last executing test programs:

3m19.386092483s ago: executing program 3 (id=336):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @any, 0x9}, 0xa)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4)
r2 = fsmount(r0, 0x0, 0x0)
fchdir(r2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x26)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0xca55, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x35314142, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}})
lseek(r3, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000200)=0x6, 0x4)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e21, 0x7, @empty, 0xfffffff8}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000080))
getdents64(r3, 0x0, 0x22)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000280)={{0x0, 0xd}, 'port0\x00', 0x0, 0x80403, 0x7fff, 0x9, 0x6959, 0x1, 0x9, 0x0, 0x4, 0x3})
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00')
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = dup2(r6, r6)
read$FUSE(r7, &(0x7f0000004d80)={0x2020}, 0x2020)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x2208080, 0x0)

3m19.154863921s ago: executing program 3 (id=338):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
pipe(&(0x7f0000000480))
fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000004c0), &(0x7f0000000500)={'U-', 0x9}, 0x16, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf002001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000206c000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="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"/299], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff})
fcntl$lock(r2, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x2000004000000089, 0x3})
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58ff90f0", "2a1e833e7af32011"}, 0x38)
setxattr$incfs_id(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0), &(0x7f0000000380)={'0000000000000000000000000000000', 0x73}, 0x20, 0x2)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304, 0x34}, "f6d0d3f08ab5712f", "87214e0d7a4a270000e50000000000f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x28)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x1, 0xe7, 0x2, 0x5, 0x87, "ea71061d000000000100020000000000000400", 0x0, 0x6})
r4 = msgget$private(0x0, 0x20)
msgsnd(r4, &(0x7f0000003400)=ANY=[@ANYBLOB="0300200000000000"], 0x8, 0x0)
msgrcv(r4, &(0x7f00000037c0)={0x0, ""/20}, 0x1c, 0x3, 0x800)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x2)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="03c8000ec440f5af97c51ddc9147d7166b3d79cd8d7bed929fa6df84640e90e0b71996231b0700b272d5eb177241ab8fdfaaf6b26e2e1295128e814ac42346d3d5034b4b8a03c634b96cde063b1ade003f4cc751e1048a040e5934a60af4af070290805135d6750790ba13d2b8e33dcaa64544c94d3a29a9ca62f90b99235627ef4cb99f112310ebe49b9e25f0205b560c835d0d318c793105eb920b394bc9ee7b11000000"], 0x12)

3m19.011312664s ago: executing program 3 (id=339):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00')
fstat(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r5, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10)
socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r5, &(0x7f0000000000)={0x23, 0x20, 0xfd}, 0x10)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r7}}, 0x48)
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYRES8=r4], 0xdc)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000440)={0x0, 0x0, 0x140000})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000000080)=0x8611)
close(0x3)

3m17.164335244s ago: executing program 3 (id=344):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')

3m17.014903684s ago: executing program 3 (id=346):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0x6, 0x6, "ff2de6765a4e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m16.571701577s ago: executing program 3 (id=352):
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
setresuid(0xee01, 0xee01, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd700f76000000000049000000080001007063690011000200303030303a30303a31302e30000000000800730000000000000001007063690000000200303030303a30303a31302e3000000000080003000200"], 0x58}}, 0x24044844)
fcntl$setlease(r0, 0x400, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
close_range(r3, 0xffffffffffffffff, 0x400000000000000)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x31424752}})
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x2)

3m15.962074582s ago: executing program 32 (id=352):
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
setresuid(0xee01, 0xee01, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd700f76000000000049000000080001007063690011000200303030303a30303a31302e30000000000800730000000000000001007063690000000200303030303a30303a31302e3000000000080003000200"], 0x58}}, 0x24044844)
fcntl$setlease(r0, 0x400, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
close_range(r3, 0xffffffffffffffff, 0x400000000000000)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x31424752}})
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x2)

2m34.323016228s ago: executing program 4 (id=567):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80adf7c39da42", 0x18)
mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f0000000100)='ntfs\x00', 0x40760, &(0x7f0000000040)='trans=rdma,')
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c0009050202000202000009058202000200000062aa1b0d269b0ebbe5be17611218d87a8fc1b19847e3306bf2b237b36fca68086e1439571a6c81c8b510834de3277f043114724fac64a284ad2eb883064dba32093f75430ca786f530be211ea0e695c60eef60e538e05fcb0e74294813c1483ee562ae13ff852be1f03e482e74a3a307bfd4677002af6f78531a2d280282c2ef362ffcaceead3c5a7ece59a4da7bf96ece4d5f63545e37f2"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="40110100000b243bfc587f9859e77e9caa54e54b56ba4eb5bfecd938b9a7cb4840560314318a5612feb7b4"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000240)={0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="4011990000009906086f2150fc78f6cfddf3579ac3369a59d6634abfdce3440dbebd64cc56cb0b69880d06c7faac01afbccff2f6ca719c9359ae1ae8d92adea2a4379cb60babfec5467e91eb52275734433fdfec56528f1129f12ba90329964eb15f0199c8f104c380a4e4eea1c0b427811722fd5a23c016c123d6fc8a233e1bf5a32dbeb70bc8fff88d8a11eae6604acc0368f40c715b65b8e321087ef78851c1bea282a5147b1236032b8b48630018918a5196e4c8c6a3bc192d24ffcf52d1128f1a241d63f03e37bd004fdece283c2e5816628fd773ad20a7ef1f00000000000000"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="20088c0000008b2e1290f762cf4903868c06f400498b4d484ae084509742ab8d8014ea620a73d3fc3a0a735acae1114723c50126e74b18d74343f4848d8061fd8367743857468cb467e08b6914b30746ef47a3d410a9eae566484d16e5011c7515c474e96175c08acc79f430035099ff1097385c308edf07153701392bebcf9a26c9ee42925fb99a4f51f6ecd4739b55b85b"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0xe, 0x6, 0x5, 0x200, 0x3, 0x7, 0xdb5e, 0xc000000, 0x8, 0xfff, 0x6, 0x200}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000540)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000005c0)={0x20, 0x89, 0x2}})

2m32.23914871s ago: executing program 4 (id=574):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000006400)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000daffffff", @ANYRES64=r0], 0x10)
lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)=@random={'os2.', 'fd'}, 0x0, 0x51)

2m32.129193275s ago: executing program 4 (id=575):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='cpu.stat\x00', 0x0, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x841)
ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000040)={0x8000000000000000, 0x10000, 0xe, 0x7fffffff, 0x1d, 0xffff, "4d32453e0f4a50d9a2d4bcc98ae2393f", 0x3, 0x9, 0x3, 0x2, 0xf, 0x2, 0xb2})
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x2)

2m32.068007997s ago: executing program 4 (id=576):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x0, 0x401, 0x10001, 0x5, 0x0, [{0x2, 0xff, 0xc4, '\x00', 0x5}, {0x5, 0x2, 0x7, '\x00', 0xb8}, {0x6, 0x0, 0x9, '\x00', 0x9}, {0xff, 0x2, 0x40, '\x00', 0xd7}, {0x6, 0x2, 0xfd, '\x00', 0x5}, {0x7f, 0x47, 0x0, '\x00', 0x7}, {0x2, 0x4, 0x1, '\x00', 0x2}, {0x9, 0x10, 0xf8, '\x00', 0xff}, {0x0, 0x7, 0x6, '\x00', 0x5}, {0x0, 0xf1, 0x81, '\x00', 0x1}, {0x6, 0x8, 0x9, '\x00', 0x8}, {0x5, 0x0, 0xc0, '\x00', 0x5}, {0x41, 0x5, 0x2f, '\x00', 0x9}, {0x6, 0x1, 0x8, '\x00', 0x7f}, {0x6, 0xd0, 0x2, '\x00', 0x33}, {0xd, 0x9, 0x0, '\x00', 0x5}, {0x21, 0xff, 0x81, '\x00', 0x3}, {0x1, 0x3, 0x4, '\x00', 0xdb}, {0xdf, 0x7, 0x1, '\x00', 0x7}, {0x8, 0x0, 0x2, '\x00', 0xb3}, {0x4, 0x9, 0x7, '\x00', 0xfa}, {0xcd, 0x39, 0x0, '\x00', 0xfd}, {0x6, 0x80, 0x2, '\x00', 0x6}, {0xb9, 0x2, 0x6, '\x00', 0x7}]}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000001f008604"])
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0011022, 0x0, 0x800000000038f}]})
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m30.427231168s ago: executing program 4 (id=584):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x4, 0x6, 0x4, 0x2, 0x87, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xdc, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xb8, 0x7, 0x1, 0x0, "5ef70de86e4b7e24b5da328fa1413e313500480cb3bf48eb7ae49eaacab4349564baba4391c6fb0d2231e3eae87eff0f914143c8ac57dc123e253886a996b089b3f97d420eacaa2bb9dc1c717b5386d01e89565dd89317a391d377148de3eed2d022c27225f41a0ccd8c6245521f168f40d8758b1722334c05c83ebdfc58f61b152313eba15c0ba85aaa343d6d4808c4c23a0c3746f06706a2bcb0128c16a23fdd81ec918c7e0d4774d5189a409f0ff3d66afe3d"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r4=>0x0}) (async, rerun: 64)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0)
syz_usb_disconnect(r5) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[], 0x0) (async)
ioctl$EVIOCRMFF(r5, 0x40085503, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) (async)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000804) (async)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0xbb2}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}})

2m30.297820807s ago: executing program 4 (id=585):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000008cd1000000000a03008400000000000000070000000900010073797a300000000060000800090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001224001180090001006d657461000000001400028008000240000000070800014000000008140000001000010000000000000000000084000a"], 0xa8}}, 0x0)
r5 = socket(0x11, 0x3, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf251b000100080015000200ffffff7f0100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08001500c0000000"], 0x34}}, 0x8044)
write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r8 = dup(r7)
write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c02000000653d6673636163d26b059d652c00"])
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1044a0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009048000010300000009210000000122050009058103000000"], 0x0)
syz_usb_control_io$hid(r10, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00487a2f22c9c04c3ce6a89a83d05e8d0c8fe396b4cdf983b8c944f8669ff522905b7b58c7e53a6943b94d4c9bff455cd91a756ff5585abc6634450f496e14055bd4cf81e4b108045da63ef9e9352c39bbb8cbf1006c91ae89b1bb1df7aa9b74124d3e9e2e465213e3a7c8c4cc68a7840167a070e9536fe3d32e042070436e6a768b3fffee42e4024c190bf20f7ce9c578c33b8cba7e9f7e7f2fadb52de31409f4b0d4993ab77494f5d47dfde9ab07fc22d59b124a7243441c084397e44979947dc35fbf0fe47d4fb0ab589f3edfcf91000000000000720000"], 0x0}, 0x0)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001bc0)={<r11=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000001c00), &(0x7f0000001c40)=0x4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021200010000000008e74a0000ff486800"], 0x0)

2m15.00027545s ago: executing program 33 (id=585):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000008cd1000000000a03008400000000000000070000000900010073797a300000000060000800090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001224001180090001006d657461000000001400028008000240000000070800014000000008140000001000010000000000000000000084000a"], 0xa8}}, 0x0)
r5 = socket(0x11, 0x3, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf251b000100080015000200ffffff7f0100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08001500c0000000"], 0x34}}, 0x8044)
write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r8 = dup(r7)
write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c02000000653d6673636163d26b059d652c00"])
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1044a0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009048000010300000009210000000122050009058103000000"], 0x0)
syz_usb_control_io$hid(r10, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00487a2f22c9c04c3ce6a89a83d05e8d0c8fe396b4cdf983b8c944f8669ff522905b7b58c7e53a6943b94d4c9bff455cd91a756ff5585abc6634450f496e14055bd4cf81e4b108045da63ef9e9352c39bbb8cbf1006c91ae89b1bb1df7aa9b74124d3e9e2e465213e3a7c8c4cc68a7840167a070e9536fe3d32e042070436e6a768b3fffee42e4024c190bf20f7ce9c578c33b8cba7e9f7e7f2fadb52de31409f4b0d4993ab77494f5d47dfde9ab07fc22d59b124a7243441c084397e44979947dc35fbf0fe47d4fb0ab589f3edfcf91000000000000720000"], 0x0}, 0x0)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001bc0)={<r11=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000001c00), &(0x7f0000001c40)=0x4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021200010000000008e74a0000ff486800"], 0x0)

1m11.45398933s ago: executing program 1 (id=984):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1m11.404830531s ago: executing program 1 (id=985):
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x11, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0)
setuid(0xee01)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}}, {{0x2, 0x4e22, @multicast1}}}, 0x108)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, &(0x7f0000000100)={0x40, 0x22, 0x5, {0x5, 0x1d, "000095"}}, 0x0, 0x0, 0x0}, 0x0)
preadv(r0, &(0x7f0000002640)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x0, 0x4)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000f8cf89109904068255f40000000109021b0001000000000904940001ffe55700090504"], 0x0)

1m9.865553764s ago: executing program 1 (id=990):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9})
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r3 = creat(&(0x7f0000000240)='./file0\x00', 0x40)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000363000/0x400000)=nil)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r4, &(0x7f0000000180)={0x2a, 0x1, 0xfffffffe}, 0xc)
close(r3)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r3, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@my=0x1, 0x3}, 0x0, 0x2, 0x6})
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r2, 0x0, 0xc)
openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})
madvise(&(0x7f00004e5000/0x1000)=nil, 0x1000, 0x9)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))

1m9.102458771s ago: executing program 1 (id=997):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x102, 0x2)
close_range(r0, r1, 0x0)
fanotify_mark(0xffffffffffffffff, 0x20, 0x4000000a, r1, &(0x7f0000000080)='./file0\x00')
r2 = dup(r1)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='syzkaller0\x00', 0x10)
getresuid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300))
r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x3eb9, 0xd8e85240ad6d4caa)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000380))
r5 = accept$ax25(r2, &(0x7f00000003c0)={{0x3, @netrom}, [@remote, @bcast, @rose, @default, @null, @default, @null]}, &(0x7f0000000440)=0x48)
ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', <r6=>0x0})
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000500)=<r7=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x2, 0x4e24, 0x1b2, 0x2, 0x20, 0x20, 0x2e, r6, r7}, {0x1, 0x80000000, 0xfff, 0x4, 0x5, 0x1, 0xb, 0x79f95c8e}, {0x6, 0xa9, 0xff, 0x3}, 0x7fffffff, 0x6e6bb1, 0x0, 0x1}, {{@in6=@remote, 0xd579, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x1, 0x2, 0x70, 0x9, 0x4, 0x35}}, 0xe8)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000640)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r7, &(0x7f0000000680)='./file0\x00')
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', <r8=>r6, 0x4, 0xb8, 0x40, 0x7fffffff, 0x4, @mcast2, @empty, 0x8000, 0x7, 0x0, 0xfff}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000780)={'sit0\x00', <r9=>r8, 0x10, 0x7, 0x3, 0xd, {{0x1b, 0x4, 0x2, 0x11, 0x6c, 0x66, 0x0, 0x8, 0x4, 0x0, @local, @private=0xa010102, {[@timestamp={0x44, 0xc, 0xe4, 0x0, 0x1, [0x6, 0x0]}, @noop, @generic={0x82, 0x9, "837f142f1b0094"}, @generic={0x86, 0xd, "127c0d967bbd0cd6e7fb60"}, @cipso={0x86, 0x21, 0x0, [{0x5, 0xf, "b0a55097ca3d21b85c2099dfb3"}, {0x0, 0xc, "13a65d4092f64c926a57"}]}, @generic={0x89, 0x12, "ffd5e532e526c1ee23718aa71a93a1eb"}]}}}}})
setsockopt$inet_buf(r2, 0x0, 0x3f, &(0x7f0000000880)="1513ffa0a7ea3e40fa8a179133eac57b4b9ce920743de2bb162883fad2e73c913bbaa769d146a78fe02aff91b59838826cef07b84050572f53482dc619", 0x3d)
fanotify_mark(r2, 0x40, 0x9, r2, &(0x7f00000008c0)='./file0\x00')
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000900))
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000ac0)={0x3, @pix_mp={0x6, 0x5, 0x38414262, 0x5, 0x9, [{0x2, 0xd4e}, {0x8, 0x1}, {0xffff0001, 0xfffffff8}, {0x81, 0xcca}, {0x2, 0xd7}, {0x8000, 0x8}, {0x5, 0xcc}, {0xc, 0x8000}], 0x0, 0x7, 0x4, 0x0, 0x2}})
mknod$loop(&(0x7f0000000bc0)='./file0\x00', 0x2000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000c00)={@multicast1, 0x1, 0x0, 0x20, 0x0, [{@broadcast}, {@broadcast}]}})
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c80), 0x200200, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d00)={'erspan0\x00', <r11=>r8, 0x700, 0x700, 0x8, 0x4, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x65, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @loopback, {[@end, @timestamp_prespec={0x44, 0x3c, 0xfe, 0x3, 0xf, [{@loopback, 0x9}, {@private=0xa010100, 0xffffffc0}, {@loopback, 0x80}, {@broadcast, 0x9}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xfffffff9}, {@rand_addr=0x64010100, 0x8}]}, @timestamp_prespec={0x44, 0x34, 0x36, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}}, {@local, 0x2e5e}, {@remote, 0x1}, {@multicast1, 0x2}, {@loopback, 0x7}, {@empty, 0xa}]}, @timestamp={0x44, 0x18, 0xd, 0x0, 0x5, [0x9, 0x5, 0x8, 0x10001, 0x200]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f00000021c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000000e00)={0x1378, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x11d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#},\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'({)\'\\$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x37a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\n!].}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\x1d!\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '!]^-\f{\'o-*&}}&*#^%\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "9367f48aaa3714f6c85dd7528da3d432e97669fe820d812cbeaa188f4f2d538af013d551d5c1bf7d4b83557d8c778a300d71689abbfbb073f15931454165102d9f80461d326f34e9e41fb516d416cf30c6e5a30809dc33962028537ca1b1abbb24c36263e190d53c5ef95747166871a72da3e263354dff0c23e335c2f54bf3194cdb62cf44c604584d0b3732c72e4fabb6660aaa41c5b88e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "5fc4ff8b6c388922211699df933bdf5e32de336638bcd66ace4451f65269044f0226e8fa43c5a11a73f9e8be40fdbb41a8fefab7ed5e268be65be0ac3b6da4fbf4cc51a72953e40708d2373ae257de6c5b777cc0078701efa3c4907075535f633a8d658b610a4e392e96affa89c2b4232095b2bb0b909fe1206845f6ae88ff42a3b6d72a0c7582d78f1b8abd43e9cfb103c5cfc8f1c2a792419df64415c7d337bb233d593aca258d23b50135307b2780c1f19f6516e82ddbed6ef86cd9692d85b1394b8345b422db7bdf15c2fb02d5677f84036657d0129e1b03a8a38a7be171cdc538f430143388a204a1b2a27f1d5c5c12010fc799d4bbf55c1c3bdffde0d68d2abbd662d02b5bc6ba8bf74a0147719d639656431119f8e87393e30e1a7afdc5dc33247017dea84c6da265576c242f27eee49942e8eb97618994563d267fae401a9a186a081785d341cf4237de011912b69b6003d67aaca9010cfb15c82a85780938db0b8f1477ce13a53bcb3cb5d224fd71a3a445fb00f129c8cfd996849a2e5269461a5bdc9785a54088483df59f9848d601fd9748e42b1cd667fe1fe94c25b9267b7d21ffd20418dfe3bc1b8f3cf39e4e1d9c39ad1526b71df6c0dab33c778a4e77b7a38b010ed6e4616b5c76aeb270e4631394e176656bf2eb13d1c394e5ca0858e4e3489dce2975103e457792e4bf1f6a3a717943b54285e8cfd5ee52454032b6269bafa3ecbc42bf44e9d9136dad530e520382d717ea7eee5b2b911daefc5dee9d5a7a8b9f151676474467790ae8bf69e76662d2c1994805359b33298875f91bcb09163b4217ef9e007feb373d0c27fc8888d5fc3302fe89cedbb261dd124108988df89bc343e0a037f5265c63ab6f7197e1fae2bc2009f7a5cf8cb8f80cf8b56945606ef9d9e709cc94d82d99290956a440e6c2f365517bf5ec39ea6beaf00054e19e50b76356b9bfdc8b44c4a1792e027e10a397948855361c7ec9c9582ab027eb72dbacd5b2a6b875fdd3d1294559075785ab6954cc92ea6a9e1a65899af1d9966c7092f02936d4e282c759b592f91b8c76893ac46e8ad8117d32b6221959345fff9df9b777b563f756af43e5a5489f53779d11e4281b28716f8b4db83198c375defdb62dac79f0309310a2b263b4beb0f8968e48b9a0f129b6353f43ddef7d1bee05d6634beb8452f88f3b8984c0b59fc50c975f53cf9be1567962f9e389cdb4e39cb7bffa498a164c50c473688519b286e00e5627efbab1f3eb3997d0e0887689464f5f856064caffb3a6dda63a9d55dcc2f88d30252f4c4318473441735fbbc6ba03c2a8895af6054ba1064bf4d6cf8e4851c35e6c81e962044dfc7c85be17f6dfb63dd05491eceea2c73afccef623eb630475a48b3d3d0f2c253b7060b5e4ef0a51aadc15d0df0936633b8a9888217b988d68582755be2fa8808030101b1a5e7ba11aa82aa5674d70d1043fb692e175255416ad38901633cd39925c5dec2a558673f64694779f2021fc321c442da4eb4469a918c04ab4c479dbaa0b4898064ec7c00459f7e669bb9af55ead1761f65ea4475c4b1bc173a43ed06d40aa5c6543b1c8d91e98b875f5c426b607358c4f8bfa8636ad55751b33fb4d226206e0943d26f624cd6e34222bfdd4f801b847ea494bdf9864bbfc98f38728a0f97144b4901fdae72c31a41b8480256e30c9fb35b8fabc024c76650d57e35de20ee382ce6a518b32649662a746c6afbd6d1467b8f9b2ffc03576241ea4e6afc0f066135692e53deb7e7120166aa9552f9214a09ca6e36fa326d20209ca7521533cdf79277232fbe3221703e002f449faaf328f2cbef5102a70de46243116c9fbb567a105bd21fa06bd66ad8de904f77feb64b571d6bfdb408830ff15ba85ab9723f6db99157d3492dfeda2cd7b1e2e6ea426d40e90898c2e8e3108649b71bd0eb8e2776193585bbf11ae121723e82376b6dffed4025595f1f547092801427d584ecaaa6b4d422733af9e86082cd5adb0d620b6d82acc6eafc5be97ea576a41b1e87ed335ef1fae2a83e90ef5272f11ac60ae1109c0287e2db7c812fb94e67908f7fe7edfd170b9b74bd68db15e1c57c668289608af78a8b2221e4755937f5e809ef68bf0fe49128521994123d14bc455fa8dbbf0198a736d10aebd632eb1dd96a2f1d06756aaa6172c81c808556b7c6c4713ae086fc4f65a4fa30065e450f0c67f6d49850b7532e07e02cb35c6f951c6caab8a8d68c1979f91faa3bdba0f4067dfa148a47b286ab8565810094c1dc0352fac175632a2e68cba34acd275fc9f5e7ebf41328932a43458349956d46c76fcc44bc4ec86e76f09f7a1c545e55d7a80d3a20a535b764bdc856ce62949fd75999c7c6f96afb7eb40f3fa534a810880b8f86e2705a0ebd1c7a7ac2752854dc9efc9497432d9367cfa45455cb333f89d5157bd1455bb88029cc56f3d07bfbb9d813e844e09da58a6670dc1f2c0adab3eb9cc48bdd42ea69d75215641725368785f38e5e0d43cdde277411e3134abfaebbdc73f414c0ff3729f9eb5c942e354200e609e26896113acf28e928f20ebb34e8b50cae2195afbf75af0b14b462c940e5edbe62543380a356757a320701b76b9412cdd011d73a6ad1611b1110d660f3fd27c803def88ebcb918a5862da7e6d70fd15a9d48a892e8609a4bd15aec6bff64f910debff28995d14139f59cb6c9e682b646650810e81ee2c6fa52faf4adddc66e58814e01236b6d30c8582a1aef495998f78168514e44acb2e96c8ce69b07624decc7db88e2c195ff9af10c3c4425c82d140ab088a35f58da8585c7f9c576e5330559116aa5179f7e4cf973f4a3c13eb4ce8ef9c4c028b560693ca1f965a5b15da8321e8a19d556334b84198dd941a60dd0c1bd0f4ea0866604f135964bca74c6bd94902758d202967b1b05e295d5c170cde7ef7f91bcbf8c91b44ed3d4279b6b4e6d2919202ad19793807dfc58a15ac5466d7238d4a90570198c6f2bbdfccb4cfe8cd1ba7e613bec4ce153fbf43a5e2c34ce794992e03f8125361b846fbdab810c4b2434f7f88d6aca423faffb78675bcdb93f6745a7adc16ded41fc4be6432d7eff4b943a52180271362e9be8b44bc072d2d8f087dee0c2c1c8ecfbe6f2ac445a7ce4828fb7104ffda683ecb090ff5e31fff07ea326072949205e5303b3f21cd962d32f0f93eed2f6e9e42dd16d841f63aa8ed8df52dff64caf9e13dbfd6b067bb7f9f5338437f5059de4c27161254840188c1d37265fc0f5c0bc7e6a783e3aa513ef50770e44eabbd034751010dfe09802e048a782ae699a5b87019c6de9a9c5ae858509f82d8b9bbdcf1987bfc45ff71bb01382f78ce70baab5a473de94e91353a130170c1d17533cd72eca69c93f41135dc0e1985b2738e11f893df520680e9d649a74521928aa1734c6b94862a83f3dd0c3e46da7987f8ea4f8f0d15615ce21fcb01aac2d27f374ef0967e009110d90c675ff0bb32323820c9f8fe5dc13c451cb57bd40e79658ff70d3d2f6d3f6e19325776ae0415c215892efec158a003ce1f27a148477312ed5e72839967a3871d183cb3de26ae925e1de91fb97dbdca0a1bbb2343c93984e76ca8d6d25865287e4194839e037215182848fc9d3af12102b917edecd15eac201fd00a42295524555ac82afdfd8da6083d9f9ec0553e539b96d85504700eb631e403ac2cb12a838bf7355bdcf5886c83da724bf491d6c921595c9e8d93ad87b25388ef619ec65aad062ffe09d62121888c322e93f2086d3d13ab6a2f43ec6324ec3a55f0f65ee5ffe1cf64723eeaadce8eb08fe44b3b1155856f0fec6053b18fd7b0d9a4ba6ac83306ac159201c36b452909d06233d079ddf4b34d72ae80014778df0d9ee0200e24d9b5e37ecc20ccc6473d0817e87e04205d81d7ff84b1b9e60f88e68437157b96c593821c245d52e60d2231e8cb3e927cd75be1d55e4dc1f547dc74647585ebf79a23381250f65612b62a1700979e0df7c66990f4a2034d7e56f3510b931e112009a44a4e5f66f1b205500b4963f6ec52874ac269eb2cfb444a1ab576014b78fc8824ce8203d5d9af1221c282dc19e6032a4a6d9f5b46e24acf02895e4815d752e22dce038aa309927a39307345491898a20e9fe35782df24d0de333c91fc889b429e239416dc911c950500348b93b9cd58326fe64bf7a68abf272c8b2a4baccc57bd9f87bbd10d5cea1feec2f24ba00347071cd66377f738b815b06df627e1afba02cdd225220e12400cbf5fa5610ae46d81fb051057c24013b2d28f426b71e12c9cc7b1780ca9a4369e96fbe693f79a61c73e44eea394a0d7a3a13279db179ee3364c9d089086e2be40dad125b2ca07ac15f7468bb6854d20f35a854005b83f4e3d18940a6518d6ad55b4a9ac96ed3047abec91c271544f2489e973edeb14048e3b28e8187d8b192d6ad43334cb5694b8ab6897bc88bc4557e8f31be804972797aee97011705f0a93cca0c44f69179169d019a06237c32963847b59c96a9f7261cd0b9d71fd8a1dc46e9e887ae5971f7497a293a2cc0d761f4231b15e0e1eb003b30e656fb77b81fd0b1bbe61f46c0629f64b3334438360e5d9808d894cf9a6324611f3f88500836ae7a8a3766364f55a253210bf8847fb4c95fcb6bd8a60ecb3d1f339efbe2551f1a2971dca53c1f6513b892804299c815510435066aec7fd4776593f0859e9beaaa706d402f3b90b5230a9fa1e09d7fec2cbdebaf233d6a4bd9094c467587ccd8b280b4203442516c0263c9d46c34b285f93d9ebbe272cb3c4c9c711ee145861725671b4b17f67eb606f118635d973d2f5a1ce4ab81fc3f1b7f1beb88d139a736f6fe98abaf5fb5e9127a28b745eefb6fde4d733e2618a2135b31f790753e9c9796fcddf4fb5bc27bc2336f6ca6d42d5377ae5a0d4f3e21f43421aa6697b7c2097e1c40ecb441149fb705269ab51024b83876964d439464e33f7fad5d63ed6fd9a154cc6d6a1e59bb4d1296875d7a9d0629e233a9fffffa6937eb948ed51a4dc004cca88497758b91e23b83e319649e5781d2ec268772018b4f1c345f9128686a043d3359c06b10e05644dbdb7ff92a1d35b15fcfbe4a2740e1f03ce1d2c1c170a812a831cfc174325b995a51b29988f805db84dad752652b288d7b4a9f06881c7f68fbf7fb6c28e7a020eb6b483b52f051388eb90c91e4a21ac0d1917bbbc3113cf73f4fc82276f06af384a6e1361ba67caf42a9073354a9ba9bcadf18d359c0bb28e83c9d092d2cc2244e1ea5ba20e5262e2bacb63ba4a63e40b4e74558670400cad196c2a879bcbabd9d72e25c0d3098bfdad13636ca9f7e4e164da0b5c9517234bb9ceebcab01f4d985c0d99673982166e163075134668c06f9b6600f56d3f01269e1f361e733e35125b15fbc7c31e32fe289767275b6d2c8828f6ad1746f094dc90b6d47d4a0fff24f8887d736b5f21d05c8295ade35516574542b783fd887bfe8b6060d9fd994030c356642868ad0737e80e7ce8cb1518f38564417a8932177b82a16f6c778d3cb1dcde4571bd920a46f56e46b30a04d442160f9e4160d70ce88bde4ad5707bcaa72b23efba7efdf18a6528d227e4009b749fa2ebe0ece3720cf86eb589f671d84603703cb5952fe59e4dabf683569c943333f642bc1464c417943a324f1bba746b4128e7287b110e5665392f1b3f8c896467eac9993043f216b7a30fc1fdd19a7056c2c9c15a7aef572e1a580d00633ec69fb0f663e0a850f5becbed9ccf699fb73a08a8d62de724a1fb"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_WANTED={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "1913c79c94ac43feda66e2949d98fd24f0c2181c11ad9a22251ae5ce125ac6e6c24ad5d4a9d345a28faf9e19dcbf605bb4a027e887c2a33377f54dd332f4168883f190b9770c971f8d490a2862d02b33d1c1c278a903aacfc698d5b0999fc890ba786844487f5924c142ef2a80a8b4cd371084224a0b2b65911aa5d044c4ae78c61e6129d90c95782f256a3665965088d1b31363b77889d39cc15a86f90c49ce10788ef233c9f93b70f4b171b763162dd5ea2b240f459fbe636476bf5a38"}, @ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "b4cecb35ed90b79e998d95b1ab551f178204c76e56dc15f3b767697a5a1f45f371a1f27420b61613b80a2b258ffa773d415929ab73f71bd43ac9a817015b3463efd723417903e73a0131080116482e20a9941081c57916d8f77e414d"}]}]}, 0x1378}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m9.070648183s ago: executing program 1 (id=998):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_ERR_DATA_REPORTING={{0x4}, 0x3}}}, 0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)

1m8.475100647s ago: executing program 1 (id=1000):
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x3)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001e000100"], 0x40}}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140), 0x4}, {0x0, 0x46}, {&(0x7f0000000380)=""/183, 0xb7}], 0x3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sync()

53.133679211s ago: executing program 34 (id=1000):
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x3)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001e000100"], 0x40}}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140), 0x4}, {0x0, 0x46}, {&(0x7f0000000380)=""/183, 0xb7}], 0x3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sync()

22.658977572s ago: executing program 0 (id=1199):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6", 0x19}], 0x1}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800)
chown(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
syz_clone3(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close(r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r2, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7f, 0x4)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aaee7b1d58b9a64411f6bbf44d", 0x39}, {&(0x7f0000000000)="bed88452305a5143a31e3e79920abb230deb9fbad626cfc3989c74676c022d2290b15ce48284c4f476b5420c5ef0b065c654ff5b462d51855577ed2f58a0a4c0f9e168dcfb43c26297d85106f1f16e7ce8f4671da0459d7fcb25eb7e0d6bc913f385fa066e2e86c8098693e7edf1377d8521f0eb5c7b321b368846fac0dc6ff153dd13a65833cfb71611d5250c25e0d8f32bdb9109da47305a050b0000000000000013e5", 0x2a}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
landlock_restrict_self(r3, 0x0)
r7 = dup(r6)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48})

22.435227227s ago: executing program 5 (id=1201):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x5, "ff000000000000000000000000000200"})
r1 = syz_open_pts(r0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) (async)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x191)
rmdir(&(0x7f0000000100)='./control\x00') (async)
rmdir(&(0x7f0000000100)='./control\x00')
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0xfffe, 0x3, 0xe000, 0x909b, 0x14, "041000"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4)

22.331894301s ago: executing program 5 (id=1202):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_ACTIVATE(r2, 0x5606, 0x4)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x80, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', <r3=>0x0})
recvfrom$packet(r0, &(0x7f0000000180)=""/97, 0x61, 0x0, &(0x7f0000000240)={0x11, 0x1a, r3, 0x1, 0x7f}, 0x14)
r4 = fcntl$dupfd(r1, 0x406, r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1)
recvmmsg$unix(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)

22.090900709s ago: executing program 0 (id=1203):
timer_create(0x7, &(0x7f0000000240)={0x0, 0x2f}, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000300)) (async)
timer_settime(r0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000300))
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110528bd7000fd963aa31ae3041b46460ccc5302674411f5800005000a"], 0x2c}}, 0x20000004) (async)
sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110528bd7000fd963aa31ae3041b46460ccc5302674411f5800005000a"], 0x2c}}, 0x20000004)
mount$fuse(0x0, 0x0, 0x0, 0x4009, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="bbb4786f91a423210b71013d58909ef5a8856a9685530dcc41ab8953c63847bdecf321ceea4bdf1ceab2d0a91087d6e52754c0476e92e2ce28173f623d2ac8e57b6c4e087621c6c3c172a3bfd2540a32409823f7498d1b32dc54fdfdafa8b3646460a3a5bf6c3404b0664a4d201662cfd0314853164f0bf3c80f5c5e368cf16a41a5120889fc912fb9272876507048818bbe7ebcbfc79fdc8d681bcb8e030043ca8a5a57401ccb0aac5a1735", @ANYRESDEC=0x0, @ANYBLOB="228c9b5f7e00"])
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)="d7adf2dd9a44f87e65180d2800841a1a4a15510d98b51962f1aa58837d4df8e0df210dfae21bec2cbd4630f748199c52a6906f0e29e5aa3dc00843f7ebd22b6c2e05", 0x42}], 0x1, 0x5, 0xb2)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) (async)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r6, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x2c}}, 0x80) (async)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x2c}}, 0x80)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0) (async)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x7e, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109026c000101cba001090400010202060004052406000005240056040d240f010000004c06000a00ad0c241b080000100905fcff0006241310dfe307241403000d00072414f9ff090008241ceaf903090009058103ff0304100409058202ff030402010905030220000208011eb1f0e827cb9dbe2307e70404fc97d3a9024094d7a64cef482ee3c2be26530314a08bbb396c40df32e3c8bac6fe8c6574cc1d7bd239af8a8e07458b76bf1816f458cbbcb4785cce8b5ca57607cf8bffaf821f5d0841686f6db5983ac340e2cc14727e5bc9e5"], &(0x7f0000000980)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x4, 0x8, 0x0, 0xff, 0x70}, 0xe7, &(0x7f0000000540)={0x5, 0xf, 0xe7, 0x1, [@generic={0xe2, 0x10, 0x3, "f16f670641a6ae62e976e41637f31a04a71480b1edd3ab0089e77d29b6ddf747f2d7e702dbf2ff7083c3546f20c2cf72293acfe4e5b758e2eb9ae69528155e9986361788fa5ed91a84211d9934484e4eb8e6255ecae7b5e859a23dc0725016ff976c8c6f6a048d3ac4c27e5bb7e9b2d1fcaff97d80a5477636bf44853035eae2285ad1bfa18bb98d926b66025a9be1dec6599dfe7a5ed2a55acaf11d6bbce247d43fa4caea81881b19f2785017ce4724972af33c4d8ca9c67f343da12d3ba013bd04e8e5576ece6ede809ff406f76d7c1861bd31f9530a2c8c0d892ced9330"}]}, 0x4, [{0x8e, &(0x7f0000000640)=@string={0x8e, 0x3, "4dd03a93233c2fbbf5500253b329359b5edcd36ce2f1a6cfc9b4d400126b3ba5f479e03ec1c193debb9e7714a8b10a8974cc80fc995c4f56653d51e7375a0dffaccf95eb3855dbf31cd98350efbc38be0602b8b1b9586a5af5bb69ab6f6d9d58b3bf451894d0f9d708b55db70becffb7a088885ebecca8986d615fce26096eaf7231809a77acc1a0853bc143"}}, {0x6e, &(0x7f0000000700)=@string={0x6e, 0x3, "f9fa7f0bf25e52ed125f1240091e76e4bf69ac5da732be0961f26c425434deb50a0a29f214274b12b114373b7523656b679a2343903e8c370863bf844e63944a59ef718d6fe1eaec2757ee8683564f5d7242fc0ea771620c1fd312021d9a9975813525b9dfd05f006c892abb"}}, {0x96, &(0x7f0000000780)=@string={0x96, 0x3, "012c5d667ccd42bac8a0c18c3d90fbdb66526b9ca915a9f332b13ab943e239304ee1bcdb05c85cb0b0af546cd1145e35f2df66c3ed6a16c69ba6caa881c83f83464fcff0b5dba19137307d2d03faf1108aeb0bea759e07cff425bbbb72bac2852ac0ffe2b58ea129eb8fd520e110dd895130e06dc133425ea7cc1e112ea5650272ff43d5049cb37108734fd8f7425a72bb6718a0"}}, {0x3b, &(0x7f0000000840)=@string={0x3b, 0x3, "982bfe4b1fb9237cbed47b132121603c9ae225efd5cec7ab0392f2d0471da2e82983ca4e92b8d08f2c478c496f9a6069fb5d993f0a1a53c03c"}}]})
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) (async)
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000300)='btrfs\x00', 0x1, &(0x7f00000001c0)='discard') (async)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000300)='btrfs\x00', 0x1, &(0x7f00000001c0)='discard')
syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',k\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000e00000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

21.323482259s ago: executing program 5 (id=1205):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0})

20.542891304s ago: executing program 2 (id=1206):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

20.476984633s ago: executing program 2 (id=1207):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0)
write(r4, &(0x7f0000000300)="6e3a0ed5460b63402ab2195a3216bcb85c6c41dcae414e6b441abd66135b77d6f75f0ea999e298", 0x27)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000240)="0f01cf440f20c0663502000000440f22c0660fd0f266b93d0800000f3264660f3881220fc7b200180f01c20f096766c7442400000000006766c74424020affc40b6766c744240600000000670f0114240fc77300", 0x54}], 0x1, 0x27, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20.322371991s ago: executing program 0 (id=1208):
r0 = socket$kcm(0x10, 0x7, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/60}, {&(0x7f00000010c0)=""/184}], 0x7}, 0x40000100)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)="4c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3658f60a84c9f4d4938037e70e4509c5bb", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

20.300570481s ago: executing program 5 (id=1209):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2080)
ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)

20.006802851s ago: executing program 5 (id=1210):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3, 0xffffffffffffffa8}}, 0x20) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010a3062106000000000001090224000100007000090400000103000000093100000001220500090581030000000000"], 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = dup(r2)
shutdown(r3, 0x1) (async)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (rerun: 64)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota')
chdir(&(0x7f0000000100)='./file1\x00') (async, rerun: 64)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a) (rerun: 64)
quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x8, 0x401, 0x0, 0x7}) (async)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xfff8, 0xc8, 0x0, 0xba1, 0x33f, 0x6, 0x1, 0x5, 0x400, 0x0, 0x1, 0xb}}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0}, 0x0)

20.004139738s ago: executing program 2 (id=1211):
r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) (async)
write(r2, &(0x7f0000000540)="240000001e005f0214ffff9ea6e54d578481b4001d0000ebff00"/36, 0x24) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011970100f5fe009d2fb112ff000000008a151f75080039", 0x27)
syz_usb_disconnect(r4) (async)
r6 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$TCFLSH(r8, 0x400455c8, 0x2) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0xa8, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x4, 0x2, 0xd}, @fda={0x66646185, 0xa, 0x1, 0x2b}, @fda={0x66646185, 0x8, 0x1, 0x34}}, &(0x7f0000000200)={0x0, 0x20, 0x40}}, 0x400}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/139, 0x8b, 0x1, 0xd}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0xa, 0x1, 0x23}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x3}], 0xf5, 0x0, &(0x7f0000000680)="bb282c88793e83364c6d3e77fab4758b87f6573c449df3e79e214d8b987e11d2b02f19e72938eaff8ae796a49bcb0a1b3f90c30b0c904140bb19a4e0959cbf42487047a67fe0f3bcf8502d3689b3fcb258dd6538eec70ea36ac1e7dbafedfdec339c39e1831504e43c097baa30af9747e4a29af5d38428692cfde965ce5674190e16617bef2b09beea6e3d0214ad2d62994a0fed9fd77afad2b5454b8d6adc6305c356a7b619db2e9119672b2d8fff5481645ebbf7430a47dae3753c716a48e4af7fec7e2e87df8a463f848b9a4ff5ff45306b73a62be1792bd03208f085146f5efaa5b22a7464da3f779e90a45aef3c263daeb85d"})
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x1000000}}}, 0x90)

19.79885064s ago: executing program 0 (id=1212):
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) (async)
execve(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000240)={[&(0x7f0000000180)='sysfs\x00', &(0x7f00000001c0)=')\x00', &(0x7f0000000200)='sysfs\x00']}, &(0x7f0000000480)={[&(0x7f0000000580)='\xb4\ri$\xea\xabt\x81}d\x91\x8d\x18\xea\x8b\x9a\xd3\x19.]\x83\xb0DG\x04?N\xa3\x12&\xc0)~\xac\xe5\xca\x84>\xb6(?-\xa6\xce.\x98=J\xd9\xbf2X\xd1w\x98\xbc\x89\xe2w\x9alY\xf5\xf5OTu&\xa5\xae\xb6\xf1r$\x1d\xdeL\xee$\x1a \x13\x00\xb5\xb8\x1d@N\x93U\xf8\xa2\x1d\x0f\xf9\xf5\xd0J\x91!\xeb\xb7\xa6\xa6W\x8bw\xc0V\x0e\xb8\xe5t\x9e\xc4\xf7\xff\xff\xff[i\xc0bO\xa6\xd7\x80\x9e\xf0z\x19Y\xbel\t\xa8EL\xca\xb6\xb3\xd3\xa9\x10\x8c\x96l\xc6\xd7M)f\xf8\xe9\xfex\x0e\x91J\x13\x0f\x89O\xc5\x91\xa8\x1c]\xf3\x8fT\x1d\x85>\xce\xf6+\x98\xfc\xa8\x80b\xb5~L\xee\x90\xa6\xa0\xdf\xf0,\xf6^v\x92:\xcb\\\x89\x95#?o\x87\xd7\x8e\x0f\"\rd\xb4`\xa8$E\x04\x83#B\xf6\xa0\xbb\xfd4t\xc2\'\xe4DN\x96Td~\xa77\xd6\a.\xd6\xab\xf8\xed\xf8G\xb9\xbd', &(0x7f00000002c0)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000340)='\x90\xe8\xc1\xe9\x9cl#\x02', &(0x7f0000000380)='\x00', &(0x7f00000000c0)='q\xc53\xfb\xfd\xf7\x1b+\x90p\xfb|3\xcbN\xbc\x02\x03\x8b{/G\xe4k\xc0E-\x15I\xdc\xb4Z#H\x02\xa6\xbf\x91H', &(0x7f0000000840)='sy\x06@=\xec/\xe3sfs\x00\xd7\xb8\xbb@hjl-J\xebM\xba!\x82\xc6G\xd1{\x95\xe1\xdf\xe4a\xc5/V\x99z\xc2\x95\x01\xa6;N\x87\x9e\x16\xca\x93\xfcIm\xde\xc5\xff\xcch$\x91ZSg}\xe4&$\x06\n\',\xe7Zp7\xad\x11l\xe2\xdcM\x99\x93\xc8.1\xf6\xa6\x8f\x9b\xe9R\xb1\x90b\xbbr\r\x9a\xae\xd0_A\x01$\x06\xec\x8e>\xb5\xd6O<\x89\xa6\x8ad\xe5\xf2\xb7\x02\xa6\xe2:Z\x0e\xfdY\xfbo\x90\xb3\x9f0\xd9\xabC\x8cJ\xd0\x8b~\xf6*\xa1\xf2\r\x06\x9ec{\x1c\xa0Xz\x97%w\xc0<\x92\x90\x86$\xd7\x88\xd8R\xcb\xfd\xe5\xc5\xf7\xc9\xe9\xcc\xc1z5B\xd8\xc8\xcc\xaa\xf8T\x19Q\xc2\x13\xf9\f\x1c\xe0?\xf2\x19A\t\xe9[\xc3\xdf\xf0]\x98\x16*\xc2\xb9\xdd\xb3\xb0y\xa2\x91\x8a\xf8\xba\t\x8186\x13N\xfa\x9f\x80\xa0\xb4\r\bx\x93\f\xfc\x06\x84\xecHz( ]\x00\x00\x00\x00\xaea\xc7\xc6\x11\xc8\xc4\xa6,\x9cx\x8c\x02\xaf\x01\x0e+V\x7f\x05\xf7\x15\x90\xa4a}x\x15.{\xe4\x00\xb7O<\x1bx\xa0\xf5\x9e!\x1db\xfdzE~\r\x91H\xc9\xc1z\xfc\xb4\xdb\xd2I{\x06\xc8\xe9\xfbI\xb8\xb1\x1f\xf4\xb3\xc7\xbbt\x9e\xe11\xc1\xb1)\xe0\xf1\x86{\xb3\al\xa7\x1f\x8a\x1e\xb0\x93\xf9Du\xd8\xc1n\xfd_\x8f\xe4\xe7t\xa8\x85\na\xd9S/\x96}&j\xcb\x9b\xfb\xca\xa7B1\xe1\xdc\x1d\xc6\xf6:\x10\xc6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xa58\\\x95a\xacj\xae\xd1HJ\x98~^\xb9\x8a\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xcc\'\xe3\f\'\t\x95k\xa5\xd0\x9a6\x9e\xfdx\xaf\xe1e/,\x8eB\xc2\xbfa]\x15e\xf8\xee\x80\x1a\x9eZ\xe8qd,q\xc5\x8c\xdaL\xfc', &(0x7f0000000500)='/!;\x00\x00\x00\x00\x00\x00 \x00\x00\\\xc4\x9a\xc4ozq\xb5`@#\x93\xe21\xba\xc2\x80Z\xd8\xcc\x81\x87\x936{\x1er\xc8\xe7:\x80\xd3\xb3\xa2\x00\x82\xa1\x13+\xc9\xc50FP\x88wP\xea\xe7#\xcc\'\x8a\xee=\xef\x1c4\x01\xfe@\x89@\xa8 \x89\xda\xe1\xe5\xa1\xadp\xfc\xa0\xd3Go\x99\xa3\xbe(4\x19\xaaZn!\x9b5\xa6\x99\x99\x9a\x04\x1cV\x8a\f\xc5\xde&2\t']}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x4}, 0x1})
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x1)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=def\\ult=Qelative:3/']) (async)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async, rerun: 64)
creat(&(0x7f0000000100)='./file0\x00', 0xc9028ba210c11ff4) (async, rerun: 64)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r3, &(0x7f0000000040)="e533f2168cb2e2b378f952a66272b58729bbf05e7b10f18b74190184c2d85aa2ca386d21cdbd8a5ebcb82625290a9da9a71da02f03d738033da12e398602afcb4c2957b7cd7c1b", 0x47, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r9, 0x0, {0x2, 0x1, 0x1}, 0xff}, 0x18) (async)
sendmsg$nl_route_sched_retired(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=@delchain={0xb64, 0x65, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xffff, 0xb}, {0xb, 0xffe0}, {0x7}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xfffd}, @TCA_TCINDEX_SHIFT={0x8}]}}, @f_rsvp6={{0xa}, {0xb14, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_POLICE={0x478, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xee}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x69}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}, @TCA_POLICE_TBF={0x3c, 0x1, {0x70, 0x7, 0x10000, 0x3, 0x2, {0x5f, 0x0, 0x0, 0x800, 0x6, 0xfffffffd}, {0x6, 0x1, 0x1, 0xe9, 0x8, 0x4}, 0x7fffffff, 0x6e1, 0x81}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x88ee}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x400, 0x2, 0xc6, 0x1c94, 0x42c, 0x8, 0x0, 0x2, 0x5, 0x9, 0x5, 0x2a, 0x0, 0x1, 0x5, 0x2, 0x4000000, 0xffffffff, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x8, 0x1, 0x9, 0xf, 0x9, 0x4, 0x2, 0x7, 0x6fd, 0x2, 0x4, 0x8, 0x1, 0x8, 0x3ff, 0x8000, 0x6, 0x2, 0x40, 0x101, 0x9, 0x2, 0x4, 0x9489, 0x6, 0x3, 0x5, 0xc3c, 0x8001, 0x2, 0xd640, 0x6, 0x8, 0x9625, 0x8, 0x982, 0x5, 0x0, 0x6, 0x7, 0x6a1, 0x4b, 0x2, 0x8, 0x7fffffff, 0x401, 0x1, 0x5, 0x5, 0x2, 0x5, 0x917, 0xb, 0xc, 0x9, 0x18d, 0xfffffff7, 0x8, 0x3, 0x9, 0x101, 0x7, 0x4, 0x8, 0x4, 0x1000, 0x6522, 0xffff, 0xfffffff8, 0x7ff, 0x6db, 0xe43b, 0x10000, 0x0, 0x1, 0x6, 0x8, 0x8, 0x5, 0x3, 0x5, 0x0, 0x4, 0x9cef, 0x0, 0x9, 0x7, 0x6, 0x7, 0x7, 0x1, 0xfffffff9, 0x3ff, 0x5, 0x1366, 0x7, 0x3, 0xd, 0x401, 0xf2eb, 0x5, 0xfff, 0x69, 0x9, 0x8001, 0x8, 0x7, 0xfffffff7, 0xfffffffa, 0x4, 0x9, 0xc8, 0x0, 0x4, 0x1ff, 0xfffffff9, 0x33e5, 0x6, 0x4, 0x140000, 0x4, 0x8a70, 0xbdf, 0x8001, 0xae, 0x1ff, 0x42000000, 0x6, 0x4, 0x6, 0x3, 0x5, 0x2, 0x7, 0x101, 0x2, 0x0, 0x7fffffff, 0xa33a, 0xd51d, 0x8001, 0x4, 0xa8000000, 0xfffffffc, 0x5, 0xcc94, 0x1, 0x0, 0xff, 0x7, 0x8c84, 0x0, 0xfffffffb, 0x4, 0x8, 0x0, 0x4, 0x7fff, 0x279, 0x80000001, 0x200, 0x6, 0x1, 0xff, 0xdcdf, 0xfffffffc, 0x31, 0xbd4, 0x1000, 0x60000000, 0xb2db, 0x9, 0x0, 0x8, 0xe, 0xfffffffe, 0xd, 0x9, 0x7fffffff, 0x3, 0x4, 0x8, 0x2, 0x0, 0x8, 0x100, 0x4, 0x8, 0x6, 0x4, 0x6, 0x200, 0x7, 0x7, 0x55cd, 0x1, 0x9, 0x4, 0x80000001, 0xab6, 0x1, 0x401, 0x1, 0x4, 0x5, 0x820d, 0xfffffffd, 0x7, 0x82, 0x100, 0x289, 0x40, 0x0, 0x4, 0xce, 0x4, 0xffffffff, 0x80, 0x4, 0x6, 0x4, 0xc37, 0x7, 0x7ff, 0x2, 0xc4, 0x80, 0x1, 0x0, 0x401]}]}, @TCA_RSVP_DST={0x14, 0x2, @private0}, @TCA_RSVP_ACT={0x610, 0x6, [@m_sample={0x114, 0x19, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x359}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xff9d, 0x3, 0x73, 0x4}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x6, 0x3, 0x9, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x400}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x8, 0x1, 0x6, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x6e, 0x6, "6511b304cff98210cdb511deefa3581fe2768ff5b382ad3fa3b0110a9e14cf73d2127e973980c573d65c1197d10335902e68e8cb3c9a6fd5b3fa5df1bacdb62b437022451e45b7c5efad97e70cec490058dc6f8dccec8284a8ccac51e5443691d23757b1eedbef3b9f33"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x110, 0x16, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x10000000, 0xff, 0xd4f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf7c, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9b, 0xdd4, 0x0, 0x10000, 0x101}}]}, {0xa6, 0x6, "2d07bb3f761b2934c49fff1d05dbec759881e37470b6837069209282ce6298ae493097be0e5ac8aee7dbf5a466a9e8f41d9eabfeb6a80343f4dd6728a67876cfd1c38fb65ada4fef110aa9a9143844f85256776d8ad8e103c2fc67846c3fc76ec6bc2516d17a3672d0f16b428c5266aab2d87cd15865a2fcbdfd19f99245cfd36bea6a2f99ea844fea1c89da6de1d4266139147353d5d7fe46b0f6f9bcc6eef9bb97"}, {0xc}, {0xc}}}, @m_sample={0x58, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffff, 0x0, 0x0, 0x8, 0xfffff06d}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x94, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8001}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3cf}]}, {0x3d, 0x6, "8a4ce9ec3071ec3ea5efa2a90a055a47670de8afb9d3db5628c45fa9e556b2d8997fbad923e2fb0a565bc638bc306fb6521ed87859cf95ebfc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x88, 0x3, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x4e, 0x6, "ca63ec83818f70c95b803c7c5a69a5e2b37e934be8c0042dc12240b02f03a54e68e5eb10b9210d6a2887cb75bcc468ea9503723a6c6a870697292f8f351f9a9771272d10d76075b3cb6e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0xd4, 0xc, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x10001, 0x5, 0x4, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x7, 0x10000000, 0x2, 0x7}}]}, {0x77, 0x6, "a8d97c15c133612da1b4188762b43e50e4d7682f265e5661cc56c0f83b637397a8c1cb0b108119f8d242f4f1227deb1d5f6e0ef1090b9a0f5dc214620342ad748e03fb41f7efd004bf285d4e3df090a4fda2e0bddce6316d87599a350e9f38784e9ee9c2e4d2445418ddac1b1e10d8cbb0a2f9"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x1a0, 0x19, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xe, 0x10000000, 0xbce, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x5, 0x8, 0xf6f}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x6, 0x0, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x20000008, 0x9, 0x3}, 0x3}}]}, {0xfd, 0x6, "5793a55c5804955c6a0628432f32961220952765c8565917f449c8319e6a8ac8a1565ae4b6d4db76a9aa27a12468a599b6c8612e129610fabeaac656ee8532d67637b3a254908ced937c9f5fecf1c3421df16234212c176f2abeb98e7080aa384afa38d15220bbdac5309d73a7803e4d39e12917c63c70022e7942cb5924bcdef129ae736719b215163c5b9b74d82328468026c28b32ead854b63b32785bc99d187ffe52429c13aaa51b5a7e409e922a78acb123ca9e2c6a56daf6a441db78ee7c34b2e647a3b1d165384914c698430f01813d491093ba9a783f998ace6aaefb916618aefb3518a0ef43a8dff9f1b7b36c963af540e0db945a"}, {0xc, 0x7, {0xf3d27534a97d8d4f}}, {0xc}}}]}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd3, 0x7, 0x9, 0x7, 0xb, {0x10, 0x2, 0x76a, 0x7b07, 0x8, 0x1}, {0xd6, 0x2, 0xe9, 0xa7, 0x5, 0x8}, 0x3, 0x3, 0x4b5}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x7, 0x6}, {0x5, 0x6, 0xfffff5f0}, 0xff, 0xd7, 0x81}}]}}]}, 0xb64}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c4)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000100)=0x4)

19.701071021s ago: executing program 0 (id=1213):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000140)={0x9, 0x8, '\x00', 0x0, &(0x7f00000000c0)=[0x0]})
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20)

19.555221891s ago: executing program 6 (id=1214):
syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xd0, 0x7d, 0x88, 0x20, 0xaf0, 0x7801, 0xc625, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x40, 0x0, 0xa7, 0x1, 0x56}}]}}]}}, 0x0)

19.04868736s ago: executing program 2 (id=1215):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

18.952970616s ago: executing program 2 (id=1216):
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x84, 0x0, 0x1}, 0x3, 0x3)
landlock_restrict_self(r0, 0x5)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddb9f25030000000c000180060001000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r5 = dup(r1)
write$UHID_INPUT(r5, &(0x7f00000030c0)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b37090868e0878f0e1ac6e7049b3b44959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccd7d01000000000000a1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a4aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c8594c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x9, {0x22, 0xff, 0x4, 0x7, 0x800}})
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r8, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x800, 0x2, @remote, 0x2}, 0x1c)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="d7000010010000008b08000008000000feffffffffffffff"])
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

18.778541091s ago: executing program 0 (id=1217):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x54, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4002)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a) (async)
r4 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f00000003c0)={0x1}, 0x8)
sendto$inet6(r4, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) (async)
sendto$inet6(r4, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r8, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x9, 0x12, {0x12, 0x9, "77ee693c1e07176cc0ea0fad7623c245"}}, &(0x7f0000000540)={0x0, 0x3, 0xf, @string={0xf, 0x3, "831785772bbe3c7237acf9938c"}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x18, 0x4a, "e599af02e3eec6fb99ed2f3efbd85fb9b0f382f922cb5a365a24cf10262511af2cbc40758c0c9600391bbe7d619a7e55c0de61d8d8bc28aa28f250adafa4e5fad18f763e1085863e5246"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xd1}, &(0x7f0000000700)={0xc0, 0x5, 0x5, "ff737471d9"}, &(0x7f0000000780)})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r7)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x40)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdfd847fbad"], 0x2c}}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdfd847fbad"], 0x2c}}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000040), 0x781, 0x1) (async)
r10 = syz_open_dev$hiddev(&(0x7f0000000040), 0x781, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_usb_connect(0x0, 0x30, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x89, 0x99, 0x71, 0x20, 0x50d, 0x1102, 0x488e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0x4, 0x18, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x4, 0x1, 0x1, 0x64, 0xd3, 0xe, [], [{{0x9, 0x5, 0x80, 0x0, 0x200, 0x3, 0x97, 0x62, [@generic={0x3, 0x9, '/'}]}}]}}]}}]}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r0, &(0x7f0000000840)=[{&(0x7f00000007c0)="342f32272c51399349bd8253c1a1", 0xe}, {&(0x7f0000000000)="f0bc9cb1f18cb9be0f076d3a100b1b03c795e6bbc684007566041b", 0x1b}], 0x1000000000000115)
ioctl$HIDIOCGDEVINFO(r10, 0x801c4803, &(0x7f0000000080)=""/220)

18.563439877s ago: executing program 5 (id=1218):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, &(0x7f0000000080))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x48081)

18.136364135s ago: executing program 6 (id=1219):
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x90800)
r1 = socket(0x2, 0x1, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_usb_connect(0x3, 0x187, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e336d40fd0b0b01b1ff010203010902750101000000000904d00002a4abf70009050402000000000009058802000000000074033965b4012cfcb6"], 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

17.837971581s ago: executing program 2 (id=1220):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfa, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054)

16.681349291s ago: executing program 6 (id=1221):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r2)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, <r5=>0x0})
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x40, 0x1, 0x3, "060bfc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [<r7=>0x0, 0x0, 0x0, <r8=>0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xa6, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8], [0x0, 0x0, 0x7]})
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x8, 0x80, 0x1, 'queue1\x00', 0x8})
r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r9, 0xc0205649, &(0x7f0000000000))
r10 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
r11 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r11, &(0x7f0000000040), 0x10)
listen(r11, 0x0)
r12 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r12, &(0x7f0000000080), 0x10)
sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24080040}, 0x0)
sendmmsg(r12, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
ppoll(&(0x7f00000001c0)=[{r10, 0x20}], 0x1, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6c, 0x49, 0x66, 0x20, 0x22b8, 0x7000, 0xd13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc8, 0x2, 0x2, 0xf8, 0xac, 0xc5, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)

15.304756329s ago: executing program 6 (id=1222):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
close_range(r0, r1, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0)
fadvise64(r0, 0x18, 0x0, 0x4)

15.211165775s ago: executing program 6 (id=1223):
r0 = eventfd2(0x0, 0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r0, 0x1ff, 0x2, r0})

15.204206222s ago: executing program 6 (id=1224):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3.174785009s ago: executing program 35 (id=1217):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x54, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4002)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a) (async)
r4 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f00000003c0)={0x1}, 0x8)
sendto$inet6(r4, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) (async)
sendto$inet6(r4, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r8, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x9, 0x12, {0x12, 0x9, "77ee693c1e07176cc0ea0fad7623c245"}}, &(0x7f0000000540)={0x0, 0x3, 0xf, @string={0xf, 0x3, "831785772bbe3c7237acf9938c"}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x18, 0x4a, "e599af02e3eec6fb99ed2f3efbd85fb9b0f382f922cb5a365a24cf10262511af2cbc40758c0c9600391bbe7d619a7e55c0de61d8d8bc28aa28f250adafa4e5fad18f763e1085863e5246"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xd1}, &(0x7f0000000700)={0xc0, 0x5, 0x5, "ff737471d9"}, &(0x7f0000000780)})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r7)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x40)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdfd847fbad"], 0x2c}}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdfd847fbad"], 0x2c}}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000040), 0x781, 0x1) (async)
r10 = syz_open_dev$hiddev(&(0x7f0000000040), 0x781, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_usb_connect(0x0, 0x30, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x89, 0x99, 0x71, 0x20, 0x50d, 0x1102, 0x488e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0x4, 0x18, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x4, 0x1, 0x1, 0x64, 0xd3, 0xe, [], [{{0x9, 0x5, 0x80, 0x0, 0x200, 0x3, 0x97, 0x62, [@generic={0x3, 0x9, '/'}]}}]}}]}}]}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r0, &(0x7f0000000840)=[{&(0x7f00000007c0)="342f32272c51399349bd8253c1a1", 0xe}, {&(0x7f0000000000)="f0bc9cb1f18cb9be0f076d3a100b1b03c795e6bbc684007566041b", 0x1b}], 0x1000000000000115)
ioctl$HIDIOCGDEVINFO(r10, 0x801c4803, &(0x7f0000000080)=""/220)

3.113744453s ago: executing program 36 (id=1218):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, &(0x7f0000000080))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x48081)

2.045437334s ago: executing program 37 (id=1220):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfa, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054)

0s ago: executing program 38 (id=1224):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

kernel console output (not intermixed with test programs):

number 91
[  277.647758][ T9370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.661750][ T9370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.682328][ T1780] gspca_sonixj: reg_w1 err -71
[  277.762714][ T1780] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  277.774832][ T1780] usb 1-1: USB disconnect, device number 82
[  277.912735][ T5912] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  278.077338][ T5912] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  278.098549][ T5912] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81
[  278.111539][ T5912] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  278.127286][ T5912] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  278.141131][ T5912] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  278.152510][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.172606][   T45] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  278.334305][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.352631][   T45] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  278.373134][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.384750][   T45] usb 6-1: config 0 descriptor??
[  278.387354][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.433575][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.499212][ T5912] ath6kl: Failed to submit usb control message: -71
[  278.515726][ T5912] ath6kl: unable to send the bmi data to the device: -71
[  278.524693][ T5912] ath6kl: Unable to send get target info: -71
[  278.534259][ T5912] ath6kl: Failed to init ath6kl core: -71
[  278.541858][ T5912] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71
[  278.562994][ T5912] usb 3-1: USB disconnect, device number 92
[  278.827874][   T45] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor
[  278.859478][   T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0015/input/input24
[  278.921817][ T9409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1007'.
[  278.938256][ T5912] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  279.026815][   T56] block nbd0: Possible stuck request ffff8880258201c0: control (read@0,1024B). Runtime 90 seconds
[  279.037809][   T56] block nbd0: Possible stuck request ffff888025820380: control (read@1024,1024B). Runtime 90 seconds
[  279.049426][   T56] block nbd0: Possible stuck request ffff888025820540: control (read@2048,1024B). Runtime 90 seconds
[  279.053669][   T45] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  279.060827][   T56] block nbd0: Possible stuck request ffff888025820700: control (read@3072,1024B). Runtime 90 seconds
[  279.174803][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.194205][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.216942][ T5912] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  279.227453][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  279.244921][ T5912] usb 3-1: SerialNumber: syz
[  279.326731][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1008'.
[  279.400778][  T929] usb 6-1: USB disconnect, device number 31
[  279.487559][ T5912] usb 3-1: 0:2 : does not exist
[  279.589981][ T5912] usb 3-1: USB disconnect, device number 93
[  279.729601][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  280.062579][  T929] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  280.226116][  T929] usb 1-1: Using ep0 maxpacket: 8
[  280.239013][  T929] usb 1-1: config 0 interface 0 has no altsetting 0
[  280.254892][  T929] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  280.272646][  T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.280984][  T929] usb 1-1: Product: syz
[  280.285487][   T45] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  280.293298][  T929] usb 1-1: Manufacturer: syz
[  280.297914][  T929] usb 1-1: SerialNumber: syz
[  280.308570][  T929] usb 1-1: config 0 descriptor??
[  280.317721][  T929] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  280.452866][   T45] usb 6-1: Using ep0 maxpacket: 16
[  280.459902][   T45] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  280.469122][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.481106][   T45] usb 6-1: config 0 descriptor??
[  280.499773][   T45] gspca_main: sonixj-2.14.0 probing 0471:0327
[  280.513364][   T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  280.517878][ T9421] ubi31: attaching mtd0
[  280.529176][ T9421] ubi31: scanning is finished
[  280.534260][ T9421] ubi31: empty MTD device detected
[  280.581373][ T9431] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[  280.595337][  T929] snd_usb_toneport 1-1:0.0: cannot get proper max packet size
[  280.607089][  T929] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  280.616942][  T929] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  280.675066][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  280.686598][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  280.698077][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  280.712320][   T10] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  280.721470][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.732374][   T10] usb 3-1: config 0 descriptor??
[  280.741803][ T9429] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  280.773783][ T9421] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  280.781612][ T9421] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  280.789933][ T9421] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  280.797917][ T9421] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  280.808014][ T9421] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  280.815387][ T9421] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  280.824112][ T9421] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3998736835
[  280.834793][ T9421] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  280.847485][ T9433] ubi31: background thread "ubi_bgt31d" started, PID 9433
[  280.956916][ T5954] usb 1-1: USB disconnect, device number 83
[  281.177912][   T10] sigmamicro 0003:1C4F:0059.0016: item fetching failed at offset 0/3
[  281.187798][   T10] sigmamicro 0003:1C4F:0059.0016: probe with driver sigmamicro failed with error -22
[  281.377103][   T10] usb 3-1: USB disconnect, device number 94
[  281.510016][   T45] gspca_sonixj: reg_w1 err -71
[  281.534328][   T45] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  281.553667][   T45] usb 6-1: USB disconnect, device number 32
[  282.202710][   T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  282.368792][   T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  282.378109][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.386999][   T10] usb 3-1: Product: syz
[  282.391257][   T10] usb 3-1: Manufacturer: syz
[  282.396562][   T10] usb 3-1: SerialNumber: syz
[  282.405923][   T10] usb 3-1: config 0 descriptor??
[  282.493329][   T45] usb 1-1: new low-speed USB device number 84 using dummy_hcd
[  282.602644][ T5954] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  282.644166][   T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.654688][   T45] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[  282.667527][   T45] usb 1-1: string descriptor 0 read error: -22
[  282.674247][   T45] usb 1-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44
[  282.689660][   T45] usb 1-1: New USB device strings: Mfr=1, Product=174, SerialNumber=195
[  282.706701][   T45] usb 1-1: config 0 descriptor??
[  282.742837][ T5954] usb 6-1: device descriptor read/64, error -71
[  282.802818][ T7072] usb 3-1: USB disconnect, device number 95
[  282.887987][ T9470] binder: 9469:9470 ioctl c0306201 2000000001c0 returned -14
[  282.966555][ T9474] syzkaller1: entered promiscuous mode
[  282.978159][ T9476] netlink: 'syz.0.1022': attribute type 83 has an invalid length.
[  282.992575][ T5954] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  282.995904][ T9474] syzkaller1: entered allmulticast mode
[  283.042084][ T9476] fanotify_encode_fh: 1 callbacks suppressed
[  283.042110][ T9476] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  283.071431][ T7072] usb 1-1: USB disconnect, device number 84
[  283.123551][ T5954] usb 6-1: device descriptor read/64, error -71
[  283.233126][ T5954] usb usb6-port1: attempt power cycle
[  283.572650][ T5954] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  283.593984][ T5954] usb 6-1: device descriptor read/8, error -71
[  283.662796][ T7072] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  283.842653][ T7072] usb 3-1: Using ep0 maxpacket: 8
[  283.847834][ T5954] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  283.857083][ T7072] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  283.865637][ T7072] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  283.875599][ T7072] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  283.885785][ T7072] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  283.885967][ T5954] usb 6-1: device descriptor read/8, error -71
[  283.902319][ T7072] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  283.915871][ T7072] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  283.925431][ T7072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.022737][ T5912] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  284.043296][ T5954] usb usb6-port1: unable to enumerate USB device
[  284.139716][ T7072] usb 3-1: usb_control_msg returned -32
[  284.145476][ T7072] usbtmc 3-1:16.0: can't read capabilities
[  284.175042][ T5912] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  284.185464][ T5912] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  284.198738][ T5912] usb 1-1: config 2 interface 0 has no altsetting 0
[  284.208030][ T5912] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  284.217480][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.226572][ T5912] usb 1-1: Product: syz
[  284.230776][ T5912] usb 1-1: Manufacturer: syz
[  284.235437][ T5912] usb 1-1: SerialNumber: syz
[  284.451128][ T5912] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22
[  284.461780][ T5912] usb 1-1: USB disconnect, device number 85
[  284.900517][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.909463][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.919102][ T9496] netlink: 'syz.2.1029': attribute type 16 has an invalid length.
[  284.927517][ T9496] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1029'.
[  285.108676][ T5912] usb 3-1: USB disconnect, device number 96
[  285.422749][ T5954] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  285.573028][ T5954] usb 1-1: Using ep0 maxpacket: 16
[  285.580144][ T5954] usb 1-1: config 1 has an invalid interface number: 223 but max is 0
[  285.588425][ T5954] usb 1-1: config 1 has no interface number 0
[  285.594701][ T5954] usb 1-1: config 1 interface 223 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  285.608002][ T5954] usb 1-1: config 1 interface 223 has no altsetting 0
[  285.618631][ T5954] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=2b.4a
[  285.628030][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.636573][ T5954] usb 1-1: Product: syz
[  285.640927][ T5954] usb 1-1: Manufacturer: syz
[  285.645674][ T5954] usb 1-1: SerialNumber: syz
[  285.772660][ T5912] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  285.875051][ T5954] usb 1-1: can't set first interface for hiFace device.
[  285.882180][ T5954] snd-usb-hiface 1-1:1.223: probe with driver snd-usb-hiface failed with error -5
[  285.895352][ T5954] usb 1-1: USB disconnect, device number 86
[  285.925232][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.934210][ T7072] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  285.936941][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.956378][ T5912] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  285.966782][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.977987][ T5912] usb 6-1: config 0 descriptor??
[  286.092683][ T7072] usb 3-1: Using ep0 maxpacket: 32
[  286.099763][ T7072] usb 3-1: config 12 has an invalid interface number: 7 but max is 0
[  286.107954][ T7072] usb 3-1: config 12 has no interface number 0
[  286.114267][ T7072] usb 3-1: config 12 interface 7 has no altsetting 0
[  286.126422][ T7072] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00
[  286.136174][ T7072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.144410][ T7072] usb 3-1: Product: syz
[  286.148697][ T7072] usb 3-1: Manufacturer: syz
[  286.153408][ T7072] usb 3-1: SerialNumber: syz
[  286.365377][ T9503] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1036'.
[  286.380802][ T7072] go7007 3-1:12.7: probe with driver go7007 failed with error -12
[  286.406223][ T9501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.417521][ T7072] usb 3-1: USB disconnect, device number 97
[  286.421122][ T9501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.530894][ T5912] usbhid 6-1:0.0: can't add hid device: -71
[  286.541246][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  286.561350][ T5912] usb 6-1: USB disconnect, device number 37
[  286.832690][   T10] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  286.984378][   T10] usb 1-1: config 0 has an invalid interface number: 151 but max is 0
[  286.993927][   T10] usb 1-1: config 0 has no interface number 0
[  287.002305][   T10] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  287.011526][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.019651][   T10] usb 1-1: Product: syz
[  287.024072][   T10] usb 1-1: Manufacturer: syz
[  287.028679][   T10] usb 1-1: SerialNumber: syz
[  287.037654][   T10] usb 1-1: config 0 descriptor??
[  287.164455][ T5912] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  287.332855][ T5912] usb 3-1: Using ep0 maxpacket: 32
[  287.348417][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  287.367915][ T5912] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  287.386952][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  287.395788][ T5912] usb 3-1: Product: syz
[  287.401125][ T5912] usb 3-1: Manufacturer: syz
[  287.406142][ T5912] usb 3-1: SerialNumber: syz
[  287.416702][ T5912] usb 3-1: config 0 descriptor??
[  287.423894][ T9512] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  287.454279][ T9510] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1039'.
[  287.488509][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  287.543052][   T10] usb 1-1: USB disconnect, device number 87
[  287.612851][ T7072] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  287.724216][ T5912] usb 3-1: USB disconnect, device number 98
[  287.799405][ T7072] usb 6-1: unable to get BOS descriptor or descriptor too short
[  287.811145][ T7072] usb 6-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  287.830555][ T7072] usb 6-1: config 1 interface 0 has no altsetting 0
[  287.839694][ T7072] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40
[  287.854747][ T7072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.863120][ T7072] usb 6-1: Product: syz
[  287.867311][ T7072] usb 6-1: Manufacturer: syz
[  287.871929][ T7072] usb 6-1: SerialNumber: syz
[  288.671503][ T9535] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  288.702837][  T929] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  288.842777][  T929] usb 3-1: device descriptor read/64, error -71
[  289.102728][  T929] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  289.232702][  T929] usb 3-1: device descriptor read/64, error -71
[  289.343289][  T929] usb usb3-port1: attempt power cycle
[  289.682596][  T929] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  289.703243][  T929] usb 3-1: device descriptor read/8, error -71
[  289.782670][   T45] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  289.935192][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.946435][  T929] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  289.954415][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.966597][   T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  289.975999][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.986549][  T929] usb 3-1: device descriptor read/8, error -71
[  289.996047][   T45] usb 1-1: config 0 descriptor??
[  290.116886][  T929] usb usb3-port1: unable to enumerate USB device
[  290.292632][ T7072] usbhid 6-1:1.0: can't add hid device: -71
[  290.316537][ T7072] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  290.337380][ T7072] usb 6-1: USB disconnect, device number 38
[  290.447764][   T45] arvo 0003:1E7D:30D4.0017: item fetching failed at offset 5/7
[  290.460875][   T45] arvo 0003:1E7D:30D4.0017: parse failed
[  290.466975][   T45] arvo 0003:1E7D:30D4.0017: probe with driver arvo failed with error -22
[  290.640447][ T7072] usb 1-1: USB disconnect, device number 88
[  290.977862][ T9547] lo speed is unknown, defaulting to 1000
[  290.985496][ T9547] lo speed is unknown, defaulting to 1000
[  290.993679][ T9547] lo speed is unknown, defaulting to 1000
[  291.005271][ T9547] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  291.020961][ T9547] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  291.059637][ T9547] lo speed is unknown, defaulting to 1000
[  291.066967][ T9547] lo speed is unknown, defaulting to 1000
[  291.074788][ T9547] lo speed is unknown, defaulting to 1000
[  291.081770][ T9547] lo speed is unknown, defaulting to 1000
[  291.091403][ T9547] lo speed is unknown, defaulting to 1000
[  291.098858][ T9547] lo speed is unknown, defaulting to 1000
[  291.482704][   T10] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[  291.654647][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  291.665894][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.683033][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  291.692152][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.726281][   T10] usb 1-1: config 0 descriptor??
[  291.815464][ T9569] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  291.849497][ T9569] pim6reg: entered allmulticast mode
[  291.860980][ T9567] netlink: 'syz.2.1057': attribute type 10 has an invalid length.
[  291.928911][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'.
[  291.950938][ T9569] bridge_slave_1: left allmulticast mode
[  291.957743][ T9569] bridge_slave_1: left promiscuous mode
[  291.964731][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.987620][ T9569] bridge_slave_0: left allmulticast mode
[  291.993596][ T9569] bridge_slave_0: left promiscuous mode
[  291.999676][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.153809][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  292.160021][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  292.201315][   T10] usb 1-1: USB disconnect, device number 89
[  292.335149][ T9576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  292.336479][   T52] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  292.342503][ T9576] IPv6: NLM_F_CREATE should be set when creating new route
[  292.357525][ T9576] IPv6: NLM_F_CREATE should be set when creating new route
[  292.364817][ T9576] IPv6: NLM_F_CREATE should be set when creating new route
[  292.823146][ T5868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  292.836730][ T5868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  292.845135][ T5868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  292.872651][ T5868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  292.880790][ T5868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  292.910021][ T9592] IPVS: length: 236 != 24
[  293.041296][   T45] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  293.202604][   T45] usb 3-1: device descriptor read/64, error -71
[  293.413253][ T9586] chnl_net:caif_netlink_parms(): no params data found
[  293.462652][   T45] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  293.612613][   T45] usb 3-1: device descriptor read/64, error -71
[  293.687592][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.695688][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.705107][ T9586] bridge_slave_0: entered allmulticast mode
[  293.714958][ T9586] bridge_slave_0: entered promiscuous mode
[  293.723586][   T45] usb usb3-port1: attempt power cycle
[  293.724305][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.736515][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.744123][ T9586] bridge_slave_1: entered allmulticast mode
[  293.752396][ T9586] bridge_slave_1: entered promiscuous mode
[  293.792130][ T9586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.808508][ T9586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.847265][ T9586] team0: Port device team_slave_0 added
[  293.858197][ T9586] team0: Port device team_slave_1 added
[  293.894625][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.901898][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.929252][ T9586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.941990][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.949661][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.952561][   T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  293.975756][    C0] vkms_vblank_simulate: vblank timer overrun
[  293.982881][ T9586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.047682][ T9586] hsr_slave_0: entered promiscuous mode
[  294.055072][ T9586] hsr_slave_1: entered promiscuous mode
[  294.061316][ T9586] debugfs: 'hsr0' already exists in 'hsr'
[  294.067323][ T9586] Cannot create hsr debugfs directory
[  294.082935][   T45] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  294.108412][   T45] usb 3-1: device descriptor read/8, error -71
[  294.142917][   T10] usb 1-1: Using ep0 maxpacket: 16
[  294.161023][   T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  294.175801][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.186126][   T10] usb 1-1: Product: syz
[  294.190363][   T10] usb 1-1: Manufacturer: syz
[  294.198872][   T10] usb 1-1: SerialNumber: syz
[  294.212925][   T10] usb 1-1: config 0 descriptor??
[  294.221356][   T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  294.235632][   T10] usb 1-1: Detected FT-X
[  294.344701][ T9586] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  294.352644][   T45] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  294.365733][ T9586] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  294.380702][ T9586] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  294.389132][   T45] usb 3-1: device descriptor read/8, error -71
[  294.402319][ T9586] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  294.420761][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  294.503827][   T45] usb usb3-port1: unable to enumerate USB device
[  294.519809][ T9586] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.544608][ T9586] 8021q: adding VLAN 0 to HW filter on device team0
[  294.565995][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.573246][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.594523][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.601685][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.646434][   T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  294.874535][ T9586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  294.943827][   T52] Bluetooth: hci5: command tx timeout
[  295.140778][ T9586] veth0_vlan: entered promiscuous mode
[  295.158763][ T9586] veth1_vlan: entered promiscuous mode
[  295.197907][ T9586] veth0_macvtap: entered promiscuous mode
[  295.208060][ T9586] veth1_macvtap: entered promiscuous mode
[  295.230260][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.246486][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.266347][ T1031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.275530][   T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.291833][   T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.301940][   T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.379571][ T6988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.399048][ T6988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.431647][ T6988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.440223][ T6988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.644611][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1076'.
[  295.984260][ T9655] netlink: 'syz.2.1079': attribute type 1 has an invalid length.
[  295.992263][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'.
[  296.003779][ T9655] nbd: illegal input index 393224
[  296.786558][ T9670] netlink: 'syz.6.1085': attribute type 21 has an invalid length.
[  296.801759][ T9670] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1085'.
[  296.819390][ T9670] netlink: 'syz.6.1085': attribute type 4 has an invalid length.
[  296.827761][   T10] usb 1-1: USB disconnect, device number 90
[  296.831838][ T9670] netlink: 'syz.6.1085': attribute type 3 has an invalid length.
[  296.881371][ T9670] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1085'.
[  296.957457][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  296.992045][   T10] ftdi_sio 1-1:0.0: device disconnected
[  297.014923][   T52] Bluetooth: hci5: command tx timeout
[  297.123495][ T1780] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  297.270945][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'.
[  297.280329][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'.
[  297.292897][ T1780] usb 7-1: Using ep0 maxpacket: 32
[  297.311153][ T1780] usb 7-1: unable to get BOS descriptor or descriptor too short
[  297.322851][   T45] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  297.342152][ T1780] usb 7-1: config 7 has an invalid interface number: 105 but max is 2
[  297.352145][ T1780] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  297.356316][ T9684] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  297.367393][ T1780] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 3
[  297.394719][ T1780] usb 7-1: config 7 has no interface number 0
[  297.400888][ T1780] usb 7-1: config 7 interface 105 altsetting 112 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  297.421942][ T1780] usb 7-1: config 7 interface 105 has no altsetting 0
[  297.441957][ T1780] usb 7-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=83.b3
[  297.462547][ T1780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.478280][ T1780] usb 7-1: Product: syz
[  297.493627][ T1780] usb 7-1: Manufacturer: syz
[  297.498299][ T1780] usb 7-1: SerialNumber: syz
[  297.503153][   T45] usb 6-1: Using ep0 maxpacket: 16
[  297.519131][   T45] usb 6-1: config 7 has an invalid interface number: 222 but max is 0
[  297.537126][   T45] usb 6-1: config 7 has no interface number 0
[  297.547663][   T45] usb 6-1: config 7 interface 222 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  297.559624][   T45] usb 6-1: config 7 interface 222 has no altsetting 0
[  297.583559][   T45] usb 6-1: New USB device found, idVendor=0ccd, idProduct=008e, bcdDevice=37.e6
[  297.594039][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.602285][   T45] usb 6-1: Product: syz
[  297.612803][   T45] usb 6-1: Manufacturer: syz
[  297.617548][   T45] usb 6-1: SerialNumber: syz
[  297.642100][ T9677] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  297.672306][   T45] em28xx 6-1:7.222: New device syz syz @ 480 Mbps (0ccd:008e, interface 222, class 222)
[  297.688908][   T45] em28xx 6-1:7.222: Video interface 222 found: bulk
[  297.953843][   T45] em28xx 6-1:7.222: unknown em28xx chip ID (0)
[  297.992760][ T5931] usb 3-1: new low-speed USB device number 107 using dummy_hcd
[  298.027187][   T45] em28xx 6-1:7.222: reading from i2c device at 0xa0 failed (error=-5)
[  298.040405][   T45] em28xx 6-1:7.222: board has no eeprom
[  298.122747][   T45] em28xx 6-1:7.222: Identified as Terratec Cinergy HTC USB XS (card=87)
[  298.137799][   T45] em28xx 6-1:7.222: Currently, V4L2 is not supported on this model
[  298.155744][  T929] em28xx 6-1:7.222: Binding DVB extension
[  298.155922][ T5931] usb 3-1: config 5 has an invalid interface number: 6 but max is 2
[  298.161801][  T929] em28xx 6-1:7.222: no endpoint for DVB mode and transfer type 0
[  298.186530][  T929] em28xx 6-1:7.222: failed to pre-allocate USB transfer buffers for DVB.
[  298.195392][ T5931] usb 3-1: config 5 has an invalid interface number: 103 but max is 2
[  298.210865][  T929] em28xx 6-1:7.222: Registering input extension
[  298.227523][   T45] usb 6-1: USB disconnect, device number 39
[  298.229340][ T5931] usb 3-1: config 5 has an invalid interface number: 23 but max is 2
[  298.241156][   T45] em28xx 6-1:7.222: Disconnecting em28xx
[  298.253118][   T45] em28xx 6-1:7.222: Closing input extension
[  298.274219][ T5931] usb 3-1: config 5 has an invalid interface number: 123 but max is 2
[  298.289504][ T5931] usb 3-1: config 5 has 4 interfaces, different from the descriptor's value: 3
[  298.332398][ T5931] usb 3-1: config 5 has no interface number 0
[  298.339085][ T5931] usb 3-1: config 5 has no interface number 1
[  298.347571][   T45] em28xx 6-1:7.222: Freeing device
[  298.352364][ T5931] usb 3-1: config 5 has no interface number 2
[  298.369707][ T5931] usb 3-1: config 5 has no interface number 3
[  298.378242][ T5931] usb 3-1: config 5 interface 6 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  298.398692][ T5931] usb 3-1: config 5 interface 6 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  298.411849][ T5931] usb 3-1: config 5 interface 6 altsetting 1 endpoint 0xF has invalid maxpacket 576, setting to 8
[  298.437587][ T5931] usb 3-1: config 5 interface 6 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  298.468690][ T5931] usb 3-1: config 5 interface 6 altsetting 1 endpoint 0x2 is Bulk; changing to Interrupt
[  298.481768][ T5931] usb 3-1: config 5 interface 6 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  298.509496][ T5931] usb 3-1: config 5 interface 6 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 8
[  298.541916][ T5931] usb 3-1: config 5 interface 6 altsetting 1 has an endpoint descriptor with address 0xD1, changing to 0x81
[  298.607953][ T5931] usb 3-1: config 5 interface 6 altsetting 1 has a duplicate endpoint with address 0x81, skipping
[  298.621308][ T5931] usb 3-1: config 5 interface 6 altsetting 1 endpoint 0xC has invalid maxpacket 32, setting to 8
[  298.632425][ T5931] usb 3-1: config 5 interface 6 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 8
[  298.646259][ T5931] usb 3-1: config 5 interface 6 altsetting 1 endpoint 0x7 has invalid maxpacket 64, setting to 8
[  298.646691][ T9700] Bluetooth: MGMT ver 1.23
[  298.657780][ T5931] usb 3-1: config 5 interface 6 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[  298.689550][ T5931] usb 3-1: config 5 interface 6 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0
[  298.707281][ T5931] usb 3-1: config 5 interface 6 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 15
[  298.730965][ T5931] usb 3-1: too many endpoints for config 5 interface 103 altsetting 70: 233, using maximum allowed: 30
[  298.747596][ T5931] usb 3-1: config 5 interface 103 altsetting 70 has a duplicate endpoint with address 0xD, skipping
[  298.759326][ T5931] usb 3-1: config 5 interface 103 altsetting 70 has 2 endpoint descriptors, different from the interface descriptor's value: 233
[  298.781489][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[  298.796424][ T5931] usb 3-1: config 5 interface 23 altsetting 6 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  298.807272][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[  298.818095][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  298.829845][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0x8C, skipping
[  298.848245][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  298.859884][ T5931] usb 3-1: config 5 interface 23 altsetting 6 endpoint 0xB is Bulk; changing to Interrupt
[  298.878632][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[  298.889764][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[  298.908703][ T5931] usb 3-1: config 5 interface 23 altsetting 6 endpoint 0x4 has invalid maxpacket 32, setting to 8
[  298.920277][ T5931] usb 3-1: config 5 interface 23 altsetting 6 endpoint 0x9 has invalid maxpacket 64, setting to 8
[  298.931699][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[  298.942577][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0x7, skipping
[  298.943065][   T45] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  298.953942][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  298.974330][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[  298.985088][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[  298.995819][ T5931] usb 3-1: config 5 interface 23 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 15
[  299.009151][ T5931] usb 3-1: config 5 interface 123 altsetting 247 has a duplicate endpoint with address 0x2, skipping
[  299.021596][ T5931] usb 3-1: config 5 interface 123 altsetting 247 has a duplicate endpoint with address 0xC, skipping
[  299.022693][ T7072] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  299.032626][ T5931] usb 3-1: config 5 interface 123 altsetting 247 has a duplicate endpoint with address 0x9, skipping
[  299.032669][ T5931] usb 3-1: config 5 interface 123 altsetting 247 has a duplicate endpoint with address 0xA, skipping
[  299.032695][ T5931] usb 3-1: config 5 interface 123 altsetting 247 has a duplicate endpoint with address 0x3, skipping
[  299.032719][ T5931] usb 3-1: config 5 interface 6 has no altsetting 0
[  299.081269][ T5931] usb 3-1: config 5 interface 103 has no altsetting 0
[  299.088459][ T5931] usb 3-1: config 5 interface 23 has no altsetting 0
[  299.096308][   T52] Bluetooth: hci5: command tx timeout
[  299.102685][ T5931] usb 3-1: config 5 interface 123 has no altsetting 0
[  299.122792][   T45] usb 6-1: Using ep0 maxpacket: 16
[  299.131425][   T45] usb 6-1: unable to get BOS descriptor or descriptor too short
[  299.140978][   T45] usb 6-1: config 15 has an invalid interface number: 160 but max is 0
[  299.149478][   T45] usb 6-1: config 15 has no interface number 0
[  299.155987][   T45] usb 6-1: config 15 interface 160 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32
[  299.166607][   T45] usb 6-1: config 15 interface 160 altsetting 1 bulk endpoint 0xA has invalid maxpacket 16
[  299.180245][   T45] usb 6-1: config 15 interface 160 has no altsetting 0
[  299.187730][ T7072] usb 1-1: Using ep0 maxpacket: 16
[  299.197306][ T7072] usb 1-1: config 53 has an invalid interface number: 240 but max is 0
[  299.206324][   T45] usb 6-1: New USB device found, idVendor=1b3d, idProduct=9307, bcdDevice=9a.3c
[  299.215662][ T7072] usb 1-1: config 53 has no interface number 0
[  299.222061][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.231295][ T7072] usb 1-1: too many endpoints for config 53 interface 240 altsetting 0: 234, using maximum allowed: 30
[  299.242600][   T45] usb 6-1: Product: syz
[  299.246819][   T45] usb 6-1: Manufacturer: syz
[  299.251475][   T45] usb 6-1: SerialNumber: syz
[  299.256919][ T7072] usb 1-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[  299.284487][ T9700] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  299.291962][ T7072] usb 1-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024
[  299.299858][ T9700] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  299.303842][ T7072] usb 1-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  299.323306][ T7072] usb 1-1: config 53 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 234
[  299.342358][ T7072] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=51.95
[  299.351677][ T7072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.359925][ T7072] usb 1-1: Product: syz
[  299.364383][ T7072] usb 1-1: Manufacturer: syz
[  299.369082][ T7072] usb 1-1: SerialNumber: syz
[  299.383771][ T9702] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[  299.537166][   T45] ftdi_sio 6-1:15.160: FTDI USB Serial Device converter detected
[  299.547157][   T45] ftdi_sio ttyUSB0: unknown device type: 0x9a3c
[  299.566259][   T45] usb 6-1: USB disconnect, device number 40
[  299.578805][   T45] ftdi_sio 6-1:15.160: device disconnected
[  299.642070][ T7072] kvaser_usb 1-1:53.240: error -ENODEV: Cannot get usb endpoint(s)
[  299.676044][ T7072] usb 1-1: USB disconnect, device number 91
[  299.801800][ T1780] option 7-1:7.105: GSM modem (1-port) converter detected
[  299.835858][ T1780] usb 7-1: USB disconnect, device number 2
[  299.867173][ T1780] option 7-1:7.105: device disconnected
[  300.192097][ T9712] fuse: Bad value for 'user_id'
[  300.198955][ T9712] fuse: Bad value for 'user_id'
[  300.392669][ T1780] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  300.483787][ T9727] fuse: Bad value for 'fd'
[  300.489752][ T9727] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1107'.
[  300.554512][ T1780] usb 7-1: Using ep0 maxpacket: 8
[  300.561601][ T1780] usb 7-1: config 183 has too many interfaces: 99, using maximum allowed: 32
[  300.570528][ T1780] usb 7-1: config 183 has an invalid descriptor of length 196, skipping remainder of the config
[  300.581391][ T1780] usb 7-1: config 183 has 0 interfaces, different from the descriptor's value: 99
[  300.590762][ T1780] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice= 7.58
[  300.600337][ T1780] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.613818][   T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  300.742893][ T7072] usb 1-1: new low-speed USB device number 92 using dummy_hcd
[  300.747780][ T5931] usb 3-1: New USB device found, idVendor=057b, idProduct=0022, bcdDevice=93.ae
[  300.767450][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.782745][   T10] usb 6-1: Using ep0 maxpacket: 16
[  300.790187][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.805757][   T10] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  300.816400][ T5931] usb 3-1: can't set config #5, error -71
[  300.824159][ T1780] usb 7-1: string descriptor 0 read error: -71
[  300.829816][   T10] usb 6-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0
[  300.839013][ T5931] usb 3-1: USB disconnect, device number 107
[  300.851459][ T1780] usb 7-1: USB disconnect, device number 3
[  300.854630][   T10] usb 6-1: Product: syz
[  300.884834][   T10] usb 6-1: config 0 descriptor??
[  300.909109][   T10] gspca_main: spca501-2.14.0 probing 0000:0000
[  300.923068][ T7072] usb 1-1: Invalid ep0 maxpacket: 64
[  301.072585][ T7072] usb 1-1: new low-speed USB device number 93 using dummy_hcd
[  301.158484][   T10] gspca_spca501: reg write: error -71
[  301.174226][   T52] Bluetooth: hci5: command tx timeout
[  301.190927][   T10] spca501 6-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  301.198878][   T10] spca501 6-1:0.0: probe with driver spca501 failed with error -22
[  301.232270][   T10] usb 6-1: USB disconnect, device number 41
[  301.246839][ T7072] usb 1-1: Invalid ep0 maxpacket: 64
[  301.266731][ T7072] usb usb1-port1: attempt power cycle
[  301.324026][ T1780] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  301.387540][ T9745] xt_l2tp: v2 sid > 0xffff: 1114112
[  301.495287][ T1780] usb 3-1: Using ep0 maxpacket: 8
[  301.501807][ T1780] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.512086][ T1780] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  301.521211][ T1780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  301.533442][ T1780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  301.545017][ T1780] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  301.554985][ T1780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.573540][   T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  301.576494][ T1780] hub 3-1:1.0: bad descriptor, ignoring hub
[  301.589749][ T1780] hub 3-1:1.0: probe with driver hub failed with error -5
[  301.597629][ T1780] cdc_wdm 3-1:1.0: skipping garbage
[  301.603156][ T1780] cdc_wdm 3-1:1.0: skipping garbage
[  301.609605][ T1780] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  301.615747][ T7072] usb 1-1: new low-speed USB device number 94 using dummy_hcd
[  301.623461][ T1780] cdc_wdm 3-1:1.0: Unknown control protocol
[  301.632718][ T5912] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  301.643345][ T7072] usb 1-1: Invalid ep0 maxpacket: 64
[  301.748244][   T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  301.757441][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.770510][   T10] usb 6-1: config 0 descriptor??
[  301.784578][ T7072] usb 1-1: new low-speed USB device number 95 using dummy_hcd
[  301.790881][   T10] pwc: Philips SPC 900NC USB webcam detected.
[  301.800520][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  301.813020][ T5912] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  301.821584][ T7072] usb 1-1: Invalid ep0 maxpacket: 64
[  301.822122][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.826954][ T5912] usb 7-1: config 0 descriptor??
[  301.831330][ T7072] usb usb1-port1: unable to enumerate USB device
[  301.985417][ T1780] usb 3-1: USB disconnect, device number 108
[  301.999079][   T10] pwc: Failed to set LED on/off time (-71)
[  302.008284][   T10] pwc: send_video_command error -71
[  302.018294][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  302.026474][   T10] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[  302.044087][   T10] usb 6-1: USB disconnect, device number 42
[  302.259764][ T5912] logitech 0003:046D:C626.0018: unbalanced delimiter at end of report description
[  302.269731][ T5912] logitech 0003:046D:C626.0018: parse failed
[  302.276127][ T5912] logitech 0003:046D:C626.0018: probe with driver logitech failed with error -22
[  302.461015][ T5912] usb 7-1: USB disconnect, device number 4
[  302.586402][ T9747] netlink: 'syz.2.1114': attribute type 21 has an invalid length.
[  302.587155][ T9749] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1115'.
[  302.595881][ T9747] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1114'.
[  302.749935][ T9754] tipc: Started in network mode
[  302.751974][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.760374][ T9754] tipc: Node identity ac1414aa, cluster identity 4711
[  302.776229][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.778978][ T9754] tipc: Enabled bearer <udp:s>, priority 10
[  302.784791][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.798905][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.808468][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.819468][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.828384][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.839672][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.849051][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.866530][ T5912] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  302.884795][ T5912] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  302.992732][   T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  303.000931][ T9760] fido_id[9760]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  303.075692][ T9764] loop3: detected capacity change from 0 to 7
[  303.090388][ T9764] Dev loop3: unable to read RDB block 7
[  303.096442][ T9764]  loop3: unable to read partition table
[  303.102383][ T9764] loop3: partition table beyond EOD, truncated
[  303.113080][ T9764] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  303.122651][   T10] usb 6-1: device descriptor read/64, error -71
[  303.362686][   T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  303.422639][ T1780] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  303.502621][   T10] usb 6-1: device descriptor read/64, error -71
[  303.582814][ T1780] usb 7-1: Using ep0 maxpacket: 8
[  303.588463][ T9770] binder: BINDER_SET_CONTEXT_MGR already set
[  303.590954][ T1780] usb 7-1: unable to get BOS descriptor or descriptor too short
[  303.598773][ T9770] binder: 9768:9770 ioctl 4018620d 200000000100 returned -16
[  303.604716][ T1780] usb 7-1: config 1 has an invalid interface number: 4 but max is 2
[  303.623355][ T1780] usb 7-1: config 1 has an invalid interface descriptor of length 6, skipping
[  303.630401][   T10] usb usb6-port1: attempt power cycle
[  303.632312][ T1780] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.649526][ T1780] usb 7-1: config 1 has no interface number 1
[  303.656109][ T1780] usb 7-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  303.672015][ T1780] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  303.689652][ T1780] usb 7-1: config 1 interface 4 has no altsetting 0
[  303.699565][ T1780] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  303.708957][ T1780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.722763][ T1780] usb 7-1: Product: syz
[  303.727281][ T1780] usb 7-1: Manufacturer: syz
[  303.732001][ T1780] usb 7-1: SerialNumber: syz
[  303.912622][ T7072] tipc: Node number set to 2886997162
[  303.972704][   T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  303.990214][ T1780] usb 7-1: 2:1 : invalid UAC_AS_GENERAL desc
[  304.003731][   T10] usb 6-1: device descriptor read/8, error -71
[  304.013071][ T5912] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  304.023025][ T1780] usb 7-1: USB disconnect, device number 5
[  304.065473][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  304.174738][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short
[  304.184361][ T5912] usb 1-1: config 3 has an invalid interface number: 8 but max is 3
[  304.194438][ T1212] usb 3-1: new full-speed USB device number 109 using dummy_hcd
[  304.203785][ T5912] usb 1-1: config 3 has an invalid descriptor of length 108, skipping remainder of the config
[  304.214710][ T5912] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4
[  304.223628][ T5912] usb 1-1: config 3 has no interface number 0
[  304.229782][ T5912] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11
[  304.240997][ T5912] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  304.254057][ T5912] usb 1-1: config 3 interface 8 has no altsetting 0
[  304.262394][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  304.272086][   T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  304.279746][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.288404][ T5912] usb 1-1: Product: syz
[  304.294445][ T5912] usb 1-1: Manufacturer: syz
[  304.299159][ T5912] usb 1-1: SerialNumber: syz
[  304.323469][   T10] usb 6-1: device descriptor read/8, error -71
[  304.377715][ T1212] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  304.387289][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.396832][ T1212] usb 3-1: Product: syz
[  304.401085][ T1212] usb 3-1: Manufacturer: syz
[  304.405947][ T1212] usb 3-1: SerialNumber: syz
[  304.414542][ T1212] usb 3-1: config 0 descriptor??
[  304.433090][   T10] usb usb6-port1: unable to enumerate USB device
[  304.536229][ T5912] appledisplay 1-1:3.8: Error while getting initial brightness: -71
[  304.547539][ T5912] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -71
[  304.596463][ T5912] usb 1-1: USB disconnect, device number 96
[  304.632440][ T1212] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  304.718898][ T9785] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1126'.
[  304.728690][ T9785] openvswitch: netlink: Message has 512 unknown bytes.
[  304.736938][ T9785] netlink: 'syz.6.1126': attribute type 4 has an invalid length.
[  304.746828][ T9785] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1126'.
[  305.118612][ T5912] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  305.282613][ T5912] usb 7-1: Using ep0 maxpacket: 32
[  305.288667][ T5912] usb 7-1: too many configurations: 17, using maximum allowed: 8
[  305.298424][ T5912] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  305.306656][ T5912] usb 7-1: config 0 has no interface number 0
[  305.314998][ T5912] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  305.324556][ T5912] usb 7-1: config 0 has no interface number 0
[  305.331854][ T5912] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  305.340176][ T5912] usb 7-1: config 0 has no interface number 0
[  305.347502][ T5912] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  305.355731][ T5912] usb 7-1: config 0 has no interface number 0
[  305.363590][ T5912] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  305.371651][ T5912] usb 7-1: config 0 has no interface number 0
[  305.380215][ T5912] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  305.382589][ T1780] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  305.388391][ T5912] usb 7-1: config 0 has no interface number 0
[  305.403548][ T5912] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  305.411614][ T5912] usb 7-1: config 0 has no interface number 0
[  305.421240][ T5912] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  305.429559][ T5912] usb 7-1: config 0 has no interface number 0
[  305.438953][ T5912] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  305.448319][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.456565][ T5912] usb 7-1: Product: syz
[  305.460815][ T5912] usb 7-1: Manufacturer: syz
[  305.465673][ T5912] usb 7-1: SerialNumber: syz
[  305.473207][ T5912] usb 7-1: config 0 descriptor??
[  305.488062][ T5912] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz)
[  305.522681][ T1780] usb 1-1: device descriptor read/64, error -71
[  305.685338][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.694579][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.707607][ T5912] etas_es58x 7-1:0.2: could not parse product info: '424242424242'
[  305.762921][ T1780] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  305.932589][ T1780] usb 1-1: device descriptor read/64, error -71
[  306.043346][ T1780] usb usb1-port1: attempt power cycle
[  306.302802][ T7072] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  306.383263][ T1780] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  306.424222][ T1780] usb 1-1: device descriptor read/8, error -71
[  306.457993][ T1212] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  306.484045][ T7072] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.00
[  306.500140][ T1212] usb 3-1: USB disconnect, device number 109
[  306.510801][ T7072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.527020][    C1] etas_es58x 7-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0061.
[  306.538026][    C1] etas_es58x 7-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  306.546016][    C1] etas_es58x 7-1:0.2: es58x_split_urb() returned error -EBADMSG
[  306.553767][    C1] etas_es58x 7-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0xC7D8.
[  306.564725][    C1] etas_es58x 7-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  306.572965][    C1] etas_es58x 7-1:0.2: es58x_split_urb() returned error -EBADMSG
[  306.602020][ T5526] etas_es58x 7-1:0.2 can0: bit-timing not yet defined
[  306.632118][ T7072] usb 6-1: config 0 descriptor??
[  306.641830][ T7072] usb 6-1: selecting invalid altsetting 1
[  306.649668][ T7072] flexcop_usb: set interface failed.
[  306.655472][ T7072] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  306.752608][ T1780] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  306.774065][ T1780] usb 1-1: device descriptor read/8, error -71
[  306.798243][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  306.807483][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  306.816693][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  306.826004][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  306.835182][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  306.844411][    C1] etas_es58x 7-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[  306.854483][ T5526] etas_es58x 7-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL
[  306.855757][ T5954] usb 7-1: USB disconnect, device number 6
[  306.871975][ T5954] etas_es58x 7-1:0.2: Disconnecting syz syz
[  306.887227][ T1780] usb usb1-port1: unable to enumerate USB device
[  307.324496][ T1212] hid-generic 0000:007F:FFFFFFFE.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  307.470803][ T9826] fido_id[9826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  307.658901][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'.
[  307.863966][ T5933] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  308.053672][ T5933] usb 7-1: Using ep0 maxpacket: 8
[  308.065821][ T5933] usb 7-1: config 6 has an invalid interface number: 2 but max is 0
[  308.080260][ T5933] usb 7-1: config 6 has no interface number 0
[  308.104065][ T5933] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  308.118606][ T5933] usb 7-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D
[  308.132028][ T5933] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  308.146259][ T5933] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  308.155917][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.165719][ T5933] usb 7-1: Product: syz
[  308.171157][ T5933] usb 7-1: Manufacturer: syz
[  308.188766][ T5933] usb 7-1: SerialNumber: syz
[  308.193937][ T5954] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  308.219791][ T5933] hso 7-1:6.2: Failed to find INT IN ep
[  308.346799][ T5954] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  308.364872][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.378313][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.401050][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.409597][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.419258][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.429143][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.444990][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.459717][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.471429][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.486578][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.487137][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.496653][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.529989][ T5933] usb 7-1: USB disconnect, device number 7
[  308.530648][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.559203][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.570727][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.590154][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.612004][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.620574][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.635206][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.646654][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.655661][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.665679][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.677112][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.686228][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.697829][ T5954] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.709232][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  308.716069][ T1780] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  308.736110][ T5954] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  308.746040][ T5954] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  308.754840][ T5954] usb 3-1: Product: syz
[  308.759428][ T5954] usb 3-1: Manufacturer: syz
[  308.765702][ T5954] usb 3-1: SerialNumber: syz
[  308.781482][ T5954] usb 3-1: config 0 descriptor??
[  308.795782][ T5954] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  308.861596][ T5912] usb 6-1: USB disconnect, device number 47
[  308.895103][ T1780] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.921556][ T1780] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  308.942169][ T1780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  308.957245][ T1780] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  308.978376][ T1780] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  308.988014][ T1780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.030620][ T1780] usb 1-1: Product: syz
[  309.039708][ T1780] usb 1-1: Manufacturer: syz
[  309.046384][ T1780] usb 1-1: SerialNumber: syz
[  309.066366][ T1780] usb 1-1: config 0 descriptor??
[  309.084459][ T1780] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected
[  309.116064][ T1780] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  309.126860][   T56] block nbd0: Possible stuck request ffff8880258201c0: control (read@0,1024B). Runtime 120 seconds
[  309.138649][ T9870] netlink: 'syz.2.1136': attribute type 10 has an invalid length.
[  309.146989][   T56] block nbd0: Possible stuck request ffff888025820380: control (read@1024,1024B). Runtime 120 seconds
[  309.158577][   T56] block nbd0: Possible stuck request ffff888025820540: control (read@2048,1024B). Runtime 120 seconds
[  309.169760][   T56] block nbd0: Possible stuck request ffff888025820700: control (read@3072,1024B). Runtime 120 seconds
[  309.198451][ T1780] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  309.318343][ T1780] usb 1-1: USB disconnect, device number 101
[  309.354507][ T1780] garmin_gps 1-1:0.0: device disconnected
[  309.709999][ T9882] IPVS: length: 203 != 8
[  310.512791][ T1212] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  310.562693][ T1780] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  310.662627][ T5933] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  310.676204][ T1212] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  310.685335][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.693749][ T1212] usb 6-1: Product: syz
[  310.697953][ T1212] usb 6-1: Manufacturer: syz
[  310.702833][ T1212] usb 6-1: SerialNumber: syz
[  310.712734][ T1780] usb 1-1: Using ep0 maxpacket: 16
[  310.723495][ T1780] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  310.738028][ T1780] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  310.748254][ T1780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.756398][ T1780] usb 1-1: Product: syz
[  310.760607][ T1780] usb 1-1: Manufacturer: syz
[  310.765287][ T1780] usb 1-1: SerialNumber: syz
[  310.812682][ T5933] usb 7-1: Using ep0 maxpacket: 16
[  310.818892][ T5933] usb 7-1: no configurations
[  310.824435][ T5933] usb 7-1: can't read configurations, error -22
[  310.952579][ T5933] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  310.960530][    C1] usb 3-1: yurex_control_callback - control failed: -2
[  310.993428][ T1780] pn533_usb 1-1:5.0: NFC: Could not find bulk-in or bulk-out endpoint
[  310.997766][ T5912] usb 3-1: USB disconnect, device number 110
[  311.027326][ T5912] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  311.031463][ T1780] usb 1-1: USB disconnect, device number 102
[  311.114859][ T5933] usb 7-1: Using ep0 maxpacket: 16
[  311.120857][ T5933] usb 7-1: no configurations
[  311.126247][ T5933] usb 7-1: can't read configurations, error -22
[  311.134025][ T5933] usb usb7-port1: attempt power cycle
[  311.412845][ T5912] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  311.492673][ T5933] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  311.524375][ T5933] usb 7-1: Using ep0 maxpacket: 16
[  311.530489][ T5933] usb 7-1: no configurations
[  311.539884][ T5933] usb 7-1: can't read configurations, error -22
[  311.582725][ T5912] usb 3-1: Using ep0 maxpacket: 8
[  311.594458][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short
[  311.604674][ T5912] usb 3-1: config 119 has an invalid interface number: 109 but max is 0
[  311.620011][ T5912] usb 3-1: config 119 has no interface number 0
[  311.627234][ T5912] usb 3-1: config 119 interface 109 has no altsetting 0
[  311.640884][ T5912] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=ed.67
[  311.650783][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.660028][ T5912] usb 3-1: Product: syz
[  311.664748][ T5912] usb 3-1: Manufacturer: syz
[  311.670990][ T5912] usb 3-1: SerialNumber: syz
[  311.676005][ T5933] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  311.704970][ T5933] usb 7-1: Using ep0 maxpacket: 16
[  311.716527][ T5933] usb 7-1: no configurations
[  311.721309][ T5933] usb 7-1: can't read configurations, error -22
[  311.729237][ T5933] usb usb7-port1: unable to enumerate USB device
[  311.899571][ T5912] kobil_sct 3-1:119.109: KOBIL USB smart card terminal converter detected
[  311.911723][ T5912] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  311.930286][ T1212] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  311.943602][ T5912] usb 3-1: USB disconnect, device number 111
[  311.950401][ T1212] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  311.968150][ T5912] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  311.979199][ T1212] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  311.984418][   T45] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  311.989820][ T5912] kobil_sct 3-1:119.109: device disconnected
[  312.011923][ T1212] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  312.033034][ T1212] usb 6-1: USB disconnect, device number 48
[  312.162860][   T45] usb 1-1: Using ep0 maxpacket: 32
[  312.170361][   T45] usb 1-1: unable to get BOS descriptor or descriptor too short
[  312.190002][   T45] usb 1-1: config 10 has an invalid interface number: 110 but max is 0
[  312.198762][   T45] usb 1-1: config 10 has no interface number 0
[  312.208615][   T45] usb 1-1: string descriptor 0 read error: -22
[  312.219007][   T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=4b.e5
[  312.228443][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.446895][   T45] usb 1-1: USB disconnect, device number 103
[  312.476451][ T9921] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1156'.
[  312.496482][ T9921] tc_dump_action: action bad kind
[  312.561984][ T9923] kvm: user requested TSC rate below hardware speed
[  312.912699][   T45] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  313.081320][   T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.223082][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  313.243044][   T45] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  313.289773][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  313.302598][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.312818][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  313.321485][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  313.330307][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  313.401511][   T45] usb 3-1: Product: syz
[  313.456436][   T45] usb 3-1: Manufacturer: syz
[  313.467369][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.478252][   T45] usb 3-1: SerialNumber: syz
[  313.483982][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.540563][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.545075][   T45] cdc_mbim 3-1:1.0: skipping garbage
[  313.584107][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.702600][ T1212] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  313.720229][ T9943] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  313.741654][ T9927] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  313.743929][ T9943] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  313.758201][ T9943] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  313.770434][ T9943] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  313.780197][ T9943] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  313.790523][ T9943] comedi comedi3: 8255: I/O port conflict (0x12,4)
[  313.800940][ T9943] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  313.810031][ T9943] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  313.827434][ T9943] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  313.835962][ T9943] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  313.842924][ T9943] comedi comedi3: 8255: I/O port conflict (0xc4,4)
[  313.849805][ T9943] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  313.856495][ T5933] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  313.864349][ T1212] usb 6-1: device descriptor read/64, error -71
[  313.872676][ T9943] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  313.982637][ T7072] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  314.030330][ T5933] usb 7-1: config 0 has an invalid interface number: 126 but max is 0
[  314.042151][ T5933] usb 7-1: config 0 has no interface number 0
[  314.064953][ T5933] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=f4.0a
[  314.078343][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.100105][ T5933] usb 7-1: config 0 descriptor??
[  314.105284][ T1212] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  314.137855][ T5933] hub 7-1:0.126: bad descriptor, ignoring hub
[  314.146897][ T5933] hub 7-1:0.126: probe with driver hub failed with error -5
[  314.152695][ T7072] usb 1-1: Using ep0 maxpacket: 32
[  314.173942][ T7072] usb 1-1: config 16 has an invalid interface number: 7 but max is 0
[  314.195055][ T7072] usb 1-1: config 16 has no interface number 0
[  314.213140][ T7072] usb 1-1: config 16 interface 7 has no altsetting 0
[  314.226144][ T7072] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=e1.e1
[  314.235933][ T7072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.242604][ T1212] usb 6-1: device descriptor read/64, error -71
[  314.245205][ T7072] usb 1-1: Product: syz
[  314.255170][ T7072] usb 1-1: Manufacturer: syz
[  314.259948][ T7072] usb 1-1: SerialNumber: syz
[  314.353223][ T1212] usb usb6-port1: attempt power cycle
[  314.367392][ T9927] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  314.405100][   T45] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  314.423295][   T45] wwan wwan0: port wwan0mbim0 attached
[  314.454574][ T5933] usb 7-1: USB disconnect, device number 12
[  314.479541][   T45] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 56:9b:50:2b:59:9a
[  314.519801][ T7072] gspca_main: touptek-2.14.0 probing 0547:6801
[  314.542955][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  314.552328][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  314.561050][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  314.569859][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  314.578645][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  314.587483][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  314.589618][   T45] usb 3-1: USB disconnect, device number 112
[  314.608039][ T7072] usb 1-1: USB disconnect, device number 104
[  314.694708][   T45] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  314.733070][ T1212] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  314.784546][   T45] wwan wwan0: port wwan0mbim0 disconnected
[  314.809241][ T1212] usb 6-1: device descriptor read/8, error -71
[  315.102710][ T1212] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  315.138688][ T1212] usb 6-1: device descriptor read/8, error -71
[  315.287718][ T1212] usb usb6-port1: unable to enumerate USB device
[  315.554158][ T9967] nbd: must specify an index to disconnect
[  315.564567][ T9965] sp0: Synchronizing with TNC
[  315.882723][   T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  315.912673][ T7072] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  316.062877][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.083081][ T7072] usb 3-1: Using ep0 maxpacket: 8
[  316.099326][   T10] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.101373][ T7072] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.159965][ T7072] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  316.192277][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  316.213559][ T7072] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  316.229006][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.257200][ T7072] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  316.257213][   T10] usb 1-1: Product: syz
[  316.257237][   T10] usb 1-1: Manufacturer: syz
[  316.301575][   T10] usb 1-1: SerialNumber: syz
[  316.305023][ T7072] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  316.337326][   T10] cdc_ncm 1-1:1.0: skipping garbage
[  316.354574][ T7072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  316.362009][   T10] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  316.384990][ T7072] usb 3-1: SerialNumber: syz
[  316.421253][   T10] cdc_ncm 1-1:1.0: bind() failure
[  316.450099][ T9965] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22
[  316.471939][   T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  316.486445][ T7072] usb 3-1: bad CDC descriptors
[  316.511225][   T10] cdc_ncm 1-1:1.1: bind() failure
[  316.514235][ T7072] usb-storage 3-1:1.0: USB Mass Storage device detected
[  316.558758][ T7072] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  316.595601][ T7072] scsi host1: usb-storage 3-1:1.0
[  316.656359][   T10] usb 1-1: USB disconnect, device number 105
[  316.763907][ T9965] sp0: Synchronizing with TNC
[  316.777643][ T9994] overlayfs: conflicting lowerdir path
[  316.824650][ T5954] usb 3-1: USB disconnect, device number 113
[  317.282898][ T5933] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  317.333780][ T7072] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  317.421158][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.432325][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  317.446430][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.459648][ T5933] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  317.497999][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.514705][ T7072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.546402][ T5933] usb 6-1: config 0 descriptor??
[  317.562708][ T7072] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  317.602428][ T7072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.663834][ T7072] usb 7-1: config 0 descriptor??
[  317.692729][ T1212] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  317.932819][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  317.996727][ T5933] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor
[  318.033811][ T1212] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  318.070357][ T7072] usbhid 7-1:0.0: can't add hid device: -71
[  318.082620][ T7072] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  318.114534][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.122294][ T7072] usb 7-1: USB disconnect, device number 13
[  318.173289][ T1212] usb 1-1: Product: syz
[  318.177534][ T1212] usb 1-1: Manufacturer: syz
[  318.193456][ T5933] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001B/input/input26
[  318.229238][ T1212] usb 1-1: SerialNumber: syz
[  318.363302][ T1212] usb 1-1: config 0 descriptor??
[  318.583607][ T5933] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  318.678582][ T5933] usb 6-1: USB disconnect, device number 53
[  318.776760][T10033] fido_id[10033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  318.954862][T10035] delete_channel: no stack
[  318.962709][T10035] delete_channel: no stack
[  319.319811][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1185'.
[  319.340656][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1185'.
[  319.512676][ T7072] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  319.698335][ T7072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  319.712009][ T7072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.723774][ T7072] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  319.733528][ T7072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.754585][ T7072] usb 6-1: config 0 descriptor??
[  319.969712][T10038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.990143][T10038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.245931][ T7072] aureal 0003:0755:2626.001C: unbalanced delimiter at end of report description
[  320.274380][ T7072] aureal 0003:0755:2626.001C: probe with driver aureal failed with error -22
[  320.459525][ T5933] usb 1-1: USB disconnect, device number 106
[  320.525985][ T7072] usb 6-1: USB disconnect, device number 54
[  320.630874][T10059] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  320.892769][ T1780] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  321.042617][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  321.046976][ T1780] usb 3-1: Using ep0 maxpacket: 16
[  321.050385][ T5933] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  321.075243][ T1780] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.099392][ T1780] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  321.117539][ T1780] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  321.129245][ T1780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.137493][ T1780] usb 3-1: Product: syz
[  321.141970][ T1780] usb 3-1: Manufacturer: syz
[  321.147822][ T1780] usb 3-1: SerialNumber: syz
[  321.212733][   T10] usb 7-1: Using ep0 maxpacket: 32
[  321.218043][ T5933] usb 1-1: Using ep0 maxpacket: 8
[  321.228292][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  321.238031][ T5933] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  321.247716][ T5933] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  321.262846][   T10] usb 7-1: config 7 has an invalid interface number: 187 but max is 0
[  321.271065][   T10] usb 7-1: config 7 has no interface number 0
[  321.283292][ T5933] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  321.300302][ T5933] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  321.311275][   T10] usb 7-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  321.325326][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  321.339487][   T10] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0
[  321.350638][   T10] usb 7-1: config 7 interface 187 has no altsetting 0
[  321.359976][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 23205, setting to 64
[  321.371780][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  321.389492][ T5933] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  321.400207][   T10] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  321.409591][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.417768][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.425914][ T5933] usb 1-1: Product: syz
[  321.430104][ T5933] usb 1-1: Manufacturer: syz
[  321.435022][   T10] usb 7-1: Product: syz
[  321.439218][   T10] usb 7-1: Manufacturer: syz
[  321.444029][ T5933] usb 1-1: SerialNumber: syz
[  321.450511][   T10] usb 7-1: SerialNumber: syz
[  321.456318][ T5933] usb 1-1: config 0 descriptor??
[  321.465313][ T5933] hub 1-1:0.0: bad descriptor, ignoring hub
[  321.472717][ T5933] hub 1-1:0.0: probe with driver hub failed with error -5
[  321.587276][ T7072] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  321.682343][   T10] usb 7-1: Limiting number of CPorts to U8_MAX
[  321.695308][   T10] usb 7-1: Unknown endpoint type found, address 0x07
[  321.703932][   T10] usb 7-1: Not enough endpoints found in device, aborting!
[  321.754551][ T7072] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  321.765909][ T7072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.778268][ T7072] usb 6-1: config 0 descriptor??
[  321.783893][ T5954] usb 1-1: USB disconnect, device number 107
[  321.796419][ T7072] cp210x 6-1:0.0: cp210x converter detected
[  321.885121][T10062] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1192'.
[  321.912167][ T5933] usb 7-1: USB disconnect, device number 14
[  322.199565][ T7072] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71
[  322.224797][ T7072] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71
[  322.240467][ T7072] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  322.256841][ T7072] usb 6-1: cp210x converter now attached to ttyUSB0
[  322.278903][ T7072] usb 6-1: USB disconnect, device number 55
[  322.303803][ T7072] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  322.317257][ T7072] cp210x 6-1:0.0: device disconnected
[  322.812596][ T5933] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  322.972677][ T5933] usb 7-1: device descriptor read/64, error -71
[  323.212632][ T5933] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  323.334414][   T10] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  323.354969][ T5933] usb 7-1: device descriptor read/64, error -71
[  323.463141][ T5933] usb usb7-port1: attempt power cycle
[  323.508045][   T10] usb 1-1: Using ep0 maxpacket: 32
[  323.515760][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.519794][T10059] Invalid source name
[  323.526295][   T10] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  323.531464][T10059] UBIFS error (pid: 10059): cannot open "./file0", error -22
[  323.542564][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.577788][ T1780] usb 3-1: 0:2 : does not exist
[  323.577843][   T10] usb 1-1: config 0 descriptor??
[  323.595959][ T1780] usb 3-1: unit 9 not found!
[  323.601289][   T10] dvb-usb: found a 'TeVii S662' in warm state.
[  323.601342][   T10] dw2102: su3000_power_ctrl: 1, initialized 0
[  323.601717][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  323.636673][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  323.640795][ T1780] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4)
[  323.653277][   T10] dvbdev: DVB: registering new adapter (TeVii S662)
[  323.664036][   T10] usb 1-1: media controller created
[  323.669678][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  323.690187][ T1780] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4)
[  323.690289][   T10] dw2102: i2c transfer failed.
[  323.707397][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  323.708239][ T1780] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4)
[  323.713740][   T10] dw2102: i2c transfer failed.
[  323.738494][T10096] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  323.745953][T10096] overlayfs: failed to set xattr on upper
[  323.752528][T10096] overlayfs: ...falling back to redirect_dir=nofollow.
[  323.757101][ T1780] usb 3-1: USB disconnect, device number 114
[  323.759398][T10096] overlayfs: ...falling back to uuid=null.
[  323.775748][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  323.789690][   T10] dw2102: i2c transfer failed.
[  323.800569][   T30] audit: type=1326 audit(1757933650.779:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.2.1204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb51b58eba9 code=0x0
[  323.801270][T10093] dw2102: i2c wr: len=66 is too big!
[  323.801270][T10093] 
[  323.833465][ T5933] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  323.843246][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  323.868793][   T10] dw2102: i2c transfer failed.
[  323.874548][ T5933] usb 7-1: device descriptor read/8, error -71
[  323.885516][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.889058][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  323.897685][T10098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.911615][   T10] dw2102: i2c transfer failed.
[  323.922763][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  323.928541][   T10] dw2102: i2c transfer failed.
[  323.946905][   T10] dvb-usb: MAC address: 02:02:02:02:02:02
[  323.989684][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.989741][T10098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.029668][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1203'.
[  324.037321][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  324.061710][T10094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1203'.
[  324.129319][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  324.140114][T10093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.150947][T10093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.160885][ T5933] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  324.171546][   T10] dw2102: command 0x0e transfer failed.
[  324.190671][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  324.201849][   T10] dw2102: command 0x0e transfer failed.
[  324.208321][ T5933] usb 7-1: device descriptor read/8, error -71
[  324.285554][T10094] btrfs: Unknown parameter 'k'
[  324.322991][ T5933] usb usb7-port1: unable to enumerate USB device
[  324.522603][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  324.528826][   T10] dw2102: command 0x0e transfer failed.
[  324.554164][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  324.561415][   T10] dw2102: command 0x0e transfer failed.
[  324.569806][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  324.579730][   T10] dw2102: command 0x51 transfer failed.
[  324.594204][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  324.606711][   T10] dw2102: i2c probe for address 0x68 failed.
[  324.616148][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  324.622116][   T10] dw2102: i2c probe for address 0x69 failed.
[  324.628294][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  324.639843][   T10] dw2102: i2c probe for address 0x6a failed.
[  324.656583][   T10] dw2102: probing for demodulator failed. Is the external power switched on?
[  324.675918][   T10] dvb-usb: no frontend was attached by 'TeVii S662'
[  324.806289][   T10] rc_core: IR keymap rc-tt-1500 not found
[  324.861992][   T10] Registered IR keymap rc-empty
[  324.875986][   T10] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  324.895742][   T10] input: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input27
[  324.923316][   T10] dvb-usb: schedule remote query interval to 250 msecs.
[  324.930324][   T10] dw2102: su3000_power_ctrl: 0, initialized 1
[  324.965956][   T10] dvb-usb: TeVii S662 successfully initialized and connected.
[  325.028269][   T10] usb 1-1: USB disconnect, device number 108
[  325.250979][   T10] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  325.532702][ T7072] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  325.544867][ T5912] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  325.692802][ T7072] usb 6-1: Using ep0 maxpacket: 16
[  325.702623][ T7072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.713913][ T7072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.724714][ T7072] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  325.740378][ T7072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.758935][ T5912] usb 3-1: config index 0 descriptor too short (expected 25439, got 36)
[  325.759801][ T7072] usb 6-1: config 0 descriptor??
[  325.780738][ T5912] usb 3-1: config 0 has too many interfaces: 109, using maximum allowed: 32
[  325.800048][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.817742][ T5912] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 109
[  325.831964][ T5912] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  325.841655][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.861261][ T5912] usb 3-1: config 0 descriptor??
[  325.977416][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.988151][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.998615][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.007012][   T10] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  326.019439][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.030647][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.043981][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.054933][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.064830][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.080581][ T7072] usb 3-1: USB disconnect, device number 115
[  326.088494][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.098197][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.184531][   T10] usb 7-1: config 0 has an invalid interface number: 86 but max is 0
[  326.202505][   T10] usb 7-1: config 0 has no interface number 0
[  326.208663][   T10] usb 7-1: config 0 interface 86 has no altsetting 0
[  326.235188][   T10] usb 7-1: New USB device found, idVendor=0af0, idProduct=7801, bcdDevice=c6.25
[  326.254229][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.262279][   T10] usb 7-1: Product: syz
[  326.276992][   T10] usb 7-1: Manufacturer: syz
[  326.281660][   T10] usb 7-1: SerialNumber: syz
[  326.294753][   T10] usb 7-1: config 0 descriptor??
[  326.315161][   T10] hso 7-1:0.86: Not our interface
[  326.527253][ T5954] usb 7-1: USB disconnect, device number 19
[  326.616727][  T929] usb 6-1: USB disconnect, device number 56
[  326.743195][ T7072] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  326.903613][ T7072] usb 1-1: Using ep0 maxpacket: 32
[  326.916524][ T7072] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  326.926475][ T7072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.935491][ T7072] usb 1-1: Product: syz
[  326.946224][ T7072] usb 1-1: Manufacturer: syz
[  326.951147][ T7072] usb 1-1: SerialNumber: syz
[  326.959546][ T7072] usb 1-1: config 0 descriptor??
[  326.975891][ T7072] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  327.136313][T10201] block nbd6: Attempted send on invalid socket
[  327.147614][T10201] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.157523][T10201] block nbd6: Attempted send on invalid socket
[  327.164284][T10201] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.177864][T10201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  327.190868][T10201] block nbd6: Attempted send on invalid socket
[  327.207202][T10201] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.216856][T10201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  327.229807][T10201] block nbd6: Attempted send on invalid socket
[  327.230836][T10172] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  327.236431][T10201] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.254702][T10172] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  327.263325][T10201] block nbd6: Attempted send on invalid socket
[  327.273207][T10201] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.303722][T10201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  327.322952][T10201] block nbd6: Attempted send on invalid socket
[  327.329214][T10201] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.357230][T10201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  327.385155][T10201] block nbd6: Attempted send on invalid socket
[  327.391416][T10201] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.404708][T10201] block nbd6: Attempted send on invalid socket
[  327.410967][T10201] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.420775][T10201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  327.431108][T10201] block nbd6: Attempted send on invalid socket
[  327.437424][T10201] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.447146][  T929] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  327.457321][T10201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  327.469571][T10201] block nbd6: Attempted send on invalid socket
[  327.475915][T10201] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  327.485812][T10201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  327.496019][T10201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  327.506009][T10201] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1)
[  327.616624][  T929] usb 7-1: config 0 has an invalid interface number: 208 but max is 0
[  327.625545][  T929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.637206][  T929] usb 7-1: config 0 has no interface number 0
[  327.643761][  T929] usb 7-1: config 0 interface 208 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  327.658699][  T929] usb 7-1: config 0 interface 208 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  327.669306][  T929] usb 7-1: config 0 interface 208 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  327.679769][  T929] usb 7-1: config 0 interface 208 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  327.699648][  T929] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=ff.b1
[  327.709544][  T929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.718115][  T929] usb 7-1: Product: syz
[  327.722925][  T929] usb 7-1: Manufacturer: syz
[  327.727648][  T929] usb 7-1: SerialNumber: syz
[  327.738838][  T929] usb 7-1: config 0 descriptor??
[  327.754910][  T929] kvaser_usb 7-1:0.208: error -ENODEV: Cannot get usb endpoint(s)
[  327.882812][ T7072] gspca_stk1135: reg_w 0x5 err -110
[  327.889148][ T7072] gspca_stk1135: serial bus timeout: status=0x00
[  327.902674][ T7072] gspca_stk1135: Sensor write failed
[  327.908134][ T7072] gspca_stk1135: serial bus timeout: status=0x00
[  327.914845][ T7072] gspca_stk1135: Sensor write failed
[  327.920186][ T7072] gspca_stk1135: serial bus timeout: status=0x00
[  327.933960][ T7072] gspca_stk1135: Sensor read failed
[  327.939229][ T7072] gspca_stk1135: serial bus timeout: status=0x00
[  327.945905][ T7072] gspca_stk1135: Sensor read failed
[  327.951177][ T7072] gspca_stk1135: Detected sensor type unknown (0x0)
[  327.962576][ T7072] gspca_stk1135: serial bus timeout: status=0x00
[  327.969003][ T7072] gspca_stk1135: Sensor read failed
[  327.982330][ T1780] usb 7-1: USB disconnect, device number 20
[  328.001031][ T7072] gspca_stk1135: serial bus timeout: status=0x00
[  328.018824][ T7072] gspca_stk1135: Sensor read failed
[  328.027406][ T7072] gspca_stk1135: serial bus timeout: status=0x00
[  328.037185][ T7072] gspca_stk1135: Sensor write failed
[  328.042954][ T7072] gspca_stk1135: serial bus timeout: status=0x00
[  328.049493][ T7072] gspca_stk1135: Sensor write failed
[  328.055981][ T7072] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110
[  328.802596][ T5912] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  328.952925][ T5912] usb 7-1: Using ep0 maxpacket: 32
[  328.959978][ T5912] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[  328.968383][ T5912] usb 7-1: config 0 has no interface number 0
[  328.977813][ T5912] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  328.987033][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.995083][ T5912] usb 7-1: Product: syz
[  328.999292][ T5912] usb 7-1: Manufacturer: syz
[  329.004035][ T5912] usb 7-1: SerialNumber: syz
[  329.010744][ T5912] usb 7-1: config 0 descriptor??
[  329.020001][ T5912] radio-si470x 7-1:0.35: could not find interrupt in endpoint
[  329.027781][ T5912] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5
[  329.219058][ T5912] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  329.426537][ T5912] radio-raremono 7-1:0.35: V4L2 device registered as radio48
[  329.631664][ T1780] usb 7-1: USB disconnect, device number 21
[  329.638118][ T1780] radio-raremono 7-1:0.35: Thanko's Raremono disconnected
[  333.047925][ T5231] udevd[5231]: worker [6446] /devices/virtual/block/nbd0 is taking a long time
[  334.855314][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  339.182772][   T56] block nbd0: Possible stuck request ffff8880258201c0: control (read@0,1024B). Runtime 150 seconds
[  339.193600][   T56] block nbd0: Possible stuck request ffff888025820380: control (read@1024,1024B). Runtime 150 seconds
[  339.204713][   T56] block nbd0: Possible stuck request ffff888025820540: control (read@2048,1024B). Runtime 150 seconds
[  339.215746][   T56] block nbd0: Possible stuck request ffff888025820700: control (read@3072,1024B). Runtime 150 seconds
[  342.535007][   T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  342.545479][   T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  342.554155][   T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  342.563752][   T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  342.571556][   T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  342.637947][ T5868] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.656521][ T5868] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.665093][ T5868] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.674519][ T5868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.682810][ T5868] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  342.865422][T10250] chnl_net:caif_netlink_parms(): no params data found
[  343.007940][T10250] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.016679][T10250] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.030598][T10250] bridge_slave_0: entered allmulticast mode
[  343.038748][T10250] bridge_slave_0: entered promiscuous mode
[  343.046692][T10250] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.054037][T10250] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.061400][T10250] bridge_slave_1: entered allmulticast mode
[  343.068895][T10250] bridge_slave_1: entered promiscuous mode
[  343.117982][T10250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.206993][T10250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.318073][T10250] team0: Port device team_slave_0 added
[  343.346621][T10250] team0: Port device team_slave_1 added
[  343.409926][T10252] chnl_net:caif_netlink_parms(): no params data found
[  343.437872][T10250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.451226][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.486530][T10250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.511318][T10250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.518769][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.554860][T10250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.594849][ T5874] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  343.611238][ T5874] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  343.620824][ T5874] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  343.630262][ T5874] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  343.638678][ T5874] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  343.720088][T10250] hsr_slave_0: entered promiscuous mode
[  343.727276][T10250] hsr_slave_1: entered promiscuous mode
[  343.734380][T10250] debugfs: 'hsr0' already exists in 'hsr'
[  343.740178][T10250] Cannot create hsr debugfs directory
[  343.821737][T10252] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.829403][T10252] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.837167][T10252] bridge_slave_0: entered allmulticast mode
[  343.845491][T10252] bridge_slave_0: entered promiscuous mode
[  343.854295][T10252] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.861464][T10252] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.868781][T10252] bridge_slave_1: entered allmulticast mode
[  343.876968][T10252] bridge_slave_1: entered promiscuous mode
[  343.964437][T10252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.981128][T10252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.081434][T10252] team0: Port device team_slave_0 added
[  344.092183][T10252] team0: Port device team_slave_1 added
[  344.179050][T10252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.186565][T10252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.214692][T10252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.252001][T10252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.262388][T10252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.288909][T10252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.411985][T10252] hsr_slave_0: entered promiscuous mode
[  344.418780][T10252] hsr_slave_1: entered promiscuous mode
[  344.426078][T10252] debugfs: 'hsr0' already exists in 'hsr'
[  344.431827][T10252] Cannot create hsr debugfs directory
[  344.585770][T10264] chnl_net:caif_netlink_parms(): no params data found
[  344.613222][ T5874] Bluetooth: hci6: command tx timeout
[  344.776816][T10264] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.785127][ T5874] Bluetooth: hci7: command tx timeout
[  344.790697][T10264] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.800219][T10264] bridge_slave_0: entered allmulticast mode
[  344.807927][T10264] bridge_slave_0: entered promiscuous mode
[  344.817320][T10264] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.824694][T10264] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.831901][T10264] bridge_slave_1: entered allmulticast mode
[  344.839469][T10264] bridge_slave_1: entered promiscuous mode
[  344.907130][T10264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.930223][T10264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.998415][T10264] team0: Port device team_slave_0 added
[  345.008461][T10264] team0: Port device team_slave_1 added
[  345.044917][T10264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.051899][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.077868][T10264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.091623][T10264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.099070][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.125726][T10264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.180651][T10264] hsr_slave_0: entered promiscuous mode
[  345.196610][T10264] hsr_slave_1: entered promiscuous mode
[  345.209885][T10264] debugfs: 'hsr0' already exists in 'hsr'
[  345.218493][T10264] Cannot create hsr debugfs directory
[  345.604879][   T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  345.615218][   T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  345.623759][   T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  345.645508][   T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  345.655782][   T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  345.742803][ T5874] Bluetooth: hci8: command tx timeout
[  345.860938][T10276] chnl_net:caif_netlink_parms(): no params data found
[  345.955958][T10276] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.963348][T10276] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.970836][T10276] bridge_slave_0: entered allmulticast mode
[  345.979261][T10276] bridge_slave_0: entered promiscuous mode
[  345.993620][T10276] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.000855][T10276] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.008226][T10276] bridge_slave_1: entered allmulticast mode
[  346.016737][T10276] bridge_slave_1: entered promiscuous mode
[  346.054234][T10276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.066659][T10276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.105147][T10276] team0: Port device team_slave_0 added
[  346.114108][T10276] team0: Port device team_slave_1 added
[  346.153766][T10276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.161016][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.187561][T10276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.201574][T10276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.208593][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.235771][T10276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.291908][T10276] hsr_slave_0: entered promiscuous mode
[  346.299444][T10276] hsr_slave_1: entered promiscuous mode
[  346.307534][T10276] debugfs: 'hsr0' already exists in 'hsr'
[  346.314202][T10276] Cannot create hsr debugfs directory
[  346.699331][ T5874] Bluetooth: hci6: command tx timeout
[  346.852938][ T5874] Bluetooth: hci7: command tx timeout
[  347.733090][ T5874] Bluetooth: hci9: command tx timeout
[  347.812957][ T5874] Bluetooth: hci8: command tx timeout
[  348.773646][ T5874] Bluetooth: hci6: command tx timeout
[  348.932697][ T5874] Bluetooth: hci7: command tx timeout
[  349.813035][ T5874] Bluetooth: hci9: command tx timeout
[  349.893020][ T5874] Bluetooth: hci8: command tx timeout
[  350.852819][ T5874] Bluetooth: hci6: command tx timeout
[  351.012635][ T5874] Bluetooth: hci7: command tx timeout
[  351.892749][ T5874] Bluetooth: hci9: command tx timeout
[  351.973075][ T5874] Bluetooth: hci8: command tx timeout
[  353.972773][ T5874] Bluetooth: hci9: command tx timeout
[  369.259776][   T56] block nbd0: Possible stuck request ffff8880258201c0: control (read@0,1024B). Runtime 180 seconds
[  369.270957][   T56] block nbd0: Possible stuck request ffff888025820380: control (read@1024,1024B). Runtime 180 seconds
[  369.282105][   T56] block nbd0: Possible stuck request ffff888025820540: control (read@2048,1024B). Runtime 180 seconds
[  369.293130][   T56] block nbd0: Possible stuck request ffff888025820700: control (read@3072,1024B). Runtime 180 seconds
[  371.117518][ T5231] udevd[5231]: worker [6446] /devices/virtual/block/nbd0 timeout; kill it
[  371.126341][ T5231] udevd[5231]: seq 13531 '/devices/virtual/block/nbd0' killed
[  378.856296][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.862848][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  399.335538][   T56] block nbd0: Possible stuck request ffff8880258201c0: control (read@0,1024B). Runtime 210 seconds
[  399.349083][   T56] block nbd0: Possible stuck request ffff888025820380: control (read@1024,1024B). Runtime 210 seconds
[  399.360128][   T56] block nbd0: Possible stuck request ffff888025820540: control (read@2048,1024B). Runtime 210 seconds
[  399.371200][   T56] block nbd0: Possible stuck request ffff888025820700: control (read@3072,1024B). Runtime 210 seconds
[  402.769058][   T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  402.778870][   T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  402.788545][   T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  402.798793][   T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  402.807482][   T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  402.822341][   T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  402.837145][   T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  402.848512][   T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  402.871628][   T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  402.880707][   T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  403.222323][T10459] chnl_net:caif_netlink_parms(): no params data found
[  403.377668][T10459] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.385696][T10459] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.402756][T10459] bridge_slave_0: entered allmulticast mode
[  403.410989][T10459] bridge_slave_0: entered promiscuous mode
[  403.436611][T10461] chnl_net:caif_netlink_parms(): no params data found
[  403.461098][T10459] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.481347][T10459] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.489490][T10459] bridge_slave_1: entered allmulticast mode
[  403.504959][T10459] bridge_slave_1: entered promiscuous mode
[  403.656448][T10459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.746975][T10459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.757166][   T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  403.773898][   T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  403.783504][   T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  403.796063][   T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  403.805947][   T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  403.877447][T10459] team0: Port device team_slave_0 added
[  403.885506][T10461] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.894670][T10461] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.901945][T10461] bridge_slave_0: entered allmulticast mode
[  403.910928][T10461] bridge_slave_0: entered promiscuous mode
[  403.920168][T10461] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.927591][T10461] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.935039][T10461] bridge_slave_1: entered allmulticast mode
[  403.943226][T10461] bridge_slave_1: entered promiscuous mode
[  403.952119][T10459] team0: Port device team_slave_1 added
[  404.045474][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.057163][T10459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.064989][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.091546][T10459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.104966][T10459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.111921][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.138293][T10459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.152087][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.237406][T10461] team0: Port device team_slave_0 added
[  404.269568][T10461] team0: Port device team_slave_1 added
[  404.281420][T10459] hsr_slave_0: entered promiscuous mode
[  404.289279][T10459] hsr_slave_1: entered promiscuous mode
[  404.297352][T10459] debugfs: 'hsr0' already exists in 'hsr'
[  404.303280][T10459] Cannot create hsr debugfs directory
[  404.374294][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.381283][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.407638][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.428476][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.435858][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.464854][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.605112][T10461] hsr_slave_0: entered promiscuous mode
[  404.611989][T10461] hsr_slave_1: entered promiscuous mode
[  404.627424][T10461] debugfs: 'hsr0' already exists in 'hsr'
[  404.633272][T10461] Cannot create hsr debugfs directory
[  404.852958][ T5874] Bluetooth: hci10: command tx timeout
[  404.933374][ T5874] Bluetooth: hci11: command tx timeout
[  404.994120][T10476] chnl_net:caif_netlink_parms(): no params data found
[  405.146220][T10476] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.153523][T10476] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.160808][T10476] bridge_slave_0: entered allmulticast mode
[  405.173735][T10476] bridge_slave_0: entered promiscuous mode
[  405.185232][T10476] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.192843][T10476] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.200258][T10476] bridge_slave_1: entered allmulticast mode
[  405.209650][T10476] bridge_slave_1: entered promiscuous mode
[  405.292151][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.306229][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.378399][T10476] team0: Port device team_slave_0 added
[  405.387996][T10476] team0: Port device team_slave_1 added
[  405.481426][T10476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.492763][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.539959][T10476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.597710][T10476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.614568][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.641559][T10476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.811395][T10476] hsr_slave_0: entered promiscuous mode
[  405.822250][T10476] hsr_slave_1: entered promiscuous mode
[  405.839694][   T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  405.840344][T10476] debugfs: 'hsr0' already exists in 'hsr'
[  405.853498][T10476] Cannot create hsr debugfs directory
[  405.855154][   T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  405.879259][   T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  405.890027][   T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  405.902751][ T5181] Bluetooth: hci12: command tx timeout
[  405.910495][   T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  406.430896][T10485] chnl_net:caif_netlink_parms(): no params data found
[  406.579314][T10485] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.586836][T10485] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.595768][T10485] bridge_slave_0: entered allmulticast mode
[  406.604012][T10485] bridge_slave_0: entered promiscuous mode
[  406.615268][T10485] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.622625][T10485] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.629934][T10485] bridge_slave_1: entered allmulticast mode
[  406.638397][T10485] bridge_slave_1: entered promiscuous mode
[  406.700189][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.726927][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.810079][T10485] team0: Port device team_slave_0 added
[  406.819756][T10485] team0: Port device team_slave_1 added
[  406.861108][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.868324][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.896138][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.911675][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.919046][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.945855][   T52] Bluetooth: hci10: command tx timeout
[  406.946426][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.014470][T10485] hsr_slave_0: entered promiscuous mode
[  407.014504][   T52] Bluetooth: hci11: command tx timeout
[  407.021665][T10485] hsr_slave_1: entered promiscuous mode
[  407.033134][T10485] debugfs: 'hsr0' already exists in 'hsr'
[  407.038899][T10485] Cannot create hsr debugfs directory
[  407.972996][ T5874] Bluetooth: hci12: command tx timeout
[  407.978608][   T52] Bluetooth: hci13: command tx timeout
[  409.012596][   T52] Bluetooth: hci10: command tx timeout
[  409.093121][   T52] Bluetooth: hci11: command tx timeout
[  410.052886][   T52] Bluetooth: hci12: command tx timeout
[  410.062959][   T52] Bluetooth: hci13: command tx timeout
[  411.092652][   T52] Bluetooth: hci10: command tx timeout
[  411.173091][   T52] Bluetooth: hci11: command tx timeout
[  412.132961][ T5874] Bluetooth: hci12: command tx timeout
[  412.138634][   T52] Bluetooth: hci13: command tx timeout
[  414.212662][   T52] Bluetooth: hci13: command tx timeout
[  416.772579][ T5874] Bluetooth: hci5: command 0x0406 tx timeout
[  429.412924][   T56] block nbd0: Possible stuck request ffff8880258201c0: control (read@0,1024B). Runtime 240 seconds
[  429.424033][   T56] block nbd0: Possible stuck request ffff888025820380: control (read@1024,1024B). Runtime 240 seconds
[  429.435456][   T56] block nbd0: Possible stuck request ffff888025820540: control (read@2048,1024B). Runtime 240 seconds
[  429.446583][   T56] block nbd0: Possible stuck request ffff888025820700: control (read@3072,1024B). Runtime 240 seconds
[  431.333031][   T31] INFO: task syz.1.1000:9387 blocked for more than 143 seconds.
[  431.340739][   T31]       Not tainted syzkaller #0
[  431.347049][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  431.356005][   T31] task:syz.1.1000      state:D stack:25192 pid:9387  tgid:9385  ppid:5861   task_flags:0x400140 flags:0x00004004
[  431.368345][   T31] Call Trace:
[  431.371744][   T31]  <TASK>
[  431.374771][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  431.379336][   T31]  ? __lock_acquire+0xab9/0xd20
[  431.384299][   T31]  ? __lock_acquire+0xab9/0xd20
[  431.389201][   T31]  ? __pfx___schedule+0x10/0x10
[  431.394250][   T31]  ? schedule+0x91/0x360
[  431.398628][   T31]  schedule+0x165/0x360
[  431.403201][   T31]  schedule_preempt_disabled+0x13/0x30
[  431.409033][   T31]  __mutex_lock+0x7e6/0x1350
[  431.414143][   T31]  ? __mutex_lock+0x5bb/0x1350
[  431.418967][   T31]  ? sync_bdevs+0x1ac/0x340
[  431.425209][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  431.430390][   T31]  ? iput+0x5d5/0xc40
[  431.434958][   T31]  sync_bdevs+0x1ac/0x340
[  431.439331][   T31]  ksys_sync+0xb9/0x150
[  431.443947][   T31]  ? __pfx_ksys_sync+0x10/0x10
[  431.448748][   T31]  ? do_syscall_64+0xbe/0xfa0
[  431.453950][   T31]  __ia32_sys_sync+0xe/0x20
[  431.458845][   T31]  do_syscall_64+0xfa/0xfa0
[  431.463878][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.470058][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  431.477733][   T31]  ? clear_bhb_loop+0x60/0xb0
[  431.482707][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.488632][   T31] RIP: 0033:0x7fc9aaf8eba9
[  431.495787][   T31] RSP: 002b:00007fc9abde0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  431.525144][   T31] RAX: ffffffffffffffda RBX: 00007fc9ab1d6090 RCX: 00007fc9aaf8eba9
[  431.552458][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  431.560494][   T31] RBP: 00007fc9ab1d6090 R08: 0000000000000000 R09: 0000000000000000
[  431.591518][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.602093][   T31] R13: 00007fc9ab1d6128 R14: 00007fc9ab1d6090 R15: 00007fff9ea73088
[  431.610142][   T31]  </TASK>
[  431.613359][   T31] 
[  431.613359][   T31] Showing all locks held in the system:
[  431.621177][   T31] 1 lock held by khungtaskd/31:
[  431.626136][   T31]  #0: ffffffff8e53c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  431.641118][   T31] 2 locks held by getty/5624:
[  431.645908][   T31]  #0: ffff88803369b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  431.655998][   T31]  #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  431.666249][   T31] 1 lock held by udevd/6446:
[  431.670864][   T31]  #0: ffff8881437cb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  431.680355][   T31] 1 lock held by syz.1.1000/9387:
[  431.685601][   T31]  #0: ffff8881437cb358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  431.695171][   T31] 6 locks held by syz.0.1217/10178:
[  431.700410][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.708744][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.717946][   T31]  #2: ffff88802531f270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50
[  431.728427][   T31]  #3: ffff88802526df58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  431.738088][   T31]  #4: ffff88802526d8f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  431.750314][   T31]  #5: ffff88802526d930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  431.763960][   T31] 2 locks held by syz.5.1218/10187:
[  431.769188][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.777539][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.786635][   T31] 2 locks held by syz.2.1220/10207:
[  431.791853][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.800117][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.809191][   T31] 2 locks held by syz.2.1220/10208:
[  431.821587][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.829917][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.838980][   T31] 2 locks held by syz.6.1224/10246:
[  431.844272][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.852665][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.861687][   T31] 2 locks held by syz-executor/10250:
[  431.867139][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.875483][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.884591][   T31] 2 locks held by syz-executor/10252:
[  431.890122][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.898496][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.907641][   T31] 2 locks held by syz-executor/10264:
[  431.913110][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.921358][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.930440][   T31] 2 locks held by syz-executor/10276:
[  431.935973][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.944253][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.953344][   T31] 2 locks held by syz-executor/10459:
[  431.958733][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.967043][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.976270][   T31] 2 locks held by syz-executor/10461:
[  431.981813][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  431.990224][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  431.999363][   T31] 2 locks held by syz-executor/10476:
[  432.005043][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  432.013636][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  432.022947][   T31] 2 locks held by syz-executor/10485:
[  432.028365][   T31]  #0: ffffffff8f9ba850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  432.036942][   T31]  #1: ffffffff8f9ba668 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  432.046088][   T31] 
[  432.048428][   T31] =============================================
[  432.048428][   T31] 
[  432.057190][   T31] NMI backtrace for cpu 0
[  432.057209][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  432.057231][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  432.057244][   T31] Call Trace:
[  432.057252][   T31]  <TASK>
[  432.057261][   T31]  dump_stack_lvl+0x189/0x250
[  432.057290][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.057310][   T31]  ? __pfx__printk+0x10/0x10
[  432.057361][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  432.057395][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  432.057428][   T31]  ? __pfx__printk+0x10/0x10
[  432.057460][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  432.057487][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  432.057520][   T31]  watchdog+0xf60/0xfa0
[  432.057548][   T31]  ? watchdog+0x1e2/0xfa0
[  432.057575][   T31]  kthread+0x711/0x8a0
[  432.057607][   T31]  ? __pfx_watchdog+0x10/0x10
[  432.057627][   T31]  ? __pfx_kthread+0x10/0x10
[  432.057658][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  432.057679][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.057700][   T31]  ? __pfx_kthread+0x10/0x10
[  432.057728][   T31]  ret_from_fork+0x4bc/0x870
[  432.057755][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  432.057787][   T31]  ? __switch_to_asm+0x39/0x70
[  432.057806][   T31]  ? __switch_to_asm+0x33/0x70
[  432.057825][   T31]  ? __pfx_kthread+0x10/0x10
[  432.057855][   T31]  ret_from_fork_asm+0x1a/0x30
[  432.057894][   T31]  </TASK>
[  432.057902][   T31] Sending NMI from CPU 0 to CPUs 1:
[  432.204522][    C1] NMI backtrace for cpu 1
[  432.204540][    C1] CPU: 1 UID: 0 PID: 6988 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  432.204559][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  432.204569][    C1] Workqueue: bat_events batadv_nc_worker
[  432.204591][    C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x6b/0x2a0
[  432.204612][    C1] Code: 11 85 c0 0f 85 7c 01 00 00 65 8b 05 27 38 4a 11 85 c0 0f 85 6d 01 00 00 83 3d 60 4e 55 18 00 75 3e 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 0f 85 8c 01 00 00 83 3d 3e 4e 55 18
[  432.204625][    C1] RSP: 0018:ffffc9000acd7878 EFLAGS: 00000046
[  432.204638][    C1] RAX: 0000000000000000 RBX: 0000000000000201 RCX: b24e25eb9a255200
[  432.204650][    C1] RDX: 0000000000000000 RSI: ffffffff8c0503e0 RDI: ffffffff8c0503a0
[  432.204661][    C1] RBP: ffffc9000acd7958 R08: ffffffff8fe53a37 R09: 1ffffffff1fca746
[  432.204672][    C1] R10: dffffc0000000000 R11: fffffbfff1fca747 R12: ffffffff8b5990e8
[  432.204683][    C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff9200159af18
[  432.204695][    C1] FS:  0000000000000000(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000
[  432.204708][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  432.204719][    C1] CR2: 000055d334c41498 CR3: 000000000e338000 CR4: 00000000003526f0
[  432.204735][    C1] DR0: 0000000000000006 DR1: 0000000000000001 DR2: 0000000000000098
[  432.204744][    C1] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  432.204755][    C1] Call Trace:
[  432.204761][    C1]  <TASK>
[  432.204770][    C1]  ? batadv_nc_purge_paths+0x318/0x3b0
[  432.204786][    C1]  trace_hardirqs_on+0x28/0x40
[  432.204802][    C1]  __local_bh_enable_ip+0x12d/0x1c0
[  432.204821][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  432.204840][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  432.204863][    C1]  ? batadv_nc_purge_paths+0x318/0x3b0
[  432.204878][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10
[  432.204896][    C1]  batadv_nc_purge_paths+0x318/0x3b0
[  432.204917][    C1]  batadv_nc_worker+0x369/0x610
[  432.204932][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  432.204952][    C1]  process_scheduled_works+0xae1/0x17b0
[  432.204980][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  432.205004][    C1]  worker_thread+0x8a0/0xda0
[  432.205023][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  432.205044][    C1]  ? __kthread_parkme+0x7b/0x200
[  432.205067][    C1]  kthread+0x711/0x8a0
[  432.205089][    C1]  ? __pfx_worker_thread+0x10/0x10
[  432.205106][    C1]  ? __pfx_kthread+0x10/0x10
[  432.205128][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  432.205144][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.205160][    C1]  ? __pfx_kthread+0x10/0x10
[  432.205181][    C1]  ret_from_fork+0x4bc/0x870
[  432.205200][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  432.205220][    C1]  ? __switch_to_asm+0x39/0x70
[  432.205235][    C1]  ? __switch_to_asm+0x33/0x70
[  432.205250][    C1]  ? __pfx_kthread+0x10/0x10
[  432.205271][    C1]  ret_from_fork_asm+0x1a/0x30
[  432.205294][    C1]  </TASK>
[  432.205582][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  432.502720][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  432.511841][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  432.521899][   T31] Call Trace:
[  432.525183][   T31]  <TASK>
[  432.528125][   T31]  dump_stack_lvl+0x99/0x250
[  432.532720][   T31]  ? __asan_memcpy+0x40/0x70
[  432.537322][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.542526][   T31]  ? __pfx__printk+0x10/0x10
[  432.547146][   T31]  vpanic+0x237/0x6d0
[  432.551135][   T31]  ? __pfx_vpanic+0x10/0x10
[  432.555649][   T31]  ? preempt_schedule_common+0x83/0xd0
[  432.561119][   T31]  panic+0xb9/0xc0
[  432.564857][   T31]  ? __pfx_panic+0x10/0x10
[  432.569281][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  432.574669][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  432.580838][   T31]  watchdog+0xf9f/0xfa0
[  432.585011][   T31]  ? watchdog+0x1e2/0xfa0
[  432.589352][   T31]  kthread+0x711/0x8a0
[  432.593523][   T31]  ? __pfx_watchdog+0x10/0x10
[  432.598301][   T31]  ? __pfx_kthread+0x10/0x10
[  432.602909][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  432.608116][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.613321][   T31]  ? __pfx_kthread+0x10/0x10
[  432.618100][   T31]  ret_from_fork+0x4bc/0x870
[  432.622709][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  432.627831][   T31]  ? __switch_to_asm+0x39/0x70
[  432.632596][   T31]  ? __switch_to_asm+0x33/0x70
[  432.637363][   T31]  ? __pfx_kthread+0x10/0x10
[  432.641967][   T31]  ret_from_fork_asm+0x1a/0x30
[  432.646842][   T31]  </TASK>
[  432.650268][   T31] Kernel Offset: disabled
[  432.654600][   T31] Rebooting in 86400 seconds..