last executing test programs:

2m40.633954956s ago: executing program 2 (id=1117):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0x204, 0x30, 0x1, 0x0, 0x0, {}, [{0x1f0, 0x1, [@m_mpls={0xb0, 0x12, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x104, 0x1, 0x4, 0x800}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x40ac3}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1b}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8d6fe}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4190, 0x4, 0x0, 0x5, 0x9}, 0x1}}]}, {0x21, 0x6, "b7be011f6fa20bd828b0ce94cd3b348d959afe54cec3b7e312b7308338"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x13c, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x200, 0x1, 0x3, 0x40}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffffe00, 0x7, 0x9ea0, 0xaa}, 0x2}}]}, {0xd0, 0x6, "6095349c4967caf792a9e99d4af275ab47f3edb166597d3e04246d543240ee62e682e0a24940d5823dbf99fbafb8d4e7f21a3d9db706066dcb797917b907cc0445ce3a1ac7ed54dba2b4b266a6726a137b57d10971a73cfc4e38ba2b9dabc7fa29dc15e70f2b73195a217a1178ea52d0c17a786127a987f99c18edd1c8f4f26481b65648529de782253d32c98b42271c9dd23abf48e06586a6bd69b07480c5a1d4342d24b68ad54a3fbfa6775ee94d7e431388e2f65b8787de7b9dcbaa5446d250090f12e64b30eb9df252e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd06, &(0x7f0000000540)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c")
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)
r6 = dup(0xffffffffffffffff)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={&(0x7f0000001b80)=[{0x8, 0x5410, 0x0, 0x0}], 0x1})
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000914230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)

2m37.943673662s ago: executing program 2 (id=1123):
io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0xcd80, 0x40, 0xfffffffe, 0xf0})
r0 = getpid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
alarm(0x5)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="210329bd7000fbdb05000100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x9}], 0x5, 0x20, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000000)=""/54, 0xfdb6}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x101a02, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)

2m37.083650743s ago: executing program 2 (id=1124):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x19}})
io_submit(0x0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x0}])
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
setxattr(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x5, 0x1)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')

2m37.08303719s ago: executing program 2 (id=1125):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x2000, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff)

2m35.841052092s ago: executing program 2 (id=1129):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x19}})
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./config\x00', &(0x7f0000000340)=@isofs_parent={0x14, 0x2, {0x0, 0x3, 0xdd1, 0x2, 0x9, 0x1}}, &(0x7f0000000380), 0x600)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff)
io_setup(0x81, &(0x7f0000001440)=<r1=>0x0)
r2 = syz_io_uring_setup(0x3e8a, &(0x7f00000000c0)={0x0, 0x1b12, 0x1, 0x3, 0x1bc}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000180))
pivot_root(&(0x7f00000001c0)='proc\x00', &(0x7f0000000200)='proc\x00')
io_submit(r1, 0x1, &(0x7f00000015c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9, r2, 0x0}])
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, 0x0, 0x30, 0x0, @val=@netfilter={0x3, 0x1, 0xdf03, 0x1}}, 0x20)
r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807feff00050000000000000005000900", 0x20)
close_range(r4, r4, 0x0)
r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x40016)
setxattr(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x5, 0x1)
r8 = syz_open_dev$amidi(0x0, 0x2, 0x181)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0xc0305720, &(0x7f0000000000))
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800})

2m35.539327039s ago: executing program 2 (id=1131):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
pipe2(&(0x7f0000001440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r4, 0x0, r4, 0x0, 0x6, 0x8)
read$watch_queue(r2, &(0x7f0000000780)=""/221, 0xfdef)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)
add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='b', 0x1, r1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4400, 0x4, 0x10}, 0x18)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))

2m20.238429173s ago: executing program 32 (id=1131):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
pipe2(&(0x7f0000001440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r4, 0x0, r4, 0x0, 0x6, 0x8)
read$watch_queue(r2, &(0x7f0000000780)=""/221, 0xfdef)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)
add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='b', 0x1, r1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4400, 0x4, 0x10}, 0x18)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))

55.894109119s ago: executing program 4 (id=1671):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x80, 0x3, 0x393}, &(0x7f0000000000), 0x0, &(0x7f0000000140))
capset(&(0x7f0000019180)={0x19980330}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000000)='ntfs\x00', 0x10, &(0x7f0000000980)='norecovery')
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x200)
socket$netlink(0x10, 0x3, 0x400000000000004)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000190c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x8)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x529a00, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)

54.923841628s ago: executing program 4 (id=1676):
setxattr$security_ima(&(0x7f0000000040)='./sys\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x2, "bbb1dabcd170ea"}, 0x8, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199f"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000006080)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x10, 0x39, 0x3, 0x7, 0x7, 0x2, 0x4232, 0x8000, [{0x0, 0xb, 0xef, 0x8}, {0x1000, 0x3, 0x3, 0xb5}, {0x1, 0x0, 0x1, 0x4eb3f7c}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000c044)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
setns(0xc9, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x1}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
mount$9p_fd(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000180), 0x2000098, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r9, @ANYBLOB="0000a947ff65cd4a93b59cc3b6e63e4fae0721964e87ccd31e1fcc70", @ANYRES16=r9, @ANYBLOB=',\x00'])
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001880)={r9, "28e53727eacc5d7a86a47bf6e8c6a26a"})

54.775771319s ago: executing program 4 (id=1677):
setxattr$security_ima(&(0x7f0000000040)='./sys\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x2, "bbb1dabcd170ea"}, 0x8, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199f"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000006080)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x10, 0x39, 0x3, 0x7, 0x7, 0x2, 0x4232, 0x8000, [{0x0, 0xb, 0xef, 0x8}, {0x1000, 0x3, 0x3, 0xb5}, {0x1, 0x0, 0x1, 0x4eb3f7c}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000c044)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
setns(0xc9, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x1}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
mount$9p_fd(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000180), 0x2000098, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r9, @ANYBLOB="0000a947ff65cd4a93b59cc3b6e63e4fae0721964e87ccd31e1fcc70", @ANYRES16=r9, @ANYBLOB=',\x00'])
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001880)={r9, "28e53727eacc5d7a86a47bf6e8c6a26a"})

54.703958865s ago: executing program 4 (id=1678):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080000e1b6040000010000008500000033000000850000002a0000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0x20c01, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x200c1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x4c}}, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x4)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./dev/cpu_dma_latency\x00', &(0x7f00000001c0), &(0x7f0000000280), 0x2, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x129000)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000000000207, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x4f287000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1d, 0x0, 0x1}, {0x9c}, {0x3, 0xfd, 0x40}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x5, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000886}, 0x4c044)
r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb)
ioctl$KVM_SET_TSC_KHZ_vm(r11, 0xaea2, 0xfffffffd)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)

54.592132606s ago: executing program 4 (id=1681):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 3)

54.305653204s ago: executing program 4 (id=1684):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xc5, &(0x7f00000001c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8f, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, {[], {0x3, 0xe22, 0x8f, 0x0, @wg=@data={0x4, 0x1, 0x8, "ab361951eb2bdba3d45491c41a483684b3c322786014b3697056a5119202ee7d68fee3dc729e1187ebc3422ab0fee4a9a489e3575c9fd0c738f8957ed288c888b90a95909dbb0a5ba5dc4685eedb0a3807008ad27dfc6152c0dce9b7ea6532a9b86e2095878892b6925784f09504a693bf267bf01fd37a"}}}}}}}, 0x0)

54.250252997s ago: executing program 33 (id=1684):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xc5, &(0x7f00000001c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8f, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, {[], {0x3, 0xe22, 0x8f, 0x0, @wg=@data={0x4, 0x1, 0x8, "ab361951eb2bdba3d45491c41a483684b3c322786014b3697056a5119202ee7d68fee3dc729e1187ebc3422ab0fee4a9a489e3575c9fd0c738f8957ed288c888b90a95909dbb0a5ba5dc4685eedb0a3807008ad27dfc6152c0dce9b7ea6532a9b86e2095878892b6925784f09504a693bf267bf01fd37a"}}}}}}}, 0x0)

4.515454744s ago: executing program 5 (id=2000):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$ndctl0(0xffffff9c, &(0x7f0000000240), 0x12002, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_io_uring_setup(0x31cc, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)

3.696076304s ago: executing program 1 (id=2005):
r0 = openat(0xffffffffffffff9c, 0x0, 0x4801, 0x4)
write(r0, &(0x7f0000000180)='0', 0x1)
write(0xffffffffffffffff, &(0x7f0000000500)='r:s/p ./file0:', 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@generic={0x3, 0x7, 0xf, 0xf, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r2, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)

3.632388318s ago: executing program 1 (id=2006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a0106"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) (fail_nth: 5)

3.631919959s ago: executing program 5 (id=2007):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x100, 0xfffffffd, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000001, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd25, 0x70bd25, 0x70bd27, 0x8, [0x9]}}]}, 0x154}}, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000180)={0x2, 0xd}, 0x0)

3.4356303s ago: executing program 1 (id=2008):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62)
write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}})

3.435354794s ago: executing program 5 (id=2009):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7})
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

2.815760551s ago: executing program 3 (id=2011):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0xc6, &(0x7f0000000840)=""/198}, &(0x7f0000000280)="1201b9048020", 0x0, 0x0, 0x4, 0xffffffff, 0x0})
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\x02\x00\x00\x00G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\xafON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x19\xdd(5\xea0\x01,D\xf2\xa3\x85Q\x1f@\xdej\x88\xc8\x17\xc4<Y\xde\xf6v\x8f\x92\xd0XH\x12\x04\xf3\xd0-T\xcat\xf7\x85\xaa\x8fXT\xa1\xeb\xfd\xaf9\xca;\x85\x8b^\x8b\xa4\x89\xc7\x9c\x12\x91\xf9i\x02Q1D\xc2\xf5\x1c\x94\x1a\xcf\x80W\x84\x96,\x8fG\xacy?\xea$\xb2Ia\xce\x94\xf2Cm\x86\xb1qh8\xde\xe4\xe3\x80\xabM\xe9\x14|\xc1\xbb\xc14Dq\x1f\xf4\x88\xe7V\xe0\xa1Hb\xd94v&H\xd5j\x02~-\xed\r\xfc\xb4\r\x00\xe9\xe3\x92U\xe7\x8f\xcc\xe4HJ18R\xee\xc5\x85*\xcf\xcbh}&\xe2\xc5[\xbbY\xca\x17-\x04\x95\xa3\xc5(\x9c\xdaZ\x0f', 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='T', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x5, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d746916f31c07b84819e7df4af14e1df82d", [0x6, 0x6]})
write$char_usb(r0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100))
close(0x3)
close(0xffffffffffffffff)
r5 = socket(0x1a, 0x5, 0x0)
close(r5)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0)
fcntl$getown(r3, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x80, 0x0)
accept4$inet(r3, 0x0, 0x0, 0x800)
syz_open_dev$admmidi(&(0x7f0000003340), 0x1, 0x285900)
map_shadow_stack(&(0x7f0000108000/0x2000)=nil, 0xffffffffffffffc2, 0x1)

2.555604047s ago: executing program 1 (id=2012):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00')
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
r2 = socket(0x2d, 0x2, 0x0)
read(r2, &(0x7f0000000240)=""/77, 0x4d)
r3 = socket(0x40000000015, 0x5, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@delqdisc={0x100, 0x25, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xe, 0xc}, {0xb, 0x1}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd2}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001d0000012abd7000fcdbdf250a000000", @ANYRES32, @ANYBLOB="01000006ac14142114000100fc02000000000000000000000000000100000000"], 0x38}, 0x1, 0x0, 0x0, 0x8d2c0f0760922ef9}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
mq_getsetattr(r0, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x2}, &(0x7f0000000480))
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000028c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002680)=ANY=[@ANYBLOB="51a7ab7d", @ANYRES16=0x0, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000002380)=[0x0], 0x1})
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d00)="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"/831, 0x33f}], 0x1}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000002900)=ANY=[@ANYBLOB="580000002d00000425bd7000fcdbdf2519000000f32eb69c2661d19542783bb4e88d3a3e5af10b63331454257bb7fa189e727b5fb33420b21dd2d9a1be2fc1787d01a5e9e5b7c54aabe0bd55a20d10c84ae35446fe0000001aaaad4ee429b77de39cd90be7fe87bd1663d69601292ae77c9dd6c9c969b022d1e2dce0e807859ae4a3f37fd698eb28284675929b560c38db3111c5655660f68d13cd5c8014f6f8e76abb88e21a36c1ff94803f32373314aa9205d970b556589038ac3c14b3d542de364b00a215e3c3b3e817c150565df02d8a26f43ee0f77052e09445de256076a2957e72163e08a900c707f07be7e96fe654d3440ecd80dd586b8d64d628ee49c3a8bcd9f286cbd1bf6ec3a10e1bddf9a49f8d9e7a04f7414577cf2d20874aeef2e551bebbe2fc863eec87d54e781fcd7b5c27d43b2a619cc4f35078a6af158bbfa8e10f9e4aba8a4452c2af300bd46d5844bafe30492ad08687a43de126cce8f3966f95a0f460c350bc63899f02642fe0a60b630bff7939466065173d001ef9af45a80bc391878421280538960562f8a927c1ef74d7dfc0caa781c98c7e4190"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x200400c0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)

2.507832527s ago: executing program 5 (id=2013):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = dup(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7})
syz_clone3(0x0, 0x0)
mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
getdents64(r5, 0x0, 0x4f)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

2.499525117s ago: executing program 0 (id=2014):
r0 = openat(0xffffffffffffff9c, 0x0, 0x4801, 0x4)
write(r0, &(0x7f0000000180)='0', 0x1)
write(0xffffffffffffffff, &(0x7f0000000500)='r:s/p ./file0:', 0xe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r2, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)

2.425941713s ago: executing program 0 (id=2015):
madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x65)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1000002)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000cc0)=0xc68e85d, 0x4)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00')
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

2.165144553s ago: executing program 0 (id=2016):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', 0x0})
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./config\x00', &(0x7f0000000340)=@isofs_parent={0x14, 0x2, {0x0, 0x3, 0xdd1, 0x2, 0x9, 0x1}}, &(0x7f0000000380), 0x600)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
io_setup(0x81, &(0x7f0000001440)=<r1=>0x0)
syz_io_uring_setup(0x3e8a, &(0x7f00000000c0)={0x0, 0x1b12, 0x1, 0x3, 0x1bc}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000180))
pivot_root(&(0x7f00000001c0)='proc\x00', &(0x7f0000000200)='proc\x00')
io_submit(r1, 0x1, &(0x7f00000015c0)=[0x0])
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x30, 0x0, @val=@netfilter={0x3, 0x1, 0xdf03, 0x1}}, 0x20)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807feff00050000000000000005000900", 0x20)
close_range(r3, r3, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x40016)
setxattr(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x5, 0x1)
r7 = syz_open_dev$amidi(0x0, 0x2, 0x181)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0305720, &(0x7f0000000000))
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800})

1.9150627s ago: executing program 3 (id=2017):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0x1, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x1, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x200)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1e0)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x100, 0x20002, 0x16c}, &(0x7f00000000c0)=<r4=>0x0, 0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x3, 0xe9f, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x167a4c006c2ec9ca}}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xc8)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r7 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x2000012, 0x13b, 0x0, &(0x7f0000000500)="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", 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x4c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
socket$nl_generic(0x10, 0x3, 0x10)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
close(r6)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xe, 0x2, 0x6, @mcast2, @mcast1, 0x20, 0x20, 0x2, 0x9}})
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a0000040900010073797a430ddfc56e8d4b009672cdc626310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000114000000340001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.82570932s ago: executing program 0 (id=2018):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0xc6, &(0x7f0000000840)=""/198}, &(0x7f0000000280)="1201b9048020", 0x0, 0x0, 0x4, 0xffffffff, 0x0})
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\x02\x00\x00\x00G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\xafON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x19\xdd(5\xea0\x01,D\xf2\xa3\x85Q\x1f@\xdej\x88\xc8\x17\xc4<Y\xde\xf6v\x8f\x92\xd0XH\x12\x04\xf3\xd0-T\xcat\xf7\x85\xaa\x8fXT\xa1\xeb\xfd\xaf9\xca;\x85\x8b^\x8b\xa4\x89\xc7\x9c\x12\x91\xf9i\x02Q1D\xc2\xf5\x1c\x94\x1a\xcf\x80W\x84\x96,\x8fG\xacy?\xea$\xb2Ia\xce\x94\xf2Cm\x86\xb1qh8\xde\xe4\xe3\x80\xabM\xe9\x14|\xc1\xbb\xc14Dq\x1f\xf4\x88\xe7V\xe0\xa1Hb\xd94v&H\xd5j\x02~-\xed\r\xfc\xb4\r\x00\xe9\xe3\x92U\xe7\x8f\xcc\xe4HJ18R\xee\xc5\x85*\xcf\xcbh}&\xe2\xc5[\xbbY\xca\x17-\x04\x95\xa3\xc5(\x9c\xdaZ\x0f', 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='T', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x5, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d746916f31c07b84819e7df4af14e1df82d", [0x6, 0x6]})
write$char_usb(r0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100))
close(0x3)
close(0xffffffffffffffff)
r5 = socket(0x1a, 0x5, 0x0)
close(r5)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0)
fcntl$getown(r3, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x80, 0x0)
accept4$inet(r3, 0x0, 0x0, 0x800)
syz_open_dev$admmidi(&(0x7f0000003340), 0x1, 0x285900)
map_shadow_stack(&(0x7f0000108000/0x2000)=nil, 0xffffffffffffffc2, 0x1)

1.50566515s ago: executing program 5 (id=2019):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close(0xffffffffffffffff)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x10, 0x0, 0x39555659, 0x1, 0x9, [{0x3, 0x8001}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0xff}, {0x9, 0x80000000}, {0x80000001, 0x80000000}, {0x4, 0x8000}, {0x80000001}], 0xff, 0xe2, 0x8, 0x2}}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x10, 0x0, 0x39555659, 0x1, 0x9, [{0x3, 0x8001}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0xff}, {0x9, 0x80000000}, {0x80000001, 0x80000000}, {0x4, 0x8000}, {0x80000001}], 0xff, 0xe2, 0x8, 0x2}})
socket$inet_sctp(0x2, 0x1, 0x84)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_hsr\x00'}}, 0x1e) (async)
connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_hsr\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x0, @local, 'veth0_to_bridge\x00'}}, 0x1e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x54}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x17, 0xa000000}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)

1.274522238s ago: executing program 5 (id=2020):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0x204, 0x30, 0x1, 0x0, 0x0, {}, [{0x1f0, 0x1, [@m_mpls={0xb0, 0x12, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x104, 0x1, 0x4, 0x800}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x40ac3}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1b}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8d6fe}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4190, 0x4, 0x0, 0x5, 0x9}, 0x1}}]}, {0x21, 0x6, "b7be011f6fa20bd828b0ce94cd3b348d959afe54cec3b7e312b7308338"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x13c, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x200, 0x1, 0x3, 0x40}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffffe00, 0x7, 0x9ea0, 0xaa}, 0x2}}]}, {0xd0, 0x6, "6095349c4967caf792a9e99d4af275ab47f3edb166597d3e04246d543240ee62e682e0a24940d5823dbf99fbafb8d4e7f21a3d9db706066dcb797917b907cc0445ce3a1ac7ed54dba2b4b266a6726a137b57d10971a73cfc4e38ba2b9dabc7fa29dc15e70f2b73195a217a1178ea52d0c17a786127a987f99c18edd1c8f4f26481b65648529de782253d32c98b42271c9dd23abf48e06586a6bd69b07480c5a1d4342d24b68ad54a3fbfa6775ee94d7e431388e2f65b8787de7b9dcbaa5446d250090f12e64b30eb9df252e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r4, 0xc138fd06, &(0x7f0000000540)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c")
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)
r5 = dup(0xffffffffffffffff)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000040)={&(0x7f0000001b80)=[{0x8, 0x5410, 0x0, 0x0}], 0x1})
setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000914230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)

1.274087196s ago: executing program 1 (id=2021):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7})
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

645.75459ms ago: executing program 0 (id=2022):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)
sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0x1f, 0x4e24, 0x10, @mcast2}, 0x1c)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
read$midi(r6, &(0x7f00000001c0)=""/70, 0xffffffd8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

565.04713ms ago: executing program 3 (id=2023):
r0 = openat(0xffffffffffffff9c, 0x0, 0x4801, 0x4)
write(r0, &(0x7f0000000180)='0', 0x1)
write(0xffffffffffffffff, &(0x7f0000000500)='r:s/p ./file0:', 0xe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r2, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)

485.94824ms ago: executing program 3 (id=2024):
madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x65)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1000002)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000cc0)=0xc68e85d, 0x4)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
prlimit64(0x0, 0xe, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00')
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

426.045862ms ago: executing program 1 (id=2025):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0xc6, &(0x7f0000000840)=""/198}, &(0x7f0000000280)="1201b9048020", 0x0, 0x0, 0x4, 0xffffffff, 0x0})
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\x02\x00\x00\x00G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\xafON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x19\xdd(5\xea0\x01,D\xf2\xa3\x85Q\x1f@\xdej\x88\xc8\x17\xc4<Y\xde\xf6v\x8f\x92\xd0XH\x12\x04\xf3\xd0-T\xcat\xf7\x85\xaa\x8fXT\xa1\xeb\xfd\xaf9\xca;\x85\x8b^\x8b\xa4\x89\xc7\x9c\x12\x91\xf9i\x02Q1D\xc2\xf5\x1c\x94\x1a\xcf\x80W\x84\x96,\x8fG\xacy?\xea$\xb2Ia\xce\x94\xf2Cm\x86\xb1qh8\xde\xe4\xe3\x80\xabM\xe9\x14|\xc1\xbb\xc14Dq\x1f\xf4\x88\xe7V\xe0\xa1Hb\xd94v&H\xd5j\x02~-\xed\r\xfc\xb4\r\x00\xe9\xe3\x92U\xe7\x8f\xcc\xe4HJ18R\xee\xc5\x85*\xcf\xcbh}&\xe2\xc5[\xbbY\xca\x17-\x04\x95\xa3\xc5(\x9c\xdaZ\x0f', 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='T', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x5, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d746916f31c07b84819e7df4af14e1df82d", [0x6, 0x6]})
write$char_usb(r0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100))
close(0x3)
close(0xffffffffffffffff)
r5 = socket(0x1a, 0x5, 0x0)
close(r5)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
fcntl$getown(r3, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x80, 0x0)
accept4$inet(r3, 0x0, 0x0, 0x800)
syz_open_dev$admmidi(&(0x7f0000003340), 0x1, 0x285900)
map_shadow_stack(&(0x7f0000108000/0x2000)=nil, 0xffffffffffffffc2, 0x1)

275.265399ms ago: executing program 3 (id=2026):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', 0x0})
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./config\x00', &(0x7f0000000340)=@isofs_parent={0x14, 0x2, {0x0, 0x3, 0xdd1, 0x2, 0x9, 0x1}}, &(0x7f0000000380), 0x600)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
io_setup(0x81, &(0x7f0000001440)=<r1=>0x0)
syz_io_uring_setup(0x3e8a, &(0x7f00000000c0)={0x0, 0x1b12, 0x1, 0x3, 0x1bc}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000180))
pivot_root(&(0x7f00000001c0)='proc\x00', &(0x7f0000000200)='proc\x00')
io_submit(r1, 0x1, &(0x7f00000015c0)=[0x0])
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x30, 0x0, @val=@netfilter={0x3, 0x1, 0xdf03, 0x1}}, 0x20)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807feff00050000000000000005000900", 0x20)
close_range(r3, r3, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x40016)
setxattr(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x5, 0x1)
r7 = syz_open_dev$amidi(0x0, 0x2, 0x181)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0305720, &(0x7f0000000000))
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800})

494.22µs ago: executing program 3 (id=2027):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$ndctl0(0xffffff9c, &(0x7f0000000240), 0x12002, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
r1 = socket$inet6(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_io_uring_setup(0x31cc, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)

0s ago: executing program 0 (id=2028):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x4b4b, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}})

kernel console output (not intermixed with test programs):

der: 11218:11219 ioctl c0306201 800003c0 returned -14
[  337.802724][T11217] loop7: detected capacity change from 0 to 16384
[  337.940285][T11222] loop7: detected capacity change from 16384 to 0
[  337.943496][    C1] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  337.976677][T11228] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  338.282796][T11216] lo: Caught tx_queue_len zero misconfig
[  338.287561][T11215] tipc: Resetting bearer <eth:syzkaller0>
[  338.309836][T11215] tipc: Disabling bearer <eth:syzkaller0>
[  338.646246][T11240] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  338.946577][   T64] Bluetooth: hci4: command 0x0c1a tx timeout
[  339.499568][T11250] (syz.1.1480,11250,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  339.502456][T11250] (syz.1.1480,11250,3):ocfs2_fill_super:1177 ERROR: status = -22
[  339.502491][T11252] No fuse device found
[  339.551494][   T42] audit: type=1326 audit(1786385178.698:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.0.1482" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93fec code=0x0
[  339.893642][T11266] Bluetooth: MGMT ver 1.23
[  339.978990][T11267] No source specified
[  341.027716][   T64] Bluetooth: hci4: command 0x0c1a tx timeout
[  341.248049][T11284] (syz.3.1492,11284,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  341.248115][  T851] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  341.251560][T11284] (syz.3.1492,11284,1):ocfs2_fill_super:1177 ERROR: status = -22
[  341.269780][T11286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  341.347073][   T42] audit: type=1326 audit(1786385180.487:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.0.1495" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93fec code=0x0
[  341.408846][  T851] usb 6-1: Using ep0 maxpacket: 8
[  341.411706][  T851] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  341.416818][  T851] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  341.421160][  T851] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  341.425296][  T851] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  341.432261][  T851] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  341.436736][  T851] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  341.443746][  T851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.634357][T11306] tipc: Started in network mode
[  341.636043][T11306] tipc: Node identity 7f000001, cluster identity 4711
[  341.640788][T11306] tipc: Enabled bearer <udp:syz2>, priority 10
[  341.644630][T11306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1498'.
[  341.653653][T11306] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  341.654713][  T851] usb 6-1: GET_CAPABILITIES returned 0
[  341.659847][  T851] usbtmc 6-1:16.0: can't read capabilities
[  341.856173][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.859062][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.861867][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.864695][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.867505][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.870313][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.873096][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.876437][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.879196][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.881994][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.884847][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.887624][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.890820][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.896181][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.899072][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.901887][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  341.906248][   T29] usb 6-1: USB disconnect, device number 39
[  341.938186][   T50] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  342.068754][   T50] usb 9-1: device descriptor read/64, error -71
[  342.318379][   T50] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  342.458404][   T50] usb 9-1: device descriptor read/64, error -71
[  342.569148][   T50] usb usb9-port1: attempt power cycle
[  342.638513][ T6048] tipc: Node number set to 2130706433
[  342.918562][   T50] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  342.949155][   T50] usb 9-1: device descriptor read/8, error -71
[  343.118739][   T64] Bluetooth: hci4: command 0x0c1a tx timeout
[  343.181408][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'.
[  343.199022][   T50] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  343.569539][   T50] usb 9-1: device descriptor read/8, error -71
[  343.698983][   T50] usb usb9-port1: unable to enumerate USB device
[  343.789040][   T29] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  343.939739][   T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  343.944852][   T29] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  343.950308][   T29] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559
[  343.953588][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.958814][T11330] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  343.968812][   T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  344.430453][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1506'.
[  344.649986][   T29] usb 6-1: USB disconnect, device number 40
[  344.774641][   T42] audit: type=1326 audit(1786385183.915:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1508" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0
[  344.839582][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1509'.
[  345.119788][   T50] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  345.261714][T11354] openvswitch: netlink: Actions may not be safe on all matching packets
[  345.270422][   T50] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.274894][   T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.279411][   T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.284177][   T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  345.288861][   T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.295104][   T50] usb 5-1: config 0 descriptor??
[  345.947002][T11368] netfs: Duplicate cookie detected
[  345.948591][T11368] netfs: O-cookie c=00000005 [fl=4000 na=0 nA=0 s=-]
[  345.950685][T11368] netfs: O-cookie V=00000004 [9p,syz,]
[  345.952485][T11368] netfs: O-key=[8] '3500d80400000000'
[  345.954251][T11368] netfs: N-cookie c=00000006 [fl=0 na=0 nA=0 s=-]
[  345.956298][T11368] netfs: N-cookie V=00000004 [9p,syz,]
[  345.958025][T11368] netfs: N-key=[8] '3500d80400000000'
[  346.130185][   T50] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  346.371683][T11355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.492501][T11349] virt_wifi0 speed is unknown, defaulting to 1000
[  346.766698][   T42] audit: type=1800 audit(1786385185.904:990): pid=11375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1517" name="enable" dev="configfs" ino=36331 res=0 errno=0
[  346.951362][T11349] lo speed is unknown, defaulting to 1000
[  347.174478][ T5520] usb 5-1: reset high-speed USB device number 30 using dummy_hcd
[  347.256183][T11384] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  347.718034][   T42] audit: type=1326 audit(1786385186.854:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.0.1523" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93fec code=0x0
[  347.965976][T11405] netlink: 'syz.4.1525': attribute type 10 has an invalid length.
[  348.097936][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1525'.
[  348.442013][T11411] (syz.3.1526,11411,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  348.444780][T11411] (syz.3.1526,11411,3):ocfs2_fill_super:1177 ERROR: status = -22
[  348.466709][ T5838] usb 5-1: USB disconnect, device number 30
[  348.540264][T11405] team0: Port device dummy0 added
[  349.295942][T11445] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  349.350941][T11445] netlink: 'syz.3.1531': attribute type 10 has an invalid length.
[  349.357715][T11445] hsr0: mtu greater than device maximum
[  349.442182][   T42] audit: type=1326 audit(1786385188.573:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.1535" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93fec code=0x0
[  349.655760][T11453] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  350.836340][T11471] syzkaller0: entered promiscuous mode
[  350.838186][T11471] syzkaller0: entered allmulticast mode
[  350.954970][T11476] netlink: 'syz.4.1544': attribute type 1 has an invalid length.
[  350.967432][T11476] 8021q: adding VLAN 0 to HW filter on device bond1
[  350.970290][T11476] FAULT_INJECTION: forcing a failure.
[  350.970290][T11476] name failslab, interval 1, probability 0, space 0, times 0
[  350.976056][T11476] CPU: 3 UID: 0 PID: 11476 Comm: syz.4.1544 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  350.976073][T11476] Tainted: [L]=SOFTLOCKUP
[  350.976077][T11476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  350.976084][T11476] Call Trace:
[  350.976088][T11476]  <TASK>
[  350.976093][T11476]  dump_stack_lvl+0x100/0x190
[  350.976112][T11476]  should_fail_ex.cold+0x5/0xa
[  350.976126][T11476]  should_failslab+0xc2/0x120
[  350.976142][T11476]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  350.976158][T11476]  ? __alloc_skb+0x5b7/0x710
[  350.976172][T11476]  ? __alloc_skb+0x140/0x710
[  350.976188][T11476]  __alloc_skb+0x140/0x710
[  350.976201][T11476]  ? __alloc_skb+0x5b7/0x710
[  350.976215][T11476]  ? __pfx___alloc_skb+0x10/0x10
[  350.976232][T11476]  netlink_alloc_large_skb+0x69/0x150
[  350.976247][T11476]  netlink_sendmsg+0x680/0xda0
[  350.976261][T11476]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.976275][T11476]  ? apparmor_socket_sendmsg+0x15b/0x270
[  350.976290][T11476]  ____sys_sendmsg+0xa4d/0xbe0
[  350.976300][T11476]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.976314][T11476]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.976328][T11476]  ? __pfx_trace_clock_local+0x10/0x10
[  350.976348][T11476]  ___sys_sendmsg+0x190/0x1e0
[  350.976366][T11476]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.976384][T11476]  ? find_held_lock+0x2b/0x80
[  350.976407][T11476]  __sys_sendmsg+0x160/0x210
[  350.976423][T11476]  ? __pfx___sys_sendmsg+0x10/0x10
[  350.976445][T11476]  __do_fast_syscall_32+0xe7/0x970
[  350.976474][T11476]  ? lockdep_hardirqs_on+0x78/0x100
[  350.976492][T11476]  do_fast_syscall_32+0x32/0x70
[  350.976508][T11476]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  350.976523][T11476] RIP: 0023:0xf705efec
[  350.976542][T11476] Code: Unable to access opcode bytes at 0xf705efc2.
[  350.976549][T11476] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  350.976565][T11476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  350.976577][T11476] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[  350.976585][T11476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  350.976595][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.976602][T11476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  350.976622][T11476]  </TASK>
[  351.182803][   T50] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  351.333691][   T50] usb 6-1: not running at top speed; connect to a high speed hub
[  351.336320][   T50] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  351.340051][   T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  351.344045][   T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.359689][   T50] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  351.364881][   T50] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  351.570443][   T50] usb 6-1: USB disconnect, device number 41
[  351.578276][   T50] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  351.585161][   T50] garmin_gps 6-1:1.0: device disconnected
[  351.632293][   T42] audit: type=1326 audit(1786385190.762:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.3.1547" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0
[  351.706442][   T42] audit: type=1326 audit(1786385190.842:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000
[  351.713320][   T42] audit: type=1326 audit(1786385190.842:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000
[  351.718121][T11489] IPVS: ip_vs_add_dest(): server weight less than zero
[  351.720227][   T42] audit: type=1326 audit(1786385190.842:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71974eb code=0x7ffc0000
[  351.729579][   T42] audit: type=1326 audit(1786385190.842:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000
[  351.736603][   T42] audit: type=1326 audit(1786385190.842:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000
[  351.743352][   T42] audit: type=1326 audit(1786385190.842:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f93fec code=0x7ffc0000
[  351.750444][   T42] audit: type=1326 audit(1786385190.842:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000
[  351.757414][   T42] audit: type=1326 audit(1786385190.842:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000
[  351.764499][   T42] audit: type=1326 audit(1786385190.842:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1546" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f93fec code=0x7ffc0000
[  352.197231][T11497] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  352.535343][T11503] tunl0: Caught tx_queue_len zero misconfig
[  352.553368][T11503] syzkaller0: entered promiscuous mode
[  352.555883][T11503] syzkaller0: entered allmulticast mode
[  352.692034][ T7696] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  352.706542][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  352.722463][ T7696] (NULL device *): queue 0 connect admin queue failed (-6).
[  352.725842][ T7696] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  352.729100][ T7696] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  352.735643][T11505] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nq", hostnqn: nqn.2014-08.org.nvmexpress:uuid:94de4b8c-f78d-4fce-9369-e8b733ab986b
[  352.917428][T11512] (syz.4.1557,11512,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  352.921668][T11512] (syz.4.1557,11512,3):ocfs2_fill_super:1177 ERROR: status = -22
[  354.067816][T11535] jfs: Unknown parameter 'discard’3aK'
[  354.104493][T11537] syzkaller0: entered promiscuous mode
[  354.106393][T11537] syzkaller0: entered allmulticast mode
[  354.239836][T11544] (syz.1.1568,11544,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  354.243027][T11544] (syz.1.1568,11544,3):ocfs2_fill_super:1177 ERROR: status = -22
[  354.423097][T11555] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1571'.
[  354.426377][T11555] FAULT_INJECTION: forcing a failure.
[  354.426377][T11555] name failslab, interval 1, probability 0, space 0, times 0
[  354.430373][T11555] CPU: 3 UID: 0 PID: 11555 Comm: syz.1.1571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  354.430391][T11555] Tainted: [L]=SOFTLOCKUP
[  354.430395][T11555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  354.430403][T11555] Call Trace:
[  354.430408][T11555]  <TASK>
[  354.430413][T11555]  dump_stack_lvl+0x100/0x190
[  354.430432][T11555]  should_fail_ex.cold+0x5/0xa
[  354.430445][T11555]  should_failslab+0xc2/0x120
[  354.430462][T11555]  __kmalloc_cache_noprof+0x91/0x6c0
[  354.430475][T11555]  ? nft_match_select_ops+0x213/0x510
[  354.430515][T11555]  nft_match_select_ops+0x213/0x510
[  354.430538][T11555]  ? __pfx_nft_match_select_ops+0x10/0x10
[  354.430555][T11555]  nf_tables_expr_parse+0x5fd/0x9b0
[  354.430580][T11555]  ? __pfx_nf_tables_expr_parse+0x10/0x10
[  354.430597][T11555]  ? nf_tables_newrule+0x760/0x2be0
[  354.430615][T11555]  nf_tables_newrule+0x1b51/0x2be0
[  354.430637][T11555]  ? __pfx_nf_tables_newrule+0x10/0x10
[  354.430657][T11555]  ? __nla_parse+0x40/0x60
[  354.430673][T11555]  nfnetlink_rcv_batch+0x1410/0x2880
[  354.430696][T11555]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  354.430712][T11555]  ? find_held_lock+0x2b/0x80
[  354.430728][T11555]  ? __local_bh_enable_ip+0x9e/0x120
[  354.430742][T11555]  ? lockdep_hardirqs_on+0x78/0x100
[  354.430758][T11555]  ? __dev_queue_xmit+0xa12/0x4970
[  354.430789][T11555]  ? __nla_parse+0x40/0x60
[  354.430802][T11555]  nfnetlink_rcv+0x3bd/0x440
[  354.430817][T11555]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  354.430835][T11555]  netlink_unicast+0x585/0x850
[  354.430850][T11555]  ? __pfx_netlink_unicast+0x10/0x10
[  354.430866][T11555]  netlink_sendmsg+0x8b0/0xda0
[  354.430880][T11555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.430894][T11555]  ? apparmor_socket_sendmsg+0x15b/0x270
[  354.430908][T11555]  ____sys_sendmsg+0xa4d/0xbe0
[  354.430919][T11555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.430931][T11555]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.430946][T11555]  ? __pfx_trace_clock_local+0x10/0x10
[  354.430965][T11555]  ___sys_sendmsg+0x190/0x1e0
[  354.430978][T11555]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.430996][T11555]  ? find_held_lock+0x2b/0x80
[  354.431017][T11555]  __sys_sendmsg+0x160/0x210
[  354.431035][T11555]  ? __pfx___sys_sendmsg+0x10/0x10
[  354.431057][T11555]  __do_fast_syscall_32+0xe7/0x970
[  354.431073][T11555]  ? lockdep_hardirqs_on+0x78/0x100
[  354.431095][T11555]  do_fast_syscall_32+0x32/0x70
[  354.431117][T11555]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  354.431140][T11555] RIP: 0023:0xf706efec
[  354.431160][T11555] Code: Unable to access opcode bytes at 0xf706efc2.
[  354.431194][T11555] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  354.431286][T11555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0
[  354.431299][T11555] RDX: 0000000004048010 RSI: 0000000000000000 RDI: 0000000000000000
[  354.431306][T11555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  354.431312][T11555] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  354.431318][T11555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  354.431333][T11555]  </TASK>
[  354.589081][T11557] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  354.797369][ T7696] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  354.803492][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  354.811843][ T7696] (NULL device *): queue 0 connect admin queue failed (-6).
[  354.814401][ T7696] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  354.817063][ T7696] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  354.904661][   T29] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[  355.055309][   T29] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  355.062260][   T29] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  355.065840][   T29] usb 6-1: Product: syz
[  355.067631][   T29] usb 6-1: Manufacturer: syz
[  355.069629][   T29] usb 6-1: SerialNumber: syz
[  355.074018][   T29] usb 6-1: config 0 descriptor??
[  355.218590][T11562] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  355.259433][T11565] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1575'.
[  355.283355][T11567] syzkaller0: entered promiscuous mode
[  355.285531][T11567] syzkaller0: entered allmulticast mode
[  355.286998][  T851] usb 6-1: USB disconnect, device number 42
[  355.374635][T11574] (syz.4.1578,11574,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  355.378999][T11574] (syz.4.1578,11574,3):ocfs2_fill_super:1177 ERROR: status = -22
[  355.636653][T11579] FAULT_INJECTION: forcing a failure.
[  355.636653][T11579] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  355.645391][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.4.1580 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.645422][T11579] Tainted: [L]=SOFTLOCKUP
[  355.645428][T11579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  355.645440][T11579] Call Trace:
[  355.645446][T11579]  <TASK>
[  355.645453][T11579]  dump_stack_lvl+0x100/0x190
[  355.645482][T11579]  should_fail_ex.cold+0x5/0xa
[  355.645500][T11579]  ? prepare_alloc_pages+0x16d/0x5f0
[  355.645528][T11579]  should_fail_alloc_page+0xeb/0x140
[  355.645556][T11579]  prepare_alloc_pages+0x1f0/0x5f0
[  355.645586][T11579]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  355.645612][T11579]  ? find_held_lock+0x2b/0x80
[  355.645635][T11579]  ? process_measurement+0x4c8/0x2350
[  355.645657][T11579]  ? process_measurement+0x4c8/0x2350
[  355.645678][T11579]  ? down_write+0x146/0x1f0
[  355.645712][T11579]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  355.645732][T11579]  ? __lock_acquire+0x49f/0x1a40
[  355.645765][T11579]  ? filemap_get_entry+0x22d/0x450
[  355.645788][T11579]  ? filemap_get_entry+0x237/0x450
[  355.645804][T11579]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  355.645835][T11579]  ? policy_nodemask+0xed/0x4f0
[  355.645864][T11579]  alloc_pages_mpol+0x1fb/0x540
[  355.645892][T11579]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  355.645920][T11579]  ? __filemap_get_folio_mpol+0x369/0x1320
[  355.645943][T11579]  folio_alloc_noprof+0x22/0x250
[  355.645963][T11579]  secretmem_fault+0x2d7/0x750
[  355.645992][T11579]  __do_fault+0x10b/0x440
[  355.646019][T11579]  ? find_held_lock+0x2b/0x80
[  355.646043][T11579]  do_fault+0x2db/0x1750
[  355.646073][T11579]  __handle_mm_fault+0x187d/0x2a00
[  355.646094][T11579]  ? mt_find+0x45e/0x8e0
[  355.646111][T11579]  ? __pfx___handle_mm_fault+0x10/0x10
[  355.646126][T11579]  ? __pfx_mt_find+0x10/0x10
[  355.646157][T11579]  ? find_vma+0xbf/0x140
[  355.646177][T11579]  ? __pfx_find_vma+0x10/0x10
[  355.646217][T11579]  handle_mm_fault+0x37b/0xa30
[  355.646240][T11579]  do_user_addr_fault+0x74c/0x12f0
[  355.646272][T11579]  exc_page_fault+0x6f/0xd0
[  355.646297][T11579]  asm_exc_page_fault+0x26/0x30
[  355.646314][T11579] RIP: 0010:_copy_to_user+0x9f/0xd0
[  355.646357][T11579] Code: 89 ee 48 89 ef e8 f1 37 ee fc 4d 85 ff 75 26 e8 07 3e ee fc 89 de 4c 89 e7 e8 4d d8 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 <f3> a4 0f 1f 00 0f 01 ca 48 89 cb e8 e1 3d ee fc 48 89 d8 5b 5d 41
[  355.646375][T11579] RSP: 0018:ffffc9000c8ffda0 EFLAGS: 00050246
[  355.646392][T11579] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000008
[  355.646402][T11579] RDX: 0000000000000001 RSI: ffffc9000c8ffdf8 RDI: 0000000080000180
[  355.646414][T11579] RBP: 0000000080000180 R08: 0000000000000000 R09: fffff5200191ffbf
[  355.646425][T11579] R10: ffffc9000c8ffdff R11: 0000000000000000 R12: ffffc9000c8ffdf8
[  355.646437][T11579] R13: 0000000080000188 R14: 00007ffffffff000 R15: 0000000000000000
[  355.646464][T11579]  put_old_timespec32+0xb4/0x120
[  355.646495][T11579]  ? __pfx_put_old_timespec32+0x10/0x10
[  355.646522][T11579]  ? ktime_get_real_ts64+0x2f1/0x400
[  355.646539][T11579]  ? ktime_get_real_ts64+0x213/0x400
[  355.646561][T11579]  __ia32_sys_clock_gettime32+0x1d3/0x270
[  355.646588][T11579]  ? __pfx___ia32_sys_clock_gettime32+0x10/0x10
[  355.646618][T11579]  ? rcu_is_watching+0x12/0xc0
[  355.646642][T11579]  __do_fast_syscall_32+0xe7/0x970
[  355.646668][T11579]  ? lockdep_hardirqs_on+0x78/0x100
[  355.646694][T11579]  do_fast_syscall_32+0x32/0x70
[  355.646719][T11579]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  355.646739][T11579] RIP: 0023:0xf705efec
[  355.646763][T11579] Code: Unable to access opcode bytes at 0xf705efc2.
[  355.646771][T11579] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000109
[  355.646787][T11579] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000180
[  355.646797][T11579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  355.646806][T11579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  355.646816][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.646826][T11579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  355.646849][T11579]  </TASK>
[  355.861369][T11582] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  355.872356][T11586] jfs: Unknown parameter 'discard’3aK'
[  356.105278][  T851] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  356.133116][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'.
[  356.178230][T11603] (syz.3.1588,11603,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  356.181907][T11603] (syz.3.1588,11603,3):ocfs2_fill_super:1177 ERROR: status = -22
[  356.241054][T11604] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  356.243623][T11604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  356.257565][T11604] vhci_hcd vhci_hcd.0: Device attached
[  356.265917][  T851] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  356.270758][  T851] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  356.274437][  T851] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559
[  356.278017][  T851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.283013][T11585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  356.292585][  T851] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  356.442754][T11611] netfs: Duplicate cookie detected
[  356.444451][T11611] netfs: O-cookie c=00000008 [fl=4000 na=0 nA=0 s=-]
[  356.446644][T11611] netfs: O-cookie V=00000005 [9p,syz,]
[  356.448372][T11611] netfs: O-key=[8] '3500d80400000000'
[  356.450046][T11611] netfs: N-cookie c=00000009 [fl=0 na=0 nA=0 s=-]
[  356.452113][T11611] netfs: N-cookie V=00000005 [9p,syz,]
[  356.454035][T11611] netfs: N-key=[8] '3500d80400000000'
[  356.525479][   T29] usb 38-1: SetAddress Request (34) to port 0
[  356.529282][   T29] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd
[  356.610644][T11612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1582'.
[  356.848053][T11605] vhci_hcd: connection reset by peer
[  356.851543][   T13] vhci_hcd vhci_hcd.0: stop threads
[  356.857601][   T13] vhci_hcd vhci_hcd.0: release socket
[  356.860089][   T13] vhci_hcd vhci_hcd.0: disconnect device
[  356.884448][T11614] netfs: Duplicate cookie detected
[  356.886587][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  356.886734][T11614] netfs: O-cookie c=0000000b [fl=4000 na=0 nA=0 s=-]
[  356.894303][T11614] netfs: O-cookie V=00000006 [9p,syz,]
[  356.897048][T11614] netfs: O-key=[8] '3500d80400000000'
[  356.899456][T11614] netfs: N-cookie c=0000000c [fl=0 na=0 nA=0 s=-]
[  356.901655][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  356.902132][T11614] netfs: N-cookie V=00000006 [9p,syz,]
[  356.902147][T11614] netfs: N-key=[8] '3500d80400000000'
[  356.914903][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  356.918026][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  356.921005][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  357.459362][T11618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.466875][T11618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.485578][T11618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.488821][T11618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.747560][ T5880] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  357.819243][ T5838] usb 6-1: USB disconnect, device number 43
[  357.937060][ T5880] usb 5-1: not running at top speed; connect to a high speed hub
[  357.939608][ T5880] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  357.943399][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  357.947146][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.955436][ T5880] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  357.965402][ T5880] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  358.221348][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'.
[  358.230227][  T851] usb 5-1: USB disconnect, device number 31
[  358.244520][  T851] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  358.252154][  T851] garmin_gps 5-1:1.0: device disconnected
[  358.550699][ T5880] libceph: connect (1)[c::]:6789 error -101
[  358.556864][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  358.847900][ T5880] libceph: connect (1)[c::]:6789 error -101
[  358.859334][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  358.931843][T11645] netfs: Duplicate cookie detected
[  358.933693][T11645] netfs: O-cookie c=0000000e [fl=4000 na=0 nA=0 s=-]
[  358.935925][T11645] netfs: O-cookie V=00000007 [9p,syz,]
[  358.937975][T11645] netfs: O-key=[8] '3500d80400000000'
[  358.939915][T11645] netfs: N-cookie c=0000000f [fl=0 na=0 nA=0 s=-]
[  358.942020][T11645] netfs: N-cookie V=00000007 [9p,syz,]
[  358.943854][T11645] netfs: N-key=[8] '3500d80400000000'
[  358.956652][ T7692] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  358.961334][ T7693] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  358.965568][ T7692] (NULL device *): queue 0 connect admin queue failed (-6).
[  358.969163][ T7692] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  358.972873][ T7692] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  359.019373][T11637] ceph: No mds server is up or the cluster is laggy
[  359.161875][T11642] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49
[  359.170197][T11643] wusb3801 0-004a: supply vbus not found, using dummy regulator
[  359.275349][T11643] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a
[  359.699730][T11657] netfs: Duplicate cookie detected
[  359.701891][T11657] netfs: O-cookie c=00000011 [fl=4000 na=0 nA=0 s=-]
[  359.704748][T11657] netfs: O-cookie V=00000008 [9p,syz,]
[  359.707167][T11657] netfs: O-key=[8] '3500d80400000000'
[  359.709462][T11657] netfs: N-cookie c=00000012 [fl=0 na=0 nA=0 s=-]
[  359.712103][T11657] netfs: N-cookie V=00000008 [9p,syz,]
[  359.714432][T11657] netfs: N-key=[8] '3500d80400000000'
[  359.718200][T11658] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  359.720830][T11658] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  359.726115][T11658] vhci_hcd vhci_hcd.0: Device attached
[  360.007460][ T5838] usb 40-1: SetAddress Request (26) to port 0
[  360.013060][ T5838] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd
[  360.505875][T11659] vhci_hcd: connection reset by peer
[  360.509403][   T13] vhci_hcd vhci_hcd.1: stop threads
[  360.511841][   T13] vhci_hcd vhci_hcd.1: release socket
[  360.514236][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  360.676059][T11673] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1605'.
[  360.815525][T11675] syzkaller0: entered promiscuous mode
[  360.817574][T11675] syzkaller0: entered allmulticast mode
[  361.039739][ T7696] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  361.050024][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  361.057918][ T7696] (NULL device *): queue 0 connect admin queue failed (-6).
[  361.067247][ T7696] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  361.074081][ T7696] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  361.262338][   T42] kauditd_printk_skb: 25 callbacks suppressed
[  361.262358][   T42] audit: type=1326 audit(1786385200.387:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.0.1612" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93fec code=0x0
[  361.437883][ T5520] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  361.588610][ T5520] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  361.593583][ T5520] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.597545][ T5520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.606211][ T5520] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  361.607957][   T29] usb 38-1: device descriptor read/8, error -110
[  361.609322][ T5520] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[  361.613930][ T5520] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[  361.618509][ T5520] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  361.621434][ T5520] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  361.625149][ T5520] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  361.630681][ T5520] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  361.633215][ T5520] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  361.637814][ T5520] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  361.813200][  T851] usb 6-1: USB disconnect, device number 44
[  361.820683][  T851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  361.835905][  T851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  361.844634][  T851] keyspan 6-1:1.0: device disconnected
[  362.167499][T11696] openvswitch: netlink: Message has 12 unknown bytes.
[  362.190859][T11698] syzkaller0: entered promiscuous mode
[  362.193228][T11698] syzkaller0: entered allmulticast mode
[  362.764553][   T29] usb usb38-port1: attempt power cycle
[  363.118904][ T7692] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  363.125255][ T7693] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  363.128267][ T7692] (NULL device *): queue 0 connect admin queue failed (-6).
[  363.131353][ T7692] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  363.134203][ T7692] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  363.192792][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'.
[  363.359835][   T29] usb usb38-port1: unable to enumerate USB device
[  363.572016][T11719] i2c i2c-1: new_device: Instantiated device isp1301 at 0x2c
[  363.576451][T11719] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-1/1-002c'
[  363.579694][T11719] CPU: 2 UID: 0 PID: 11719 Comm: syz.0.1622 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  363.579716][T11719] Tainted: [L]=SOFTLOCKUP
[  363.579721][T11719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  363.579729][T11719] Call Trace:
[  363.579733][T11719]  <TASK>
[  363.579738][T11719]  dump_stack_lvl+0x100/0x190
[  363.579760][T11719]  sysfs_warn_dup.cold+0x1c/0x28
[  363.579779][T11719]  sysfs_create_dir_ns+0x24b/0x2b0
[  363.579798][T11719]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  363.579817][T11719]  ? find_held_lock+0x2b/0x80
[  363.579833][T11719]  ? kobject_add_internal+0x25f/0x930
[  363.579848][T11719]  ? kobject_add_internal+0x25f/0x930
[  363.579863][T11719]  ? do_raw_spin_unlock+0x145/0x1e0
[  363.579879][T11719]  kobject_add_internal+0x2c8/0x930
[  363.579895][T11719]  kobject_add+0x16a/0x1e0
[  363.579907][T11719]  ? __pfx_kobject_add+0x10/0x10
[  363.579922][T11719]  ? __kasan_kmalloc+0xaa/0xb0
[  363.579939][T11719]  ? lockdep_init_map_type+0x5c/0x250
[  363.579950][T11719]  ? class_to_subsys+0x114/0x150
[  363.580004][T11719]  device_add+0x294/0x1970
[  363.580021][T11719]  ? lockdep_init_map_type+0x5c/0x250
[  363.580034][T11719]  ? __pfx_device_add+0x10/0x10
[  363.580045][T11719]  ? lockdep_init_map_type+0x5c/0x250
[  363.580061][T11719]  ? __init_waitqueue_head+0xca/0x150
[  363.580079][T11719]  i2c_new_client_device+0x660/0xd30
[  363.580120][T11719]  new_device_store+0x20f/0x420
[  363.580139][T11719]  ? __lock_acquire+0x49f/0x1a40
[  363.580152][T11719]  ? __pfx_new_device_store+0x10/0x10
[  363.580171][T11719]  ? find_held_lock+0x2b/0x80
[  363.580186][T11719]  ? sysfs_file_kobj+0xe4/0x290
[  363.580204][T11719]  ? sysfs_file_kobj+0xe4/0x290
[  363.580220][T11719]  ? __pfx_new_device_store+0x10/0x10
[  363.580232][T11719]  dev_attr_store+0x58/0x80
[  363.580251][T11719]  ? __pfx_dev_attr_store+0x10/0x10
[  363.580271][T11719]  sysfs_kf_write+0xf2/0x150
[  363.580290][T11719]  kernfs_fop_write_iter+0x3e0/0x5f0
[  363.580305][T11719]  ? __pfx_sysfs_kf_write+0x10/0x10
[  363.580322][T11719]  vfs_write+0x6ac/0x1050
[  363.580334][T11719]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  363.580349][T11719]  ? __pfx_vfs_write+0x10/0x10
[  363.580359][T11719]  ? find_held_lock+0x2b/0x80
[  363.580383][T11719]  ksys_write+0x12a/0x250
[  363.580393][T11719]  ? __pfx_ksys_write+0x10/0x10
[  363.580403][T11719]  ? trace_syscall_enter+0xd9/0x110
[  363.580420][T11719]  __do_fast_syscall_32+0xe7/0x970
[  363.580440][T11719]  do_fast_syscall_32+0x32/0x70
[  363.580456][T11719]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  363.580471][T11719] RIP: 0023:0xf7f93fec
[  363.580487][T11719] Code: Unable to access opcode bytes at 0xf7f93fc2.
[  363.580492][T11719] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  363.580504][T11719] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000100
[  363.580512][T11719] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[  363.580518][T11719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  363.580524][T11719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.580530][T11719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  363.580545][T11719]  </TASK>
[  363.580598][T11719] kobject: kobject_add_internal failed for 1-002c with -EEXIST, don't try to register things with the same name in the same directory.
[  363.629940][T11720] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1622'.
[  363.631700][T11719] i2c i2c-1: Failed to register i2c client isp1301 at 0x2c (-17)
[  363.853689][   T42] audit: type=1326 audit(1786385202.986:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11723 comm="syz.4.1624" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0
[  364.029250][ T5520] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  364.200066][ T5520] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  364.205189][ T5520] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  364.210449][ T5520] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559
[  364.214696][ T5520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.224578][T11722] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  364.233035][ T5520] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  364.546034][T11731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1623'.
[  365.019668][  T851] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  365.131324][ T5838] usb 40-1: device descriptor read/8, error -110
[  365.170762][  T851] usb 9-1: New USB device found, idVendor=03f0, idProduct=4002, bcdDevice= 0.01
[  365.176342][  T851] usb 9-1: config 5 has an invalid interface number: 236 but max is 1
[  365.180567][  T851] usb 9-1: config 5 has an invalid interface number: 166 but max is 1
[  365.184268][  T851] usb 9-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  365.188091][  T851] usb 9-1: config 5 has an invalid interface number: 3 but max is 1
[  365.192529][  T851] usb 9-1: config 5 has 3 interfaces, different from the descriptor's value: 2
[  365.196499][  T851] usb 9-1: config 5 has no interface number 0
[  365.199045][  T851] usb 9-1: config 5 has no interface number 1
[  365.206861][  T851] usb 9-1: config 5 has no interface number 2
[  365.211782][ T7687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  365.217449][  T851] usb 9-1: config 5 interface 236 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  365.222712][  T851] usb 9-1: config 5 interface 236 altsetting 9 endpoint 0x8 has invalid maxpacket 959, setting to 64
[  365.228039][  T851] usb 9-1: config 5 interface 236 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[  365.233051][  T851] usb 9-1: config 5 interface 236 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 13
[  365.238902][  T851] usb 9-1: too many endpoints for config 5 interface 166 altsetting 104: 127, using maximum allowed: 30
[  365.244111][  T851] usb 9-1: config 5 interface 166 altsetting 104 has a duplicate endpoint with address 0x8, skipping
[  365.245027][ T7696] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  365.248929][  T851] usb 9-1: config 5 interface 166 altsetting 104 has an invalid descriptor for endpoint zero, skipping
[  365.257704][  T851] usb 9-1: config 5 interface 166 altsetting 104 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  365.262761][  T851] usb 9-1: config 5 interface 166 altsetting 104 has a duplicate endpoint with address 0x3, skipping
[  365.267511][  T851] usb 9-1: config 5 interface 166 altsetting 104 has a duplicate endpoint with address 0x9, skipping
[  365.272229][  T851] usb 9-1: config 5 interface 166 altsetting 104 has an endpoint descriptor with address 0x91, changing to 0x81
[  365.274879][ T7687] (NULL device *): queue 0 connect admin queue failed (-6).
[  365.277550][  T851] usb 9-1: config 5 interface 166 altsetting 104 has a duplicate endpoint with address 0x4, skipping
[  365.286228][  T851] usb 9-1: config 5 interface 166 altsetting 104 has 10 endpoint descriptors, different from the interface descriptor's value: 127
[  365.289806][ T7687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  365.292304][  T851] usb 9-1: config 5 interface 3 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024
[  365.297539][ T7687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  365.299883][  T851] usb 9-1: config 5 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  365.307148][  T851] usb 9-1: config 5 interface 3 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  365.311770][  T851] usb 9-1: config 5 interface 3 altsetting 2 has a duplicate endpoint with address 0x7, skipping
[  365.316292][  T851] usb 9-1: config 5 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  365.321109][  T851] usb 9-1: config 5 interface 3 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  365.325755][  T851] usb 9-1: config 5 interface 3 altsetting 2 has a duplicate endpoint with address 0x7, skipping
[  365.330626][  T851] usb 9-1: config 5 interface 3 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  365.336093][  T851] usb 9-1: config 5 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  365.349998][  T851] usb 9-1: config 5 interface 3 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  365.354878][  T851] usb 9-1: config 5 interface 3 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  365.360376][  T851] usb 9-1: config 5 interface 3 altsetting 2 has an endpoint descriptor with address 0x25, changing to 0x5
[  365.365407][  T851] usb 9-1: config 5 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  365.370212][  T851] usb 9-1: config 5 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  365.375023][  T851] usb 9-1: config 5 interface 3 altsetting 2 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[  365.380729][  T851] usb 9-1: config 5 interface 236 has no altsetting 0
[  365.383685][  T851] usb 9-1: config 5 interface 166 has no altsetting 0
[  365.386612][  T851] usb 9-1: config 5 interface 3 has no altsetting 0
[  365.391860][  T851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.395418][  T851] usb 9-1: Product: syz
[  365.397267][  T851] usb 9-1: SerialNumber: syz
[  365.546308][ T5838] usb usb40-port1: attempt power cycle
[  365.588244][T11740] netfs: Duplicate cookie detected
[  365.590686][T11740] netfs: O-cookie c=00000014 [fl=4000 na=0 nA=0 s=-]
[  365.593708][T11740] netfs: O-cookie V=00000009 [9p,syz,]
[  365.596217][T11740] netfs: O-key=[8] '3500d80400000000'
[  365.598696][T11740] netfs: N-cookie c=00000015 [fl=0 na=0 nA=0 s=-]
[  365.601998][T11740] netfs: N-cookie V=00000009 [9p,syz,]
[  365.604831][T11740] netfs: N-key=[8] '3500d80400000000'
[  365.614531][  T851] usb-storage 9-1:5.236: USB Mass Storage device detected
[  365.637282][  T851] usb-storage 9-1:5.236: Quirks match for vid 03f0 pid 4002: 10
[  365.714489][   T29] usb 5-1: USB disconnect, device number 32
[  365.746211][  T851] usb-storage 9-1:5.166: USB Mass Storage device detected
[  365.759205][  T851] usb-storage 9-1:5.166: Quirks match for vid 03f0 pid 4002: 10
[  365.827399][  T851] usb-storage 9-1:5.3: USB Mass Storage device detected
[  365.836345][  T851] usb-storage 9-1:5.3: Quirks match for vid 03f0 pid 4002: 10
[  365.908594][  T851] usb 9-1: USB disconnect, device number 12
[  366.025406][   T42] audit: type=1800 audit(1786385204.154:1030): pid=11749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1631" name="enable" dev="configfs" ino=36782 res=0 errno=0
[  366.091761][T11753] xfrm0: mtu less than device minimum
[  366.104476][ T5838] usb usb40-port1: unable to enumerate USB device
[  366.192806][T11757] (syz.4.1635,11757,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  366.196421][T11757] (syz.4.1635,11757,3):ocfs2_fill_super:1177 ERROR: status = -22
[  366.385610][T11766] jffs2: notice: (11766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  366.650117][   T42] audit: type=1800 audit(1786385460.769:1031): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1640" name="enable" dev="configfs" ino=39566 res=0 errno=0
[  367.010672][ T5883] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  367.171736][ T5883] usb 9-1: not running at top speed; connect to a high speed hub
[  367.174622][T11790] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  367.175021][ T5883] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  367.182913][ T5883] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  367.187454][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.196836][ T5883] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected
[  367.205143][ T5883] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  367.360562][ T7681] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  367.365430][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  367.369702][ T7681] (NULL device *): queue 0 connect admin queue failed (-6).
[  367.373996][ T7681] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  367.376451][ T7681] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  367.406529][ T5883] usb 9-1: USB disconnect, device number 13
[  367.416002][ T5883] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  367.420287][ T5883] garmin_gps 9-1:1.0: device disconnected
[  368.249164][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'.
[  368.480501][T11701] Bluetooth: hci4: command 0x0c1a tx timeout
[  368.580175][   T42] audit: type=1800 audit(1786385462.699:1032): pid=11808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1650" name="enable" dev="configfs" ino=37829 res=0 errno=0
[  368.854147][T11812] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  368.856791][T11812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  368.863974][T11812] vhci_hcd vhci_hcd.0: Device attached
[  369.151014][ T5880] usb 40-1: SetAddress Request (30) to port 0
[  369.156053][ T5880] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd
[  369.443530][ T7696] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  369.450433][ T6048] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  369.460576][ T7693] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  369.466818][ T7696] (NULL device *): queue 0 connect admin queue failed (-6).
[  369.477038][ T7696] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  369.480394][ T7696] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  369.501508][T11813] vhci_hcd: connection reset by peer
[  369.506479][T11538] vhci_hcd vhci_hcd.1: stop threads
[  369.509966][T11538] vhci_hcd vhci_hcd.1: release socket
[  369.514095][T11538] vhci_hcd vhci_hcd.1: disconnect device
[  370.203501][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1658'.
[  370.220931][ T6048] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  370.224746][ T6048] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  370.228234][ T6048] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559
[  370.231560][ T6048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.236957][T11816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  370.242013][ T6048] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  370.319545][T11835] netfs: Duplicate cookie detected
[  370.321761][T11835] netfs: O-cookie c=00000017 [fl=4000 na=0 nA=0 s=-]
[  370.323977][T11835] netfs: O-cookie V=0000000a [9p,syz,]
[  370.326120][T11835] netfs: O-key=[8] '3500d80400000000'
[  370.328141][T11835] netfs: N-cookie c=00000018 [fl=0 na=0 nA=0 s=-]
[  370.330199][T11835] netfs: N-cookie V=0000000a [9p,syz,]
[  370.336516][T11835] netfs: N-key=[8] '3500d80400000000'
[  370.596182][T11836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1652'.
[  370.715853][ T5838] usb 5-1: USB disconnect, device number 33
[  371.273019][T11849] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  371.275767][T11849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  371.279299][T11849] vhci_hcd vhci_hcd.0: Device attached
[  371.419740][T11854] netfs: Duplicate cookie detected
[  371.422408][T11854] netfs: O-cookie c=0000001a [fl=4000 na=0 nA=0 s=-]
[  371.425110][T11854] netfs: O-cookie V=0000000b [9p,syz,]
[  371.427243][T11854] netfs: O-key=[8] '3500d80400000000'
[  371.429347][T11854] netfs: N-cookie c=0000001b [fl=0 na=0 nA=0 s=-]
[  371.431876][T11854] netfs: N-cookie V=0000000b [9p,syz,]
[  371.433986][T11854] netfs: N-key=[8] '3500d80400000000'
[  371.520501][ T7696] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  371.529525][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  371.540586][ T6048] usb 46-1: SetAddress Request (7) to port 0
[  371.541350][ T7696] (NULL device *): queue 0 connect admin queue failed (-6).
[  371.542843][ T6048] usb 46-1: new SuperSpeed USB device number 7 using vhci_hcd
[  371.551172][ T7696] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  371.558250][ T7696] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  371.668080][T11850] vhci_hcd: connection reset by peer
[  371.670713][   T13] vhci_hcd vhci_hcd.4: stop threads
[  371.673463][   T13] vhci_hcd vhci_hcd.4: release socket
[  371.676180][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  372.356064][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'.
[  372.468772][T11866] 8021q: adding VLAN 0 to HW filter on device bond3
[  372.511924][T11869] macvlan2: entered promiscuous mode
[  372.514287][T11869] macvlan2: entered allmulticast mode
[  372.518081][T11869] bond3: entered promiscuous mode
[  372.521186][T11869] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  372.531752][T11869] bond3: left promiscuous mode
[  373.496957][T11883] netfs: Duplicate cookie detected
[  373.499223][T11883] netfs: O-cookie c=0000001d [fl=4000 na=0 nA=0 s=-]
[  373.502437][T11883] netfs: O-cookie V=0000000c [9p,syz,]
[  373.504746][T11883] netfs: O-key=[8] '3500d80400000000'
[  373.505299][T11888] (syz.0.1675,11888,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  373.507113][T11883] netfs: N-cookie c=0000001e [fl=0 na=0 nA=0 s=-]
[  373.510042][T11888] (syz.0.1675,11888,3):ocfs2_fill_super:1177 ERROR: status = -22
[  373.512768][T11883] netfs: N-cookie V=0000000c [9p,syz,]
[  373.512787][T11883] netfs: N-key=[8] '3500d80400000000'
[  373.611665][ T7687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  373.617347][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  373.621716][ T7687] (NULL device *): queue 0 connect admin queue failed (-6).
[  373.624230][ T7687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  373.627438][ T7687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  373.656281][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'.
[  373.689656][T11898] jffs2: notice: (11898) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  373.699341][T11898] jffs2: warning: (11898) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=36
[  374.240542][ T5880] usb 40-1: device descriptor read/8, error -110
[  374.251200][T11701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  374.265316][T11701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  374.268505][T11701] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  374.288367][T11701] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  374.293421][T11701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  374.460525][ T5883] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  374.611032][ T5883] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  374.615559][ T5883] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  374.619928][ T5883] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559
[  374.625095][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.633219][T11910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  374.648961][ T5883] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  374.650941][ T5880] usb usb40-port1: attempt power cycle
[  374.682942][T11911] virt_wifi0 speed is unknown, defaulting to 1000
[  374.928798][T11926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1683'.
[  375.156525][T11911] lo speed is unknown, defaulting to 1000
[  375.226866][T11929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  375.228957][T11929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  375.248251][T11929] vhci_hcd vhci_hcd.0: Device attached
[  375.301128][ T5880] usb usb40-port1: unable to enumerate USB device
[  375.510503][ T5830] usb 38-1: SetAddress Request (38) to port 0
[  375.512444][ T5830] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd
[  375.619662][T11538] bridge_slave_0: left allmulticast mode
[  375.622318][T11538] bridge_slave_0: left promiscuous mode
[  375.628179][T11538] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.635382][T11538] pim6reg: left allmulticast mode
[  375.671892][T11930] vhci_hcd: connection reset by peer
[  375.674644][T11935] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  375.678541][ T5781] vhci_hcd vhci_hcd.0: stop threads
[  375.680895][ T5781] vhci_hcd vhci_hcd.0: release socket
[  375.684882][ T5781] vhci_hcd vhci_hcd.0: disconnect device
[  375.690975][ T7693] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  375.695842][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  375.699240][ T7693] (NULL device *): queue 0 connect admin queue failed (-6).
[  375.702781][ T7693] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  375.705360][ T7693] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  375.806400][T11538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  375.812125][T11538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  375.816236][T11538] bond0 (unregistering): Released all slaves
[  375.822742][T11538] bond1 (unregistering): Released all slaves
[  376.017624][T11538] tipc: Disabling bearer <udp:syz2>
[  376.031769][T11538] tipc: Left network mode
[  376.402352][ T5741] Bluetooth: hci4: command tx timeout
[  376.489582][ T5443] 8021q: adding VLAN 0 to HW filter on device eth1
[  376.656448][ T6048] usb 46-1: device descriptor read/8, error -110
[  376.681891][T11947] (syz.0.1689,11947,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  376.698553][T11947] (syz.0.1689,11947,3):ocfs2_fill_super:1177 ERROR: status = -22
[  376.786947][T11538] hsr_slave_0: left promiscuous mode
[  376.790260][T11538] hsr_slave_1: left promiscuous mode
[  376.793137][T11538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.796396][T11538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.957415][T11538] team0 (unregistering): Port device team_slave_1 removed
[  376.972101][T11538] team0 (unregistering): Port device team_slave_0 removed
[  377.038407][T11538] team0 (unregistering): Port device dummy0 removed
[  377.059360][T11911] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.067958][ T6048] usb usb46-port1: attempt power cycle
[  377.079569][T11911] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.084242][T11911] bridge_slave_0: entered allmulticast mode
[  377.088556][T11911] bridge_slave_0: entered promiscuous mode
[  377.094304][T11911] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.097454][T11911] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.101041][T11911] bridge_slave_1: entered allmulticast mode
[  377.104555][T11911] bridge_slave_1: entered promiscuous mode
[  377.162924][T11911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.179801][T11911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.229227][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2
[  377.235273][T11911] team0: Port device team_slave_0 added
[  377.246819][ T5883] usb 6-1: USB disconnect, device number 45
[  377.262595][T11911] team0: Port device team_slave_1 added
[  377.308195][T11911] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.311962][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.323578][T11911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.329141][T11911] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.331402][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.341926][T11911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.412989][T11911] hsr_slave_0: entered promiscuous mode
[  377.416207][T11911] hsr_slave_1: entered promiscuous mode
[  377.419098][T11911] debugfs: 'hsr0' already exists in 'hsr'
[  377.421614][T11911] Cannot create hsr debugfs directory
[  377.532233][T11911] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  377.537439][T11911] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  377.540229][T11911] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  377.544611][T11911] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  377.547424][T11911] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  377.561264][T11911] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  377.565965][T11911] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  377.573707][T11911] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  377.590620][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3
[  377.663111][ T6048] usb usb46-port1: unable to enumerate USB device
[  377.663657][T11911] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.684834][T11911] 8021q: adding VLAN 0 to HW filter on device team0
[  377.693457][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.696332][ T7696] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.700509][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.703321][ T7696] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.772149][ T7687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  377.776339][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  377.779359][ T7687] (NULL device *): queue 0 connect admin queue failed (-6).
[  377.781775][ T7687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  377.784273][ T7687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  377.844926][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4
[  377.981557][T11911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.119885][T11911] veth0_vlan: entered promiscuous mode
[  378.127709][T11911] veth1_vlan: entered promiscuous mode
[  378.182806][T11911] veth0_macvtap: entered promiscuous mode
[  378.191335][T11911] veth1_macvtap: entered promiscuous mode
[  378.203279][T11911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.211482][T11911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.242441][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  378.276490][ T5807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.287260][ T5807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.320211][ T7681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.332144][ T7681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.350974][ T5807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.355570][ T5807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.381153][ T7681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.384671][ T7681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.449810][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'.
[  378.490505][ T5741] Bluetooth: hci4: command tx timeout
[  378.901797][T12023] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  378.904694][T12023] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  378.909389][T12023] vhci_hcd vhci_hcd.0: Device attached
[  379.210437][ T5880] usb 48-1: SetAddress Request (2) to port 0
[  379.215138][ T5880] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[  379.349134][T12034] netlink: 'syz.1.1701': attribute type 11 has an invalid length.
[  379.416168][  T851] lo speed is unknown, defaulting to 1000
[  379.420067][  T851] syz0: Port: 1 Link ACTIVE
[  379.428013][ T5807] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  379.531699][T12024] vhci_hcd: connection reset by peer
[  379.536941][T11538] vhci_hcd vhci_hcd.5: stop threads
[  379.539337][T11538] vhci_hcd vhci_hcd.5: release socket
[  379.549713][T11538] vhci_hcd vhci_hcd.5: disconnect device
[  379.840800][ T7692] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  379.844864][ T7687] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  379.847970][ T7692] (NULL device *): queue 0 connect admin queue failed (-6).
[  379.850394][ T7692] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  379.852738][ T7692] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  380.216840][T12050] bond1: entered allmulticast mode
[  380.219235][T12050] 8021q: adding VLAN 0 to HW filter on device bond1
[  380.560557][ T5741] Bluetooth: hci4: command tx timeout
[  380.582158][ T5830] usb 38-1: device descriptor read/8, error -110
[  380.716939][T12064] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1709'.
[  381.001676][ T5830] usb usb38-port1: attempt power cycle
[  381.323992][T12074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1713'.
[  381.546944][T12090] syzkaller0: entered promiscuous mode
[  381.552189][T12090] syzkaller0: entered allmulticast mode
[  381.572487][ T5830] usb usb38-port1: unable to enumerate USB device
[  381.749996][T12104] (syz.1.1718,12104,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  381.753049][T12104] (syz.1.1718,12104,3):ocfs2_fill_super:1177 ERROR: status = -22
[  381.874512][T12115] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  381.877219][T12115] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  381.882077][T12115] vhci_hcd vhci_hcd.0: Device attached
[  381.894961][T12115] rdma_rxe: rxe_newlink: failed to add wg2
[  381.920403][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  381.924550][ T7687] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  381.927632][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  381.930108][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  381.934024][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  381.940030][T12121] syzkaller0: entered promiscuous mode
[  381.950536][T12121] syzkaller0: entered allmulticast mode
[  382.309368][T12148] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  382.311488][T12148] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  382.316249][T12148] vhci_hcd vhci_hcd.0: Device attached
[  382.435716][T12116] vhci_hcd: connection closed
[  382.440208][T11538] vhci_hcd vhci_hcd.5: stop threads
[  382.444033][T11538] vhci_hcd vhci_hcd.5: release socket
[  382.445866][T11538] vhci_hcd vhci_hcd.5: disconnect device
[  382.483514][T12148] rdma_rxe: rxe_newlink: failed to add wg2
[  382.499235][T12149] vhci_hcd: connection closed
[  382.504022][T11928] vhci_hcd vhci_hcd.3: stop threads
[  382.508552][T11928] vhci_hcd vhci_hcd.3: release socket
[  382.512404][T11928] vhci_hcd vhci_hcd.3: disconnect device
[  382.640524][ T5741] Bluetooth: hci4: command tx timeout
[  383.057347][T12156] netfs: Duplicate cookie detected
[  383.059490][T12156] netfs: O-cookie c=00000022 [fl=4000 na=0 nA=0 s=-]
[  383.062311][T12156] netfs: O-cookie V=0000000e [9p,syz,]
[  383.064702][T12156] netfs: O-key=[8] '3500d80400000000'
[  383.066971][T12156] netfs: N-cookie c=00000023 [fl=0 na=0 nA=0 s=-]
[  383.069655][T12156] netfs: N-cookie V=0000000e [9p,syz,]
[  383.072073][T12156] netfs: N-key=[8] '3500d80400000000'
[  383.200596][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  383.229428][T12165] (syz.1.1727,12165,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  383.232436][T12165] (syz.1.1727,12165,0):ocfs2_fill_super:1177 ERROR: status = -22
[  383.344730][ T5809] hid-generic FFFF:0008:0003.0009: item fetching failed at offset 0/1
[  383.354105][ T5809] hid-generic FFFF:0008:0003.0009: probe with driver hid-generic failed with error -22
[  383.401985][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'.
[  383.754635][T12187] tipc: Started in network mode
[  383.759293][T12187] tipc: Node identity 7f000001, cluster identity 4711
[  383.774186][T12187] tipc: Enabled bearer <udp:syz2>, priority 10
[  383.777924][T12187] tipc: Disabling bearer <udp:syz2>
[  384.009402][ T7681] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  384.024866][ T7696] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  384.030234][ T7681] (NULL device *): queue 0 connect admin queue failed (-6).
[  384.033590][ T7681] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  384.036185][ T7681] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  384.240911][ T5880] usb 48-1: device descriptor read/8, error -110
[  384.350159][T12199] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1738'.
[  384.429396][T12200] (syz.5.1737,12200,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  384.433003][T12200] (syz.5.1737,12200,1):ocfs2_fill_super:1177 ERROR: status = -22
[  384.658511][ T5880] usb usb48-port1: attempt power cycle
[  384.870574][   T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  385.034297][   T60] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  385.057103][   T60] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  385.070131][   T60] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559
[  385.087920][   T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.143132][T12204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  385.252534][   T60] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  385.271233][ T5880] usb usb48-port1: unable to enumerate USB device
[  385.607772][T12206] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1739'.
[  385.929060][   T60] usb 10-1: USB disconnect, device number 2
[  386.080443][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  386.088203][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  386.092762][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  386.095842][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  386.098990][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  386.188004][T12210] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1741'.
[  386.196880][T12210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1741'.
[  386.610910][ T5809] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  386.632679][T12216] virt_wifi0 speed is unknown, defaulting to 1000
[  386.770960][ T5809] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  386.774996][ T5809] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  386.775266][T12216] lo speed is unknown, defaulting to 1000
[  386.777665][ T5809] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  386.783079][ T5809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  386.785916][ T5809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  386.789255][ T5809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  386.794235][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  386.797007][ T5809] usb 5-1: Product: syz
[  386.798308][ T5809] usb 5-1: Manufacturer: syz
[  386.809101][ T5809] cdc_wdm 5-1:1.0: skipping garbage
[  386.811313][ T5809] cdc_wdm 5-1:1.0: skipping garbage
[  386.826007][ T5809] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  386.827966][ T5809] cdc_wdm 5-1:1.0: Unknown control protocol
[  386.979296][   T42] audit: type=1326 audit(1786385475.104:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.1.1748" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0
[  386.994530][   T42] audit: type=1326 audit(1786385475.124:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.3.1736" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0
[  387.029237][   T60] usb 5-1: USB disconnect, device number 34
[  387.503575][T12241] (syz.3.1751,12241,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  387.506565][T12241] (syz.3.1751,12241,3):ocfs2_fill_super:1177 ERROR: status = -22
[  387.977281][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'.
[  387.980597][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'.
[  388.160394][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  388.164613][ T7681] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  388.170614][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  388.175899][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  388.179114][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  388.430525][T11538] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  388.433973][T11538] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  388.436781][T11538] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  388.439684][T11538] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  388.487197][ T5809] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  388.606521][T12275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1759'.
[  388.758707][ T5809] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  389.464910][ T5809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.468401][ T5809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.478246][T12295] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  389.480460][T12295] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  389.483285][ T5809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  389.486876][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.489226][T12295] vhci_hcd vhci_hcd.0: Device attached
[  389.505864][ T5809] usb 10-1: config 0 descriptor??
[  389.731055][ T5809] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  389.772530][   T60] usb 40-1: SetAddress Request (34) to port 0
[  389.780971][   T60] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd
[  389.868546][T12297] vhci_hcd: connection reset by peer
[  389.870812][T11538] vhci_hcd vhci_hcd.1: stop threads
[  389.872951][T11538] vhci_hcd vhci_hcd.1: release socket
[  389.875097][T11538] vhci_hcd vhci_hcd.1: disconnect device
[  390.190415][ T5837] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  390.240462][ T7681] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  390.245285][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  390.251566][ T7681] (NULL device *): queue 0 connect admin queue failed (-6).
[  390.255043][ T7681] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  390.257476][ T7681] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  390.341367][ T5837] usb 5-1: not running at top speed; connect to a high speed hub
[  390.344010][ T5837] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  390.348600][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  390.352574][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.359547][ T5837] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  390.366730][ T5837] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  390.569566][   T10] usb 5-1: USB disconnect, device number 35
[  390.577646][   T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  390.581263][   T10] garmin_gps 5-1:1.0: device disconnected
[  390.760487][ T5809] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[  390.911734][ T5809] usb 6-1: not running at top speed; connect to a high speed hub
[  390.914255][ T5809] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  390.918005][ T5809] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  390.921612][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.931093][ T5809] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  390.940926][ T5809] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  391.040597][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  391.117653][T12334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.139211][   T50] usb 6-1: USB disconnect, device number 46
[  391.143286][T12337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1768'.
[  391.158622][   T50] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  391.162488][   T50] garmin_gps 6-1:1.0: device disconnected
[  391.312364][T12337] 9p: Bad value for 'wfdno'
[  391.431446][T12337] FAT-fs (nbd0): unable to read boot sector
[  391.823631][ T5880] usb 10-1: USB disconnect, device number 3
[  392.331082][ T7681] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  392.335315][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  392.338075][ T7681] (NULL device *): queue 0 connect admin queue failed (-6).
[  392.340533][ T7681] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  392.342937][ T7681] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  392.850073][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'.
[  394.092579][T12407] netlink: 'syz.3.1791': attribute type 13 has an invalid length.
[  394.136600][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'.
[  394.146400][T12407] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  394.401752][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  394.407306][ T7693] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  394.410112][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  394.412739][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  394.415060][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  394.640403][ T5809] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  394.820368][ T5809] usb 10-1: Using ep0 maxpacket: 32
[  394.823179][ T5809] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  394.833122][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.835671][ T5809] usb 10-1: Product: syz
[  394.836995][ T5809] usb 10-1: Manufacturer: syz
[  394.838444][ T5809] usb 10-1: SerialNumber: syz
[  394.842189][ T5809] usb 10-1: config 0 descriptor??
[  394.857293][ T5809] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  394.862270][ T5809] dvb-usb: bulk message failed: -22 (4/0)
[  394.869541][ T5809] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  394.873665][ T5809] dvb-usb: bulk message failed: -22 (5/0)
[  394.875560][ T5809] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  394.881354][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  394.885476][ T5809] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  394.889254][ T5809] usb 10-1: media controller created
[  394.890494][   T60] usb 40-1: device descriptor read/8, error -110
[  394.926560][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  394.954583][ T5809] usb 10-1: selecting invalid altsetting 3
[  394.957465][ T5809] ttusb2: set interface to alts=3 failed
[  395.018795][ T5809] DVB: Unable to find symbol tda10086_attach()
[  395.025278][ T5809] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  395.033107][ T5809] dvb-usb: bulk message failed: -22 (4/0)
[  395.035716][ T5809] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  395.039857][ T5809] dvb-usb: bulk message failed: -22 (5/0)
[  395.042554][ T5809] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  395.046670][ T5809] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  395.185539][ T5809] usb 10-1: USB disconnect, device number 4
[  395.231950][ T5809] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  395.321575][   T60] usb usb40-port1: attempt power cycle
[  395.671175][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1807'.
[  395.677757][T12455] batman_adv: batadv0: Removing interface: macvlan2
[  395.684606][T12455] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.699576][T12457] input: syz0 as /devices/virtual/input/input22
[  395.757641][T12460] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1809'.
[  395.901926][   T60] usb usb40-port1: unable to enumerate USB device
[  395.989367][   T42] audit: type=1400 audit(1786385482.115:1035): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=12467 comm="syz.5.1813"
[  396.005540][T12479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.025557][T12479] syzkaller0: entered promiscuous mode
[  396.030104][T12479] syzkaller0: entered allmulticast mode
[  396.073667][T12479] tipc: Resetting bearer <eth:syzkaller0>
[  396.077045][T12478] tipc: Resetting bearer <eth:syzkaller0>
[  396.091793][T12478] tipc: Disabling bearer <eth:syzkaller0>
[  396.450431][   T50] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  396.480700][ T7696] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  396.486028][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  396.489879][ T7696] (NULL device *): queue 0 connect admin queue failed (-6).
[  396.493308][ T7696] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  396.496569][ T7696] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  396.611235][   T50] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  396.616267][   T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.622751][   T50] usb 5-1: config 0 descriptor??
[  396.774110][T12497] sctp: [Deprecated]: syz.5.1823 (pid 12497) Use of struct sctp_assoc_value in delayed_ack socket option.
[  396.774110][T12497] Use struct sctp_sack_info instead
[  397.098087][T12506] syz_tun: entered allmulticast mode
[  397.228217][T12514] netlink: 'syz.3.1829': attribute type 10 has an invalid length.
[  397.232674][T12514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.236289][T12514] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  397.245346][   T50] usb 5-1: Cannot set autoneg
[  397.257050][   T50] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  397.276341][   T50] usb 5-1: USB disconnect, device number 36
[  397.938214][T12528] fuse: root generation should be zero
[  398.483578][T12563] fuse: Unknown parameter 'groƒp_id'
[  398.560389][ T7681] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  398.564408][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  398.568628][ T7681] (NULL device *): queue 0 connect admin queue failed (-6).
[  398.571320][ T7681] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  398.576067][ T7681] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  400.424223][T12638] syz_tun: entered allmulticast mode
[  400.647561][ T7687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  400.652469][ T7696] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  400.655425][ T7687] (NULL device *): queue 0 connect admin queue failed (-6).
[  400.657629][ T7687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  400.661791][ T7687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  402.731038][ T7681] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  402.736694][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  402.737271][T12646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.739734][T12659] usb usb8: usbfs: process 12659 (syz.1.1882) did not claim interface 0 before use
[  402.743229][ T7681] (NULL device *): queue 0 connect admin queue failed (-6).
[  402.750486][ T7681] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  402.753344][ T7681] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  402.825402][T12661] virt_wifi0 speed is unknown, defaulting to 1000
[  402.993791][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'.
[  403.007306][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'.
[  403.011039][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'.
[  403.014912][T12661] lo speed is unknown, defaulting to 1000
[  403.111742][ T5880] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  403.190387][ T5883] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  403.280939][ T5880] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  403.284267][ T5880] usb 5-1: config 0 has no interfaces?
[  403.287656][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.290376][ T5880] usb 5-1: Product: syz
[  403.291851][ T5880] usb 5-1: Manufacturer: syz
[  403.293323][ T5880] usb 5-1: SerialNumber: syz
[  403.296363][ T5880] usb 5-1: config 0 descriptor??
[  403.340957][ T5883] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  403.344702][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.348006][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.352599][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  403.356965][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.364329][ T5883] usb 6-1: config 0 descriptor??
[  403.380814][ T5830] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  403.478102][   T42] audit: type=1400 audit(1786385489.605:1036): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=12698 comm="syz.3.1900"
[  403.513976][ T5880] usb 5-1: USB disconnect, device number 37
[  403.551425][ T5830] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  403.556079][ T5830] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  403.559171][ T5830] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  403.562755][ T5830] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  403.566685][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.575980][ T5830] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  403.578466][ T5830] usb 10-1: invalid MIDI out EP 0
[  403.629957][ T5830] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22
[  403.775624][ T5883] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd
[  403.782200][ T6349] usb 10-1: USB disconnect, device number 5
[  403.791257][ T5883] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  404.042721][ T5830] usb 6-1: USB disconnect, device number 47
[  404.320446][ T5883] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  404.481299][ T5883] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  404.485100][ T5883] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  404.487607][ T5883] usb 5-1: config 0 has no interface number 0
[  404.491354][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.493889][ T5883] usb 5-1: Product: syz
[  404.495225][ T5883] usb 5-1: Manufacturer: syz
[  404.496663][ T5883] usb 5-1: SerialNumber: syz
[  404.502426][ T5883] usb 5-1: config 0 descriptor??
[  404.588543][T12718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1906'.
[  404.710173][ T5883] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  404.718690][ T5883] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  404.723076][ T5883] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  404.725870][ T5883] usb 5-1: media controller created
[  404.737467][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  404.800355][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  404.804210][ T7696] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  404.809230][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  404.812433][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  404.814839][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  404.916637][ T5883] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  404.922653][T12727] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1909'.
[  404.948736][ T5883] usb 5-1: USB disconnect, device number 38
[  405.450056][T12734] input: syz0 as /devices/virtual/input/input24
[  405.537853][T12736] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  405.747023][T12742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1915'.
[  406.180435][ T5830] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  406.330888][ T5830] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  406.334669][ T5830] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  406.337541][ T5830] usb 10-1: config 0 has no interface number 0
[  406.342405][ T5830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.346029][ T5830] usb 10-1: Product: syz
[  406.347840][ T5830] usb 10-1: Manufacturer: syz
[  406.349905][ T5830] usb 10-1: SerialNumber: syz
[  406.356145][ T5830] usb 10-1: config 0 descriptor??
[  406.400565][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  406.572618][ T5830] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  406.577752][ T5830] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  406.581933][ T5830] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  406.584652][ T5830] usb 10-1: media controller created
[  406.592322][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  406.778476][ T5830] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  406.808515][ T5830] usb 10-1: USB disconnect, device number 6
[  406.882284][ T7692] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  406.886499][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  406.889233][ T7692] (NULL device *): queue 0 connect admin queue failed (-6).
[  406.891927][ T7692] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  406.894395][ T7692] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  407.550555][ T6048] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  407.710367][ T6048] usb 10-1: Using ep0 maxpacket: 8
[  407.713496][ T6048] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  407.717568][ T6048] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  407.720757][ T6048] usb 10-1: config 179 has no interface number 0
[  407.722756][ T6048] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  407.727224][ T6048] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  407.731959][ T6048] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  407.736532][ T6048] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  407.741525][ T6048] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  407.747040][ T6048] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.753698][T12789] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  408.018866][ T6048] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input25
[  408.164361][ T5883] usb 10-1: USB disconnect, device number 7
[  408.164455][    C3] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  408.169721][    C3] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[  408.250408][ T5830] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[  408.380426][ T5837] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  408.401456][ T5830] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  408.405244][ T5830] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  408.408626][ T5830] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  408.412694][ T5830] usb 6-1: config 0 interface 0 has no altsetting 0
[  408.414848][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.419986][ T5830] usb 6-1: config 0 descriptor??
[  408.531024][ T5837] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  408.535702][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  408.539721][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  408.543640][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  408.547395][ T5837] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  408.552743][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.835079][ T5830] input: HID 04fc:05d8 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:04FC:05D8.000C/input/input26
[  408.919799][ T5830] sunplus 0003:04FC:05D8.000C: input,hidraw0: USB HID v80.00 Joystick [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0
[  408.961188][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  408.966001][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  408.970688][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  408.973008][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  408.975748][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  408.980420][ T5838] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  409.031872][ T5883] usb 6-1: USB disconnect, device number 48
[  409.130521][ T5838] usb 10-1: Using ep0 maxpacket: 16
[  409.133297][ T5838] usb 10-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  409.137191][ T5838] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  409.141274][ T5838] usb 10-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  409.145367][ T5838] usb 10-1: config 0 interface 0 has no altsetting 0
[  409.147547][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.151549][ T5838] usb 10-1: config 0 descriptor??
[  409.153742][T12799] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  409.576069][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.578236][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.580723][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.582954][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.585401][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.587687][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.589858][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.592265][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.594476][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.597098][ T5838] samsung 0003:0419:0001.000D: unknown main item tag 0x0
[  409.617794][ T5837] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1
[  409.617907][ T5838] input: HID 0419:0001 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0419:0001.000D/input/input27
[  409.636700][ T5838] samsung 0003:0419:0001.000D: input,hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0
[  409.771943][ T6349] usb 10-1: USB disconnect, device number 8
[  409.822258][ T6048] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  409.834079][ T5837] Console: switching to colour frame buffer device 128x48
[  409.840928][ T5837] gud 5-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  409.845111][ T5837] usb 5-1: USB disconnect, device number 39
[  409.856257][ T5837] Console: switching to colour dummy device 80x25
[  409.980406][ T6048] usb 6-1: Using ep0 maxpacket: 16
[  409.983039][ T6048] usb 6-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00
[  409.986987][ T6048] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.990381][ T6048] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  409.995069][ T6048] usb 6-1: config 0 interface 0 has no altsetting 0
[  409.997725][ T6048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.002433][ T6048] usb 6-1: config 0 descriptor??
[  410.417074][ T6048] input: HID 044f:b300 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:044F:B300.000E/input/input28
[  410.540335][ T5830] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  410.553618][ T6048] thrustmaster 0003:044F:B300.000E: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b300] on usb-dummy_hcd.1-1/input0
[  410.567571][ T6048] thrustmaster 0003:044F:B300.000E: can't find FF field in output reports
[  410.570383][   T60] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  410.608906][ T5880] usb 6-1: USB disconnect, device number 49
[  410.710544][ T5830] usb 5-1: Using ep0 maxpacket: 16
[  410.713183][ T5830] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  410.717121][ T5830] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.720862][ T5830] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.724402][ T5830] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  410.729137][ T5830] usb 5-1: config 0 interface 0 has no altsetting 0
[  410.732128][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.736999][   T60] usb 10-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  410.741518][ T5830] usb 5-1: config 0 descriptor??
[  410.746053][   T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.752117][   T60] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  410.757265][   T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.763656][   T60] usb 10-1: config 0 descriptor??
[  411.040474][ T7692] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  411.044636][ T7680] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  411.048270][ T7692] (NULL device *): queue 0 connect admin queue failed (-6).
[  411.050598][ T7692] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  411.052854][ T7692] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  411.155734][ T5830] input: HID 0c12:0005 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0C12:0005.000F/input/input29
[  411.178173][ T5830] zeroplus 0003:0C12:0005.000F: input,hidraw0: USB HID v0.00 Joystick [HID 0c12:0005] on usb-dummy_hcd.0-1/input0
[  411.182993][ T5830] zeroplus 0003:0C12:0005.000F: missing HID_OUTPUT_REPORT 0
[  411.195720][   T60] input: HID 1020:0006 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:1020:0006.0010/input/input30
[  411.217757][   T60] belkin 0003:1020:0006.0010: input,hidraw1: USB HID v0.00 Joystick [HID 1020:0006] on usb-dummy_hcd.5-1/input0
[  411.351498][   T10] usb 5-1: USB disconnect, device number 40
[  411.390619][ T5809] usb 10-1: USB disconnect, device number 9
[  411.394346][ T5838] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  411.551051][ T5838] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  411.555687][ T5838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  411.559338][ T5838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  411.562458][ T5838] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  411.566374][ T5838] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  411.571426][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.130436][ T6048] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  412.170458][   T60] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[  412.280960][ T6048] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  412.284735][ T6048] usb 5-1: too many configurations: 13, using maximum allowed: 8
[  412.288433][ T6048] usb 5-1: config 0 has no interfaces?
[  412.291672][ T6048] usb 5-1: config 0 has no interfaces?
[  412.294470][ T6048] usb 5-1: config 0 has no interfaces?
[  412.297279][ T6048] usb 5-1: config 0 has no interfaces?
[  412.300025][ T6048] usb 5-1: config 0 has no interfaces?
[  412.303209][ T6048] usb 5-1: config 0 has no interfaces?
[  412.306008][ T6048] usb 5-1: config 0 has no interfaces?
[  412.308793][ T6048] usb 5-1: config 0 has no interfaces?
[  412.313179][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.316500][ T6048] usb 5-1: Product: syz
[  412.318227][ T6048] usb 5-1: Manufacturer: syz
[  412.320189][ T6048] usb 5-1: SerialNumber: syz
[  412.324752][ T6048] usb 5-1: config 0 descriptor??
[  412.332279][   T60] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  412.335716][   T60] usb 10-1: config 0 has no interfaces?
[  412.339252][   T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.342594][   T60] usb 10-1: Product: syz
[  412.344385][   T60] usb 10-1: Manufacturer: syz
[  412.346346][   T60] usb 10-1: SerialNumber: syz
[  412.350834][   T60] usb 10-1: config 0 descriptor??
[  412.530936][ T6048] usb 5-1: USB disconnect, device number 41
[  412.559484][T12821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.564428][T12821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.569357][ T5809] usb 10-1: USB disconnect, device number 10
[  412.608769][ T5838] [drm] Initialized gud 1.0.0 for 6-1:1.0 on minor 1
[  412.831003][ T5838] Console: switching to colour frame buffer device 128x48
[  412.833910][ T5838] gud 6-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  412.844942][ T5838] usb 6-1: USB disconnect, device number 50
[  412.852959][ T5838] Console: switching to colour dummy device 80x25
[  413.010443][   T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  413.120564][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  413.124752][ T7696] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  413.128635][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  413.131203][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  413.133641][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  413.160403][   T10] usb 10-1: Using ep0 maxpacket: 32
[  413.163878][   T10] usb 10-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice= 0.00
[  413.168524][   T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  413.172463][   T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  413.177594][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.180447][   T10] usb 10-1: Product: syz
[  413.181771][   T10] usb 10-1: Manufacturer: syz
[  413.183313][   T10] usb 10-1: SerialNumber: syz
[  413.190504][ T6048] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  413.340410][ T6048] usb 5-1: Using ep0 maxpacket: 32
[  413.345849][ T6048] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  413.353050][ T6048] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  413.357906][ T6048] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  413.365188][ T6048] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  413.370014][ T6048] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  413.383255][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.386684][ T6048] usb 5-1: Product: syz
[  413.388406][ T6048] usb 5-1: Manufacturer: syz
[  413.393166][ T6048] usb 5-1: SerialNumber: syz
[  413.414118][    C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  413.432811][ T6048] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input31
[  413.620417][ T6048] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  413.623915][ T6048]  (id 0x00)
[  413.690405][ T6048] rc_core: IR keymap rc-imon-pad not found
[  413.693076][ T6048] Registered IR keymap rc-empty
[  413.698579][ T6048] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  413.702882][ T6048] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  413.830970][ T6048] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0
[  413.836671][ T6048] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input32
[  413.847650][ T6048] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:42> initialized
[  414.009015][ T6048] usb 5-1: USB disconnect, device number 42
[  414.452143][ T5837] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  414.611412][ T5837] usb 6-1: not running at top speed; connect to a high speed hub
[  414.614382][ T5837] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  414.618204][ T5837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  414.622079][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.628716][ T5837] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  414.634525][ T5837] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  414.835246][ T5837] usb 6-1: USB disconnect, device number 51
[  414.842464][ T5837] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  414.850951][ T5837] garmin_gps 6-1:1.0: device disconnected
[  414.934855][   T50] usb 10-1: USB disconnect, device number 11
[  415.200473][ T7693] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  415.205651][ T7687] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  415.209278][ T7693] (NULL device *): queue 0 connect admin queue failed (-6).
[  415.212781][ T7693] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  415.215851][ T7693] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  415.803760][T12858] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  415.805885][T12858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  415.810916][T12858] vhci_hcd vhci_hcd.0: Device attached
[  415.845064][ T7693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.848742][ T7693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.012066][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1956'.
[  416.114366][   T60] usb 40-1: SetAddress Request (38) to port 0
[  416.116467][   T60] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd
[  416.125061][T12863] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.132487][T12863] bridge_slave_1 (unregistering): left allmulticast mode
[  416.134906][T12863] bridge_slave_1 (unregistering): left promiscuous mode
[  416.137283][T12863] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.467875][T12859] vhci_hcd: connection reset by peer
[  416.469890][T11538] vhci_hcd vhci_hcd.1: stop threads
[  416.472030][T11538] vhci_hcd vhci_hcd.1: release socket
[  416.474198][T11538] vhci_hcd vhci_hcd.1: disconnect device
[  417.014261][T12874] tmpfs: Bad value for 'mpol'
[  417.170317][T12875] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  417.172452][T12875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  417.247376][T12875] vhci_hcd vhci_hcd.0: Device attached
[  417.280445][ T7696] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  417.285790][ T7693] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  417.290484][ T7696] (NULL device *): queue 0 connect admin queue failed (-6).
[  417.293559][ T7696] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  417.296939][ T7696] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  417.450408][ T5830] usb 48-1: SetAddress Request (6) to port 0
[  417.452882][ T5830] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd
[  417.600747][T12876] vhci_hcd: connection reset by peer
[  417.603614][ T5781] vhci_hcd vhci_hcd.5: stop threads
[  417.605984][ T5781] vhci_hcd vhci_hcd.5: release socket
[  417.608437][ T5781] vhci_hcd vhci_hcd.5: disconnect device
[  417.700957][   T24] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  417.871989][   T24] usb 6-1: not running at top speed; connect to a high speed hub
[  417.874679][   T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  417.879044][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  417.883549][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.896742][   T24] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  417.908889][   T24] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  418.114462][   T50] usb 6-1: USB disconnect, device number 52
[  418.126405][   T50] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  418.131818][   T50] garmin_gps 6-1:1.0: device disconnected
[  418.427951][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1966'.
[  418.880959][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'.
[  419.103441][T12926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1970'.
[  419.374256][ T7692] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  419.381024][ T7693] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  419.384677][ T7692] (NULL device *): queue 0 connect admin queue failed (-6).
[  419.387046][ T7692] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  419.389446][ T7692] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  419.764274][T12939] jffs2: notice: (12939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  419.851631][T12945] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  419.853745][T12945] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  419.862496][T12945] vhci_hcd vhci_hcd.0: Device attached
[  420.080451][ T5880] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  420.241440][ T5880] usb 5-1: not running at top speed; connect to a high speed hub
[  420.244064][ T5880] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  420.248606][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  420.252976][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.260651][ T5880] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  420.267385][ T5880] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  420.468917][   T10] usb 5-1: USB disconnect, device number 43
[  420.479222][   T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  420.485474][T12946] vhci_hcd: connection closed
[  420.485756][T11538] vhci_hcd vhci_hcd.1: stop threads
[  420.486235][   T10] garmin_gps 5-1:1.0: device disconnected
[  420.487427][T11538] vhci_hcd vhci_hcd.1: release socket
[  420.493545][T11538] vhci_hcd vhci_hcd.1: disconnect device
[  421.148090][T12962] 9p: Bad value for 'rfdno'
[  421.200371][   T60] usb 40-1: device descriptor read/8, error -110
[  421.405455][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1985'.
[  421.440441][ T7693] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  421.444435][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  421.448532][ T7693] (NULL device *): queue 0 connect admin queue failed (-6).
[  421.453499][ T7693] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  421.455936][ T7693] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  421.590921][   T60] usb usb40-port1: attempt power cycle
[  422.173158][   T60] usb usb40-port1: unable to enumerate USB device
[  422.377166][T12988] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  422.379284][T12988] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  422.382125][T12988] vhci_hcd vhci_hcd.0: Device attached
[  422.480411][ T5830] usb 48-1: device descriptor read/8, error -110
[  422.650426][   T60] usb 38-1: SetAddress Request (42) to port 0
[  422.653166][   T60] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd
[  422.925916][ T5830] usb usb48-port1: attempt power cycle
[  422.969145][T12989] vhci_hcd: connection reset by peer
[  422.971109][ T5807] vhci_hcd vhci_hcd.0: stop threads
[  422.972774][ T5807] vhci_hcd vhci_hcd.0: release socket
[  422.974663][ T5807] vhci_hcd vhci_hcd.0: disconnect device
[  423.520396][ T7687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  423.528290][ T7679] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  423.536396][ T7687] (NULL device *): queue 0 connect admin queue failed (-6).
[  423.539084][ T7687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  423.545991][ T7687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  423.572711][ T5830] usb usb48-port1: unable to enumerate USB device
[  423.637799][T13009] pch_udc 0000:00:03.0: dma_pool_destroy data_requests busy
[  423.642938][T13009] pch_udc 0000:00:03.0: dma_pool_destroy setup requests busy
[  423.800073][T13013] comedi comedi3: comedi_config --init_data is deprecated
[  423.803604][T13013] jffs2: notice: (13013) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  423.896726][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'.
[  424.779592][T13042] FAULT_INJECTION: forcing a failure.
[  424.779592][T13042] name failslab, interval 1, probability 0, space 0, times 0
[  424.785148][T13042] CPU: 0 UID: 0 PID: 13042 Comm: syz.1.2006 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.785176][T13042] Tainted: [L]=SOFTLOCKUP
[  424.785182][T13042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  424.785208][T13042] Call Trace:
[  424.785215][T13042]  <TASK>
[  424.785224][T13042]  dump_stack_lvl+0x100/0x190
[  424.785357][T13042]  should_fail_ex.cold+0x5/0xa
[  424.785391][T13042]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  424.785451][T13042]  should_failslab+0xc2/0x120
[  424.785506][T13042]  kmem_cache_alloc_noprof+0x91/0x6a0
[  424.785529][T13042]  ? skb_clone+0x190/0x400
[  424.785586][T13042]  skb_clone+0x190/0x400
[  424.785611][T13042]  netlink_deliver_tap+0xaed/0xcc0
[  424.785649][T13042]  netlink_unicast+0x62b/0x850
[  424.785672][T13042]  ? __pfx_netlink_unicast+0x10/0x10
[  424.785699][T13042]  netlink_sendmsg+0x8b0/0xda0
[  424.785725][T13042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.785750][T13042]  ? apparmor_socket_sendmsg+0x15b/0x270
[  424.785784][T13042]  ____sys_sendmsg+0xa4d/0xbe0
[  424.785800][T13042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.785822][T13042]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.785853][T13042]  ___sys_sendmsg+0x190/0x1e0
[  424.785877][T13042]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.785910][T13042]  ? find_held_lock+0x2b/0x80
[  424.785966][T13042]  __sys_sendmsg+0x160/0x210
[  424.785992][T13042]  ? __pfx___sys_sendmsg+0x10/0x10
[  424.786024][T13042]  ? __pfx_ksys_write+0x10/0x10
[  424.786052][T13042]  __do_fast_syscall_32+0xe7/0x970
[  424.786111][T13042]  ? lockdep_hardirqs_on+0x78/0x100
[  424.786138][T13042]  do_fast_syscall_32+0x32/0x70
[  424.786164][T13042]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  424.786189][T13042] RIP: 0023:0xf706efec
[  424.786212][T13042] Code: Unable to access opcode bytes at 0xf706efc2.
[  424.786231][T13042] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  424.786249][T13042] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  424.786260][T13042] RDX: 0000000020000014 RSI: 0000000000000000 RDI: 0000000000000000
[  424.786270][T13042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  424.786281][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  424.786290][T13042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  424.786315][T13042]  </TASK>
[  424.786446][T13042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2006'.
[  424.970418][   T50] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  425.121232][   T50] usb 5-1: not running at top speed; connect to a high speed hub
[  425.123815][   T50] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  425.127433][   T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  425.131527][   T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.147152][   T50] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  425.155373][   T50] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  425.360174][   T50] usb 5-1: USB disconnect, device number 44
[  425.371367][   T50] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  425.375629][   T50] garmin_gps 5-1:1.0: device disconnected
[  425.600434][ T7687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  425.605553][ T7679] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  425.609287][ T7687] (NULL device *): queue 0 connect admin queue failed (-6).
[  425.612275][ T7687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  425.615295][ T7687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  426.368644][T13072] (syz.0.2016,13072,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  426.372570][T13072] (syz.0.2016,13072,3):ocfs2_fill_super:1177 ERROR: status = -22
[  426.519621][T13075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2017'.
[  426.847599][T13080] fuse: Bad value for 'fd'
[  427.272233][T13091] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  427.274271][T13091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  427.288456][T13091] vhci_hcd vhci_hcd.0: Device attached
[  427.640887][ T5830] usb 48-1: SetAddress Request (10) to port 0
[  427.802591][ T7693] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  427.856710][ T7679] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  427.859946][ T7693] (NULL device *): queue 0 connect admin queue failed (-6).
[  427.862525][ T7693] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  427.865203][ T7693] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  427.915587][   T60] usb 38-1: device descriptor read/8, error -110
[  427.917886][ T5830] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd
[  428.003364][T13092] vhci_hcd: connection reset by peer
[  428.006564][ T5781] vhci_hcd vhci_hcd.5: stop threads
[  428.008212][ T5781] vhci_hcd vhci_hcd.5: release socket
[  428.010526][ T5781] vhci_hcd vhci_hcd.5: disconnect device
[  428.228316][T13106] (syz.3.2026,13106,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  428.231209][T13106] (syz.3.2026,13106,3):ocfs2_fill_super:1177 ERROR: status = -22
[  428.363175][   T60] usb usb38-port1: attempt power cycle
[  428.538713][T13113] 
[  428.539528][T13113] ======================================================
[  428.541684][T13113] WARNING: possible circular locking dependency detected
[  428.543922][T13113] syzkaller #0 Tainted: G             L     
[  428.545873][T13113] ------------------------------------------------------
[  428.548077][T13113] syz.0.2028/13113 is trying to acquire lock:
[  428.550003][T13113] ffff888026a52080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  428.552935][T13113] 
[  428.552935][T13113] but task is already holding lock:
[  428.555207][T13113] ffff88805d1b6860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80
[  428.557806][T13113] 
[  428.557806][T13113] which lock already depends on the new lock.
[  428.557806][T13113] 
[  428.561013][T13113] 
[  428.561013][T13113] the existing dependency chain (in reverse order) is:
[  428.563853][T13113] 
[  428.563853][T13113] -> #3 (&pipe->mutex){+.+.}-{4:4}:
[  428.566171][T13113]        lock_acquire+0x1b9/0x370
[  428.567785][T13113]        __mutex_lock+0x1a4/0x1bd0
[  428.569305][T13113]        pipe_lock+0x69/0x80
[  428.570658][T13113]        iter_file_splice_write+0x1fd/0x10b0
[  428.572540][T13113]        do_splice+0x109c/0x1f90
[  428.574138][T13113]        __do_splice+0x33b/0x370
[  428.575718][T13113]        __ia32_sys_splice+0x189/0x250
[  428.577448][T13113]        __do_fast_syscall_32+0xe7/0x970
[  428.579237][T13113]        do_fast_syscall_32+0x32/0x70
[  428.580943][T13113]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  428.583157][T13113] 
[  428.583157][T13113] -> #2 (sb_writers#5){.+.+}-{0:0}:
[  428.585502][T13113]        lock_acquire+0x1b9/0x370
[  428.587203][T13113]        mnt_want_write+0x6f/0x410
[  428.588776][T13113]        ovl_create_object+0x12b/0x3b0
[  428.590458][T13113]        path_openat+0x341f/0x4280
[  428.592055][T13113]        do_file_open+0x20e/0x430
[  428.593673][T13113]        do_sys_openat2+0x10f/0x1e0
[  428.595321][T13113]        __ia32_compat_sys_openat+0x12d/0x210
[  428.597255][T13113]        __do_fast_syscall_32+0xe7/0x970
[  428.599035][T13113]        do_fast_syscall_32+0x32/0x70
[  428.600731][T13113]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  428.602887][T13113] 
[  428.602887][T13113] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[  428.605625][T13113]        lock_acquire+0x1b9/0x370
[  428.607217][T13113]        down_read+0x99/0x4c0
[  428.608719][T13113]        lookup_slow+0x42/0x70
[  428.610250][T13113]        path_lookupat+0x5e8/0xc40
[  428.611905][T13113]        filename_lookup+0x202/0x590
[  428.613550][T13113]        kern_path+0x37/0x50
[  428.614991][T13113]        lookup_bdev+0xd8/0x280
[  428.616535][T13113]        resume_store+0x1d6/0x460
[  428.618130][T13113]        kobj_attr_store+0x58/0x80
[  428.619768][T13113]        sysfs_kf_write+0xf2/0x150
[  428.621409][T13113]        kernfs_fop_write_iter+0x3e0/0x5f0
[  428.623278][T13113]        iter_file_splice_write+0x830/0x10b0
[  428.625177][T13113]        direct_splice_actor+0x192/0x690
[  428.626942][T13113]        splice_direct_to_actor+0x345/0xa30
[  428.628802][T13113]        do_splice_direct+0x174/0x240
[  428.630532][T13113]        do_sendfile+0xadc/0xe20
[  428.632430][T13113]        __ia32_compat_sys_sendfile+0x1e5/0x220
[  428.634419][T13113]        __do_fast_syscall_32+0xe7/0x970
[  428.636216][T13113]        do_fast_syscall_32+0x32/0x70
[  428.637892][T13113]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  428.640031][T13113] 
[  428.640031][T13113] -> #0 (&of->mutex){+.+.}-{4:4}:
[  428.642271][T13113]        check_prev_add+0xeb/0xe60
[  428.643903][T13113]        __lock_acquire+0x136c/0x1a40
[  428.645592][T13113]        lock_acquire+0x1b9/0x370
[  428.647232][T13113]        __mutex_lock+0x1a4/0x1bd0
[  428.648841][T13113]        kernfs_fop_write_iter+0x2c2/0x5f0
[  428.650666][T13113]        iter_file_splice_write+0x830/0x10b0
[  428.652538][T13113]        do_splice+0x109c/0x1f90
[  428.654099][T13113]        __do_splice+0x33b/0x370
[  428.655663][T13113]        __ia32_sys_splice+0x189/0x250
[  428.657362][T13113]        __do_fast_syscall_32+0xe7/0x970
[  428.659123][T13113]        do_fast_syscall_32+0x32/0x70
[  428.660802][T13113]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  428.662931][T13113] 
[  428.662931][T13113] other info that might help us debug this:
[  428.662931][T13113] 
[  428.666083][T13113] Chain exists of:
[  428.666083][T13113]   &of->mutex --> sb_writers#5 --> &pipe->mutex
[  428.666083][T13113] 
[  428.669782][T13113]  Possible unsafe locking scenario:
[  428.669782][T13113] 
[  428.672079][T13113]        CPU0                    CPU1
[  428.673762][T13113]        ----                    ----
[  428.675440][T13113]   lock(&pipe->mutex);
[  428.676747][T13113]                                lock(sb_writers#5);
[  428.678754][T13113]                                lock(&pipe->mutex);
[  428.680739][T13113]   lock(&of->mutex);
[  428.681964][T13113] 
[  428.681964][T13113]  *** DEADLOCK ***
[  428.681964][T13113] 
[  428.684482][T13113] 2 locks held by syz.0.2028/13113:
[  428.686106][T13113]  #0: ffff88804bbac450 (sb_writers#7){.+.+}-{0:0}, at: __do_splice+0x33b/0x370
[  428.688908][T13113]  #1: ffff88805d1b6860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80
[  428.691610][T13113] 
[  428.691610][T13113] stack backtrace:
[  428.693470][T13113] CPU: 1 UID: 0 PID: 13113 Comm: syz.0.2028 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  428.693488][T13113] Tainted: [L]=SOFTLOCKUP
[  428.693492][T13113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  428.693499][T13113] Call Trace:
[  428.693506][T13113]  <TASK>
[  428.693512][T13113]  dump_stack_lvl+0x100/0x190
[  428.693526][T13113]  print_circular_bug.cold+0x178/0x1c7
[  428.693545][T13113]  check_noncircular+0x146/0x160
[  428.693566][T13113]  check_prev_add+0xeb/0xe60
[  428.693584][T13113]  __lock_acquire+0x136c/0x1a40
[  428.693596][T13113]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  428.693612][T13113]  lock_acquire+0x1b9/0x370
[  428.693622][T13113]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  428.693636][T13113]  ? __pfx___might_resched+0x10/0x10
[  428.693655][T13113]  __mutex_lock+0x1a4/0x1bd0
[  428.693671][T13113]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  428.693684][T13113]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  428.693697][T13113]  ? __asan_memcpy+0x3c/0x60
[  428.693710][T13113]  ? __pfx___mutex_lock+0x10/0x10
[  428.693726][T13113]  ? __pfx__copy_from_iter+0x10/0x10
[  428.693747][T13113]  ? __kmalloc_noprof+0x343/0x820
[  428.693761][T13113]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  428.693775][T13113]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  428.693788][T13113]  kernfs_fop_write_iter+0x2c2/0x5f0
[  428.693804][T13113]  iter_file_splice_write+0x830/0x10b0
[  428.693819][T13113]  ? __pfx_iter_file_splice_write+0x10/0x10
[  428.693832][T13113]  ? __pfx___might_resched+0x10/0x10
[  428.693852][T13113]  ? __pfx_iter_file_splice_write+0x10/0x10
[  428.693864][T13113]  do_splice+0x109c/0x1f90
[  428.693876][T13113]  ? __lock_acquire+0x49f/0x1a40
[  428.693885][T13113]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  428.693901][T13113]  ? __pfx_do_splice+0x10/0x10
[  428.693912][T13113]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  428.693923][T13113]  ? find_held_lock+0x2b/0x80
[  428.693939][T13113]  __do_splice+0x33b/0x370
[  428.693951][T13113]  ? __pfx___do_splice+0x10/0x10
[  428.693964][T13113]  __ia32_sys_splice+0x189/0x250
[  428.693977][T13113]  __do_fast_syscall_32+0xe7/0x970
[  428.693994][T13113]  do_fast_syscall_32+0x32/0x70
[  428.694010][T13113]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  428.694024][T13113] RIP: 0023:0xf7f93fec
[  428.694039][T13113] Code: Unable to access opcode bytes at 0xf7f93fc2.
[  428.694045][T13113] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 0000000000000139
[  428.694056][T13113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  428.694062][T13113] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe2
[  428.694069][T13113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  428.694075][T13113] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  428.694081][T13113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  428.694092][T13113]  </TASK>
[  429.091022][   T60] usb usb38-port1: unable to enumerate USB device
[  429.930349][ T7680] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  429.934720][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  429.937902][ T7680] (NULL device *): queue 0 connect admin queue failed (-6).
[  429.940109][ T7680] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  429.942445][ T7680] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  432.001096][ T7693] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  432.005545][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  432.008556][ T7693] (NULL device *): queue 0 connect admin queue failed (-6).
[  432.011152][ T7693] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  432.013905][ T7693] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  432.960455][ T5830] usb 48-1: device descriptor read/8, error -110
[  433.350922][ T5830] usb usb48-port1: attempt power cycle
[  433.910962][ T5830] usb usb48-port1: unable to enumerate USB device
[  434.080350][ T7693] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  434.084880][ T7692] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  434.087604][ T7693] (NULL device *): queue 0 connect admin queue failed (-6).
[  434.089791][ T7693] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  434.092173][ T7693] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  436.160676][ T7687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  436.164809][ T7679] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  436.167715][ T7687] (NULL device *): queue 0 connect admin queue failed (-6).
[  436.170077][ T7687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  436.172871][ T7687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  436.490441][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  438.240487][ T7687] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  438.245703][ T7693] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  438.248804][ T7687] (NULL device *): queue 0 connect admin queue failed (-6).
[  438.251247][ T7687] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  438.253630][ T7687] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds