208032][ T8671] JFS: discard option not supported on device
[  259.235629][ T8671] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.245565][ T8671] I/O error, dev loop3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.255412][ T8671] Mount JFS Failure: -5
[  259.259652][ T8671] jfs_mount failed w/return code = -5
[  259.395392][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.403778][   T43] usb 6-1: Product: syz
[  259.408064][   T43] usb 6-1: Manufacturer: syz
[  259.412816][   T43] usb 6-1: SerialNumber: syz
[  259.420881][   T43] usb 6-1: config 0 descriptor??
[  259.427660][   T43] usb 6-1: can't set config #0, error -71
[  259.828449][ T8675] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  259.836448][ T8675] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  259.845167][ T8675] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  259.853698][ T8675] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  259.875825][   T43] usb 6-1: USB disconnect, device number 8
[  259.904453][ T5999] gspca_vc032x: reg_w err -110
[  259.910593][ T5999] vc032x 7-1:0.0: probe with driver vc032x failed with error -110
[  260.071023][ T5999] usb 7-1: USB disconnect, device number 9
[  263.442741][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  263.885244][    T9] usb 5-1: Using ep0 maxpacket: 32
[  264.087195][    T9] usb 5-1: config 0 has an invalid interface number: 141 but max is 0
[  264.095868][    T9] usb 5-1: config 0 has no interface number 0
[  264.102279][    T9] usb 5-1: config 0 interface 141 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  264.112440][    T9] usb 5-1: config 0 interface 141 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  264.170707][    T9] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  264.288152][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.427587][    T9] usb 5-1: Product: syz
[  264.431836][    T9] usb 5-1: Manufacturer: syz
[  264.500438][    T9] usb 5-1: SerialNumber: syz
[  264.684943][ T8724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.696'.
[  264.804509][    T9] usb 5-1: config 0 descriptor??
[  264.903492][    T9] IPVS: starting estimator thread 0...
[  265.024284][ T8729] IPVS: using max 50 ests per chain, 120000 per kthread
[  265.159223][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.439938][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.224135][ T5930] usb 5-1: USB disconnect, device number 23
[  267.236961][ T8755] hfsplus: Bad value for 'uid'
[  267.764134][ T6037] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  268.314493][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  268.367042][ T6037] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.398990][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3
[  268.436182][ T6037] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  268.472263][ T6037] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.503825][    T9] usb 4-1: Using ep0 maxpacket: 16
[  268.522957][    T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  268.553157][ T6037] usb 8-1: config 0 descriptor??
[  268.566549][    T9] usb 4-1: config 0 has no interface number 0
[  268.584610][    T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  268.633930][    T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  268.704611][    T9] usb 4-1: config 0 interface 41 has no altsetting 0
[  268.728595][    T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  268.756254][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.817760][ T8776] netlink: 20 bytes leftover after parsing attributes in process `syz.6.708'.
[  268.989706][ T6037] Bluetooth: Can't get state to change to load configuration err
[  269.013415][    T9] usb 4-1: Product: syz
[  269.021669][ T6037] Bluetooth: Loading sysconfig file failed
[  269.031832][    T9] usb 4-1: Manufacturer: syz
[  269.043664][ T6037] ath3k 8-1:0.0: probe with driver ath3k failed with error -16
[  269.051571][    T9] usb 4-1: SerialNumber: syz
[  269.091712][    T9] usb 4-1: config 0 descriptor??
[  269.109585][ T6037] usb 8-1: USB disconnect, device number 9
[  269.136642][ T8767] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  269.158638][ T8767] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  269.184873][ T8779] AppArmor: change_hat: Invalid input '0'
[  269.400158][ T8767] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  269.454901][ T8767] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  269.745879][ T8758] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.797224][ T8758] (syz.4.705,8758,1):ocfs2_get_sector:1714 ERROR: status = -5
[  269.805422][ T8758] (syz.4.705,8758,1):ocfs2_sb_probe:753 ERROR: status = -5
[  269.837278][ T8758] (syz.4.705,8758,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  269.886929][ T8758] (syz.4.705,8758,1):ocfs2_fill_super:1177 ERROR: status = -5
[  269.896233][ T8787] fuse: Bad value for 'fd'
[  270.103775][    T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  270.312004][ T8791] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  270.773751][ T5938] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  270.943782][ T5938] usb 7-1: Using ep0 maxpacket: 16
[  270.951325][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short
[  270.961774][ T5938] usb 7-1: config 11 has an invalid interface number: 92 but max is 0
[  270.973775][ T5938] usb 7-1: config 11 has no interface number 0
[  270.980038][ T5938] usb 7-1: config 11 interface 92 altsetting 255 endpoint 0x5 has an invalid bInterval 51, changing to 9
[  271.023706][ T5938] usb 7-1: config 11 interface 92 altsetting 255 endpoint 0x5 has invalid wMaxPacketSize 0
[  271.083603][ T5938] usb 7-1: config 11 interface 92 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.113689][   T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  271.139469][ T5938] usb 7-1: config 11 interface 92 has no altsetting 0
[  271.171599][ T5938] usb 7-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice=80.e2
[  271.181426][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.232285][ T5938] usb 7-1: Product: syz
[  271.232309][    T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  271.264424][ T5938] usb 7-1: Manufacturer: syz
[  271.269089][ T5938] usb 7-1: SerialNumber: syz
[  271.283650][   T43] usb 5-1: Using ep0 maxpacket: 16
[  271.285421][    T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  271.311190][    T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  271.367178][   T43] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf
[  271.368281][    T9] usb 4-1: USB disconnect, device number 39
[  271.406904][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.444306][   T43] usb 5-1: Product: syz
[  271.686670][ T5938] appletouch 7-1:11.92: Could not find int-in endpoint
[  271.699629][   T43] usb 5-1: Manufacturer: syz
[  271.714931][   T43] usb 5-1: SerialNumber: syz
[  271.722676][ T5938] appletouch 7-1:11.92: probe with driver appletouch failed with error -5
[  271.744262][   T43] usb 5-1: config 0 descriptor??
[  271.760204][ T5938] usbhid 7-1:11.92: couldn't find an input interrupt endpoint
[  271.776962][   T43] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now attached
[  271.803731][ T5938] usb 7-1: USB disconnect, device number 10
[  271.843718][ T6037] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  272.023619][ T6037] usb 6-1: Using ep0 maxpacket: 8
[  272.032879][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.724'.
[  272.045256][ T6037] usb 6-1: unable to get BOS descriptor or descriptor too short
[  272.063180][ T5938] usb 5-1: USB disconnect, device number 24
[  272.070766][ T6037] usb 6-1: config 4 interface 0 has no altsetting 0
[  272.085469][ T6037] usb 6-1: string descriptor 0 read error: -22
[  272.087184][ T5938] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now disconnected
[  272.119826][ T6037] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  272.169246][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.217571][ T6037] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  272.271638][ T6037] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  272.310305][ T6037] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  272.320295][ T6037] usb 6-1: media controller created
[  272.345910][ T6037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  272.515605][   T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  272.526567][ T5938] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  272.533935][ T5959] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  272.557275][   T24] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  272.683930][ T5938] usb 8-1: device descriptor read/64, error -71
[  272.753645][ T5959] usb 7-1: Using ep0 maxpacket: 32
[  272.770931][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.808697][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.852259][ T5959] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  272.888447][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.934974][ T5938] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  273.140772][ T5959] usb 7-1: config 0 descriptor??
[  273.585306][ T5959] hub 7-1:0.0: USB hub found
[  273.592344][ T6037] zl10353_read_register: readreg error (reg=127, ret==0)
[  273.704152][ T5938] usb 8-1: device descriptor read/64, error -71
[  273.776189][ T5959] hub 7-1:0.0: 1 port detected
[  273.835151][ T5938] usb usb8-port1: attempt power cycle
[  274.098953][ T5959] hub 7-1:0.0: activate --> -90
[  274.218386][   T24] usb 7-1: USB disconnect, device number 11
[  274.224937][ T5938] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  274.233120][ T5959] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  274.258101][ T5938] usb 8-1: device descriptor read/8, error -71
[  274.299637][ T6037] usb 6-1: USB disconnect, device number 9
[  274.643960][ T5938] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  274.822550][ T5938] usb 8-1: device descriptor read/8, error -71
[  274.993144][ T5938] usb usb8-port1: unable to enumerate USB device
[  275.510907][ T8851] hfsplus: Unknown parameter '0x0000000000000000'
[  275.624671][ T6037] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  275.752594][   T30] audit: type=1326 audit(1892655749.188:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.7.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa81998ec29 code=0x0
[  275.774670][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.864037][ T6037] usb 4-1: Using ep0 maxpacket: 32
[  275.873604][ T6037] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  276.034466][ T6037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  276.132034][ T8858] netlink: 68 bytes leftover after parsing attributes in process `syz.7.735'.
[  276.362513][ T8862] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  276.372878][ T8862] hfsplus: unable to find HFS+ superblock
[  277.606180][ T6037] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  277.620718][ T6037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.629616][ T6037] usb 4-1: Product: syz
[  277.633962][ T6037] usb 4-1: Manufacturer: syz
[  277.638599][ T6037] usb 4-1: SerialNumber: syz
[  277.810201][ T6037] usb 4-1: config 0 descriptor??
[  277.825647][ T6037] usb 4-1: no audio or video endpoints found
[  279.199702][   T43] usb 4-1: USB disconnect, device number 40
[  279.226283][ T8890] syz.5.743(8890): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  279.252148][ T8890] overlayfs: failed to resolve './file1': -2
[  279.718192][ T8896] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  279.730306][ T8896] hfsplus: unable to find HFS+ superblock
[  279.836593][ T8896] EXT4-fs: Ignoring removed orlov option
[  279.850780][ T8896] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  279.862164][ T8896] EXT4-fs (loop3): unable to read superblock
[  280.993651][   T43] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  281.685863][   T30] audit: type=1326 audit(1892655754.428:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.7.749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa81998ec29 code=0x0
[  281.708750][    C0] vkms_vblank_simulate: vblank timer overrun
[  281.805402][   T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  281.830580][   T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  281.865375][   T43] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  282.009314][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.018052][   T43] usb 6-1: Product: syz
[  282.022266][   T43] usb 6-1: Manufacturer: syz
[  282.027717][   T43] usb 6-1: SerialNumber: syz
[  282.125339][   T43] usb 6-1: config 0 descriptor??
[  282.141484][ T8910] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  282.164048][ T8910] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  282.173879][ T8923] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  282.386726][ T8910] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  282.488394][ T8928] syzkaller0: entered allmulticast mode
[  282.506919][ T8928] syzkaller0: entered promiscuous mode
[  282.550014][   T43] dm9601 6-1:0.0: probe with driver dm9601 failed with error -71
[  282.605860][ T8928] syzkaller0 (unregistering): left allmulticast mode
[  282.631394][   T43] usb 6-1: USB disconnect, device number 10
[  282.647276][ T8928] syzkaller0 (unregistering): left promiscuous mode
[  283.023826][ T8946] netlink: 'syz.5.758': attribute type 1 has an invalid length.
[  283.031781][ T8946] netlink: 224 bytes leftover after parsing attributes in process `syz.5.758'.
[  283.399122][ T5962] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  283.467046][ T8945] netlink: 44 bytes leftover after parsing attributes in process `syz.4.759'.
[  283.680321][ T5962] usb 7-1: Using ep0 maxpacket: 16
[  283.776332][ T5962] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.332719][ T5962] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.356355][ T5962] usb 7-1: config 0 interface 0 has no altsetting 0
[  284.363449][ T5962] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  284.503464][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.534759][ T5962] usb 7-1: config 0 descriptor??
[  284.707995][ T8963] tmpfs: Bad value for 'mpol'
[  285.153401][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.768'.
[  285.483686][ T6037] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  285.656778][ T6037] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  285.703901][ T6037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  285.753059][ T6037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  285.783656][   T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  285.803454][ T6037] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  285.840086][ T6037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.880877][ T6037] usb 6-1: config 0 descriptor??
[  285.913103][ T6037] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -12
[  285.955053][   T24] usb 8-1: Using ep0 maxpacket: 8
[  285.982419][   T24] usb 8-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=5e.fe
[  286.036527][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.058549][   T24] usb 8-1: Product: syz
[  286.080235][   T24] usb 8-1: Manufacturer: syz
[  286.089155][   T24] usb 8-1: SerialNumber: syz
[  286.122217][   T24] usb 8-1: config 0 descriptor??
[  286.142346][ T8977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.167853][   T24] quatech2 8-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  286.183248][ T8977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.199083][ T8977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.217165][ T8977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.232660][ T5930] usb 6-1: USB disconnect, device number 11
[  286.381321][   T24] usb 8-1: qt2_attach - failed to power on unit: -71
[  286.392130][ T8990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.771'.
[  286.429350][   T24] quatech2 8-1:0.0: probe with driver quatech2 failed with error -71
[  286.500885][   T24] usb 8-1: USB disconnect, device number 14
[  286.676306][ T5962] usbhid 7-1:0.0: can't add hid device: -71
[  286.728834][ T5962] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  286.786737][ T5962] usb 7-1: USB disconnect, device number 12
[  288.326778][ T6037] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  288.335008][   T31] INFO: task syz.0.264:6980 blocked for more than 143 seconds.
[  288.342670][   T31]       Not tainted syzkaller #0
[  288.366689][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.392168][   T31] task:syz.0.264       state:D stack:28296 pid:6980  tgid:6969  ppid:5860   task_flags:0x400040 flags:0x00080003
[  288.442656][   T31] Call Trace:
[  288.455816][   T31]  <TASK>
[  288.466619][   T31]  __schedule+0x1798/0x4cc0
[  288.545704][   T31]  ? __pfx___schedule+0x10/0x10
[  288.557211][   T31]  ? schedule+0x91/0x360
[  288.562033][ T6037] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.573266][ T6037] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  288.582226][   T31]  schedule+0x165/0x360
[  288.587247][   T31]  schedule_preempt_disabled+0x13/0x30
[  288.595288][ T6037] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  288.606398][   T31]  __mutex_lock+0x7e6/0x1350
[  288.617254][ T6037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  288.625560][   T31]  ? __se_sys_ioctl+0x47/0x170
[  288.631108][   T31]  ? do_syscall_64+0xfa/0xfa0
[  288.636378][ T6037] usb 6-1: SerialNumber: syz
[  288.644175][   T31]  ? __mutex_lock+0x5bb/0x1350
[  288.648988][   T31]  ? comedi_unlocked_ioctl+0x13a/0x1020
[  288.663615][ T5999] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  288.770228][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  288.793757][   T31]  comedi_unlocked_ioctl+0x13a/0x1020
[  288.818563][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  288.825221][   T31]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  288.831128][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  288.837948][   T31]  ? do_vfs_ioctl+0xbe8/0x1430
[  288.843062][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  288.848930][   T31]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  288.856470][   T31]  ? __fget_files+0x2a/0x420
[  288.866672][   T31]  ? __fget_files+0x3a0/0x420
[  288.872237][   T31]  ? __fget_files+0x2a/0x420
[  288.878126][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  288.883298][   T31]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  288.906361][   T31]  __se_sys_ioctl+0xfc/0x170
[  288.913686][ T5999] usb 5-1: Using ep0 maxpacket: 8
[  288.926117][   T31]  do_syscall_64+0xfa/0xfa0
[  288.936778][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.951393][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.956638][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.968140][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  289.007842][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.022175][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  289.023612][   T31]  ? clear_bhb_loop+0x60/0xb0
[  289.045807][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.052588][   T31] RIP: 0033:0x7f0a7958ec29
[  289.060462][   T31] RSP: 002b:00007f0a7a487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  289.075494][   T31] RAX: ffffffffffffffda RBX: 00007f0a797d6090 RCX: 00007f0a7958ec29
[  289.088408][   T31] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000009
[  289.101880][   T31] RBP: 00007f0a79611e41 R08: 0000000000000000 R09: 0000000000000000
[  289.113826][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.126445][   T31] R13: 00007f0a797d6128 R14: 00007f0a797d6090 R15: 00007fff48698df8
[  289.165997][   T31]  </TASK>
[  289.175659][   T31] 
[  289.175659][   T31] Showing all locks held in the system:
[  289.185602][   T31] 1 lock held by khungtaskd/31:
[  289.209511][   T31]  #0: ffffffff8e33d260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  289.226308][   T31] 2 locks held by getty/5621:
[  289.236464][   T31]  #0: ffff888030a690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  289.263609][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  289.283789][   T31] 3 locks held by kworker/0:8/5999:
[  289.295475][   T31] 4 locks held by kworker/0:9/6037:
[  289.307018][   T31]  #0: ffff888020e8c948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  289.338157][   T31]  #1: ffffc9000b467ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  289.389354][   T31]  #2: ffff8881453f8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  289.424619][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  289.424715][   T31]  #3: ffff888058237198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  289.446037][   T31] 4 locks held by udevd/6050:
[  289.450943][   T31]  #0: ffff888031d08e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20
[  289.463365][   T31]  #1: ffff88803a88cc88 (&of->mutex
[  289.463699][ T5999] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  289.478912][   T31] #2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  289.485848][   T31]  #2: ffff888043fb1d28 (kn->active#27){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  289.496546][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.504843][ T5999] usb 5-1: Product: syz
[  289.513906][   T31]  #3: ffff888058237198 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0
[  289.523779][ T5999] usb 5-1: Manufacturer: syz
[  289.528610][ T5999] usb 5-1: SerialNumber: syz
[  289.533679][   T31] 2 locks held by syz.0.264/6971:
[  289.550480][ T5999] usb 5-1: config 0 descriptor??
[  289.556016][   T31] 1 lock held by syz.0.264/6980:
[  289.563680][   T31]  #0: ffff88802f33f8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x13a/0x1020
[  289.575235][   T31] 2 locks held by syz.2.356/7426:
[  289.580476][   T31]  #0: ffff88814cb608f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x13a/0x1020
[  289.592562][ T5999] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  289.616262][   T31]  #1: ffffffff8f5ee688 (comedi_drivers_list_lock){+.+.}-{4:4}, at: comedi_device_attach+0xc6/0x720
[  289.627639][   T31] 1 lock held by syz.1.425/7668:
[  289.633706][   T31]  #0: ffff88814cb608f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xc0/0x590
[  289.643277][   T31] 
[  289.651605][   T31] =============================================
[  289.651605][   T31] 
[  289.660439][   T31] NMI backtrace for cpu 0
[  289.660465][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  289.660483][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  289.660493][   T31] Call Trace:
[  289.660500][   T31]  <TASK>
[  289.660507][   T31]  dump_stack_lvl+0x189/0x250
[  289.660536][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.660554][   T31]  ? __pfx__printk+0x10/0x10
[  289.660587][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  289.660611][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  289.660634][   T31]  ? __pfx__printk+0x10/0x10
[  289.660658][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  289.660682][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  289.660707][   T31]  watchdog+0xf60/0xfa0
[  289.660732][   T31]  ? watchdog+0x1e2/0xfa0
[  289.660757][   T31]  kthread+0x711/0x8a0
[  289.660784][   T31]  ? __pfx_watchdog+0x10/0x10
[  289.660803][   T31]  ? __pfx_kthread+0x10/0x10
[  289.660821][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  289.660838][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.660854][   T31]  ? __pfx_kthread+0x10/0x10
[  289.660871][   T31]  ret_from_fork+0x4bc/0x870
[  289.660895][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  289.660919][   T31]  ? __switch_to_asm+0x39/0x70
[  289.660936][   T31]  ? __switch_to_asm+0x33/0x70
[  289.660951][   T31]  ? __pfx_kthread+0x10/0x10
[  289.660969][   T31]  ret_from_fork_asm+0x1a/0x30
[  289.661000][   T31]  </TASK>
[  289.661028][   T31] Sending NMI from CPU 0 to CPUs 1:
[  289.759764][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc79c00: rx timeout, send abort
[  289.823769][    C1] NMI backtrace for cpu 1
[  289.823803][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  289.823821][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  289.823831][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  289.823855][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 4a 23 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  289.823870][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  289.823886][    C1] RAX: bd924e99ef496400 RBX: ffffffff8196a2b7 RCX: bd924e99ef496400
[  289.823899][    C1] RDX: 0000000000000001 RSI: ffffffff8dba2d53 RDI: ffffffff8c03aa60
[  289.823911][    C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb
[  289.823923][    C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8fc39670
[  289.823935][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a53b58
[  289.823945][    C1] FS:  0000000000000000(0000) GS:ffff888125ae7000(0000) knlGS:0000000000000000
[  289.823959][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  289.823970][    C1] CR2: 0000200000013000 CR3: 000000002787e000 CR4: 00000000003526f0
[  289.823985][    C1] Call Trace:
[  289.823994][    C1]  <TASK>
[  289.824001][    C1]  default_idle+0x13/0x20
[  289.824022][    C1]  default_idle_call+0x73/0xb0
[  289.824044][    C1]  do_idle+0x1e7/0x510
[  289.824069][    C1]  ? __pfx_do_idle+0x10/0x10
[  289.824099][    C1]  cpu_startup_entry+0x44/0x60
[  289.824120][    C1]  start_secondary+0x101/0x110
[  289.824139][    C1]  common_startup_64+0x13e/0x147
[  289.824166][    C1]  </TASK>
[  289.885887][   T24] usb 5-1: USB disconnect, device number 25
[  289.892911][    C0] vkms_vblank_simulate: vblank timer overrun
[  290.003515][    C0] vkms_vblank_simulate: vblank timer overrun
[  290.049739][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  290.056630][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  290.066017][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  290.076991][   T31] Call Trace:
[  290.080428][   T31]  <TASK>
[  290.083477][   T31]  dump_stack_lvl+0x99/0x250
[  290.088289][   T31]  ? __asan_memcpy+0x40/0x70
[  290.092931][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.098146][   T31]  ? __pfx__printk+0x10/0x10
[  290.102940][   T31]  vpanic+0x237/0x6d0
[  290.106935][   T31]  ? __pfx_vpanic+0x10/0x10
[  290.111461][   T31]  ? preempt_schedule_common+0x83/0xd0
[  290.116945][   T31]  panic+0xb9/0xc0
[  290.120786][   T31]  ? __pfx_panic+0x10/0x10
[  290.125656][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  290.131038][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  290.137322][   T31]  watchdog+0xf9f/0xfa0
[  290.141532][   T31]  ? watchdog+0x1e2/0xfa0
[  290.145865][   T31]  kthread+0x711/0x8a0
[  290.149929][   T31]  ? __pfx_watchdog+0x10/0x10
[  290.154602][   T31]  ? __pfx_kthread+0x10/0x10
[  290.159207][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  290.164419][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.169681][   T31]  ? __pfx_kthread+0x10/0x10
[  290.174279][   T31]  ret_from_fork+0x4bc/0x870
[  290.178903][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  290.184017][   T31]  ? __switch_to_asm+0x39/0x70
[  290.188781][   T31]  ? __switch_to_asm+0x33/0x70
[  290.193565][   T31]  ? __pfx_kthread+0x10/0x10
[  290.198156][   T31]  ret_from_fork_asm+0x1a/0x30
[  290.202945][   T31]  </TASK>
[  290.206320][   T31] Kernel Offset: disabled
[  290.210764][   T31] Rebooting in 86400 seconds..