last executing test programs:

35m59.656992742s ago: executing program 32 (id=71):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r2=>0x0})
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x40}, 0xff, 0x9, 0x3, 0x7, 0x0, 0x0, 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a00000004"], 0x44}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r3, 0x0, r2})

35m54.551167657s ago: executing program 33 (id=85):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
socket$inet6(0xa, 0x2, 0x0)
fanotify_init(0x200, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521}, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

35m46.889793049s ago: executing program 34 (id=99):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000040))

35m42.659851465s ago: executing program 35 (id=111):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x121102, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8970, &(0x7f0000001040)={'gre0\x00', 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000640)={0xfffffeda})
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}})

35m38.911965738s ago: executing program 36 (id=120):
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x71, 0x101a, r0, 0x0)
mknod(0x0, 0x8001420, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
writev(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}, {&(0x7f00000001c0)="19d6af52413ca6a276cb3d5256e3825fd63e7e8cafff571079ced64393b641", 0x1f}], 0x2}], 0x1, 0x40800)
splice(r7, 0x0, r5, 0x0, 0x7ffff040, 0x1200000000000000)

24m39.587207258s ago: executing program 37 (id=1603):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r2)

20m47.497679786s ago: executing program 6 (id=2136):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x400, 0x3, 0x17}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000480)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x38c5, 0x2000000, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0})
io_uring_enter(r1, 0x3495, 0x8cb5, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2, 0x6, 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)

20m47.400606271s ago: executing program 8 (id=2137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfffffffb}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
uname(0xfffffffffffffffc)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
process_vm_writev(0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000440)=""/245, 0xf5}], 0x4, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
syz_io_uring_setup(0x124, &(0x7f00000000c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340), 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r7=>0x0, 0x0, <r8=>0x0], &(0x7f0000000040), 0x3, r6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2009}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

20m46.077883112s ago: executing program 6 (id=2140):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00')
pread64(r6, &(0x7f0000000600)=""/4091, 0xffb, 0x12c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
timer_create(0x0, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=@filename='\x00', 0x0, &(0x7f0000000040)='ubifs\x00', 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xff7f000000000000, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0)

20m44.626491577s ago: executing program 6 (id=2141):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001})
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a8000006000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd)
fcntl$notify(r6, 0x402, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

20m43.408493902s ago: executing program 0 (id=2142):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

20m42.87374107s ago: executing program 0 (id=2145):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x541b, 0x0)
futex(&(0x7f000000cffc)=0xfffffff2, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r5 = io_uring_setup(0xfc6, &(0x7f0000000180))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier')
close_range(r5, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x14ef, 0x5f72, 0x48, &(0x7f0000000040)={[0x2]}, 0x8)

20m42.748384495s ago: executing program 8 (id=2146):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xe0}], 0x1}, 0x40040)
socket(0x10, 0x803, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0x2}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="25130005", @ANYRES32, @ANYBLOB="000000000000000006490200020000001835000005000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0xebb3, 0x0, 0x0, 0x41000, 0x6a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1, 0x1], &(0x7f0000000240)=[{0x2, 0x3, 0x4, 0xc}, {0x2, 0x5, 0x0, 0x9}, {0x0, 0x3, 0x10, 0xb}, {0x1, 0x4, 0xa, 0x4}], 0x10, 0x3}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)={0x20000000})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$tipc(0x1e, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048c1}, 0x4054)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)

20m41.467392072s ago: executing program 0 (id=2147):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)="2ffe217b35ca07784393", 0xa}, {0x0}], 0x2, &(0x7f0000000580)}, 0x24000000)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)=""/250, 0xfa}], 0x1}, 0x10100)

20m41.023683945s ago: executing program 0 (id=2149):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e28, 0x0, @mcast2, 0x7}, 0x1c)
socket(0x25, 0x800, 0x20000002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x17e, &(0x7f0000000500)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xe, 0x1, '*-\\%[*!]-\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000830}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x45, 0x0, 0x42, 0x0, 0x2})
bind$inet(r5, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x20008881, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6)

20m40.889983393s ago: executing program 8 (id=2150):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$setopts(0x4206, r0, 0x3, 0x42)
bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000ea4da6edc46c92f98fa48495a2a0e300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/25], 0x48)
ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000080), 0x1004)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0x41, 0x2, 0x0, "88391a84ed441d2486917d411bdd85e00f2f8a9bf72fb7e5d517db70538b3945905ec288f0eb7b104049c25387cdf6564600b902e2e7d74b3c7698494b8b"}]}}}}}}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1})
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

20m38.516697802s ago: executing program 6 (id=2155):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, <r5=>r3, 0x80000})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf})
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080)
r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5})

20m37.064138941s ago: executing program 0 (id=2158):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfffffffb}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
uname(0xfffffffffffffffc)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
process_vm_writev(0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/35, 0x23}, {0x0}, {&(0x7f0000000440)=""/245, 0xf5}], 0x5, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
syz_io_uring_setup(0x124, &(0x7f00000000c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340), 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r7=>0x0, 0x0, <r8=>0x0], &(0x7f0000000040), 0x3, r6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2009}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

20m36.652557492s ago: executing program 8 (id=2161):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

20m33.555405958s ago: executing program 6 (id=2165):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0))
ppoll(&(0x7f0000000080)=[{r0, 0x5300}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
getsockname$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
timer_create(0x7, 0x0, &(0x7f0000bbdffc))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="010029bd70540edbdf0a0700000008000300", @ANYRES32=r4, @ANYBLOB="05005300010000000a00180003030303030300000a00180003030303030300001400040076657468315f746f5f626f6e640000000a00180003030303030300000400cc000c00178004000100040005001c00e7002d5f38c2d64768338ac308daa4eb6d7684350f20edce035c14001780040003000400060004000300040002001c00e70001c4d697533f6a8676a177c456ace39910ae8e77cd9ac8c6280017800400020004000200040004000400010004000200040001000400020004000200040005000a00e800ffffffffffff00"], 0x108}, 0x1, 0x0, 0x0, 0x400c010}, 0x40)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40d83, 0x0)
epoll_create1(0x80000)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

20m33.392778217s ago: executing program 8 (id=2166):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}})

20m32.791124758s ago: executing program 8 (id=2168):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001})
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a8000006000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd)
fcntl$notify(r6, 0x402, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

20m32.514593233s ago: executing program 6 (id=2170):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e28, 0x0, @mcast2, 0x7}, 0x1c)
socket(0x25, 0x800, 0x20000002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x17e, &(0x7f0000000500)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xe, 0x1, '*-\\%[*!]-\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000830}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x45, 0x0, 0x42, 0x0, 0x2})
bind$inet(r5, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x20008881, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6)

20m31.772584208s ago: executing program 0 (id=2171):
symlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000017c0)='./file0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000040001, 0xfa11, 0xffffffff}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES8, @ANYRES16, @ANYRES32=r0, @ANYRES64], 0x20)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000180), 0x1, 0x4040800)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000001)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000100000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40851)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
userfaultfd(0x800)

20m16.467581761s ago: executing program 38 (id=2168):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001})
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a8000006000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd)
fcntl$notify(r6, 0x402, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

20m16.241618094s ago: executing program 39 (id=2171):
symlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000017c0)='./file0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000040001, 0xfa11, 0xffffffff}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES8, @ANYRES16, @ANYRES32=r0, @ANYRES64], 0x20)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000180), 0x1, 0x4040800)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000001)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000100000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40851)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
userfaultfd(0x800)

20m16.079082218s ago: executing program 40 (id=2170):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e28, 0x0, @mcast2, 0x7}, 0x1c)
socket(0x25, 0x800, 0x20000002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x17e, &(0x7f0000000500)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xe, 0x1, '*-\\%[*!]-\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000830}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x45, 0x0, 0x42, 0x0, 0x2})
bind$inet(r5, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x20008881, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6)

14m40.398782997s ago: executing program 1 (id=2846):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000017010000040000000900000000005000000000000000170100000200000038000000ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad000000001800000000000000170100000300000000000000000000004001000000000000170100000200000028010000526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd84430400f736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ccbc39669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d0000000018000000000000001701000004000000ed0e000000000000"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x3, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)

14m38.329881356s ago: executing program 1 (id=2850):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[], &(0x7f0000000000)=""/118, 0xbb, 0x76, 0x1, 0x6}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
mkdir(0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080)=r3, 0x12)

14m35.885419593s ago: executing program 1 (id=2853):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4)
r0 = socket$inet(0x2, 0x3, 0x2)
unshare(0x28060400)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
timerfd_create(0x8, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5c})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1409, 0x1}, 0x10}}, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108)

14m34.068839187s ago: executing program 1 (id=2857):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$video(&(0x7f0000000140), 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
socket(0x1000000010, 0x80002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e3}}}, 0x32)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan1\x00'})
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

14m19.2262727s ago: executing program 1 (id=2888):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x9c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0xa, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
socket$inet6_mptcp(0xa, 0x1, 0x106)

14m16.384863661s ago: executing program 1 (id=2892):
prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltaction={0x18, 0x31, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000140)=0x3)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x200008c4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40080d0)
r2 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r6, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x101d0)

14m1.152516312s ago: executing program 41 (id=2892):
prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltaction={0x18, 0x31, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000140)=0x3)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x200008c4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40080d0)
r2 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r6, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x101d0)

1m7.235601757s ago: executing program 9 (id=4549):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
read$FUSE(r0, &(0x7f000004a7c0)={0x2020}, 0x2020)

1m6.735226266s ago: executing program 9 (id=4552):
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1486000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10)

1m4.823547776s ago: executing program 9 (id=4556):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="019800000000000020001280080001006772", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x78, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x9}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x40c4)

1m4.650734511s ago: executing program 4 (id=4557):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
truncate(0x0, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x0, 0x300, 0x5, 0x3d2}, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='.\x00', 0xcb3f3a51f6775ebe, 0x26103aaaefdee187})
socket$can_j1939(0x1d, 0x2, 0x7)
io_uring_enter(r1, 0x7f5f, 0x4d33, 0xa, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1000001, 0xd4000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)

1m3.113089582s ago: executing program 4 (id=4559):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0xfffffffe, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbd7e151ae70acd2c", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r4})

1m3.102693599s ago: executing program 9 (id=4560):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7c}, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000)
syz_emit_ethernet(0x256, 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0xf9a0000, 0x8, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x251c9d1d73feec9c, 0x2, '\x00', @string=&(0x7f00000000c0)=0x2}})
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x38, &(0x7f0000000200)="49d9325af8c3858779b7febae9c4f40ec81e09093d0ed2867d2462b88ae2a681b73217aed1988bd863cb2802b541cd", 0x2f)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x44)

1m1.521629336s ago: executing program 4 (id=4561):
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1486000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
open_by_handle_at(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00000064d85688d32a5c5592"], 0x1)

1m1.359304368s ago: executing program 9 (id=4563):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000309000000000000004000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0xe0, 0xd, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc0, 0x3, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "4d20cf5b3673198d610169b6a0c7a57cb1cca38a4f30061be4b5659bff002ae47d4bc90fb23ca1c4c519496f64d009a2ebc45bd1ec5de445884cfae8a113fdce009891661a5cefc7c0d423b54028c7a17e1e4fa0d434a0402d2c607e460841abf06e953a317c0f5ab2cb79137fe2a51f3ce305e26ecd8b0346a56774d3073fae2c17fdc96002a98b06daec3c7209990cd427b930cd6eeac89f3d6f36a90272ac579418869cd39359816f78ff52"}]}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x121400)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0)
preadv(r3, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x3, 0x4, 0x0, r3, 0x3}, 0x50)
r4 = semget(0x0, 0x4, 0x39c)
semop(r4, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2)
semctl$SETALL(r4, 0x0, 0x11, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r5)

59.541151085s ago: executing program 4 (id=4565):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000)
getsockopt$inet6_int(r0, 0x29, 0x47, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x43d040, 0x98)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
close(0x3)
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181)
bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0xfc}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x2e]}}, 0x0, 0x4a}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="a3", 0x1, 0x0, 0x10000}], 0x3e0000)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000007440)={0x0, 0xb, {}, {0xffffffffffffffff}, 0x1ff, 0x6})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000b00)={{0x2, 0x4e23, @empty}, {0x1, @local}, 0x28, {0x2, 0x4e21, @empty}, 'lo\x00'})
syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

58.188878733s ago: executing program 9 (id=4569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfffffffb}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
uname(0xfffffffffffffffc)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
process_vm_writev(0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000440)=""/245, 0xf5}], 0x4, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
syz_io_uring_setup(0x124, &(0x7f00000000c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340), 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r7=>0x0, 0x0, <r8=>0x0], &(0x7f0000000040), 0x3, r6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x0, 0x0, &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2009}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

53.07421606s ago: executing program 4 (id=4571):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
truncate(0x0, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x0, 0x300, 0x5, 0x3d2}, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='.\x00', 0xcb3f3a51f6775ebe, 0x26103aaaefdee187})
socket$can_j1939(0x1d, 0x2, 0x7)
io_uring_enter(r1, 0x7f5f, 0x4d33, 0xa, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1000001, 0xd4000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)

51.607776183s ago: executing program 4 (id=4576):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
socket(0x840000000002, 0x3, 0xff)
get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000580))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020305000000000004000000000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0x201, 0x0, 0x1000000, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48050)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x40}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7)
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x4, 0x2, 0x140}]}]}, 0x38}}, 0x0)

42.881936908s ago: executing program 42 (id=4569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfffffffb}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
uname(0xfffffffffffffffc)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
process_vm_writev(0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000440)=""/245, 0xf5}], 0x4, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
syz_io_uring_setup(0x124, &(0x7f00000000c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340), 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r7=>0x0, 0x0, <r8=>0x0], &(0x7f0000000040), 0x3, r6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x0, 0x0, &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2009}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

35.221892179s ago: executing program 43 (id=4576):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
socket(0x840000000002, 0x3, 0xff)
get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000580))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020305000000000004000000000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0x201, 0x0, 0x1000000, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48050)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x40}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7)
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x4, 0x2, 0x140}]}]}, 0x38}}, 0x0)

15.325015198s ago: executing program 7 (id=4642):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$video(&(0x7f0000000140), 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
socket(0x1000000010, 0x80002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x2, 0x0, {0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e3}}}, 0x32)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@getstats={0x1c, 0x5e, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x2}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_i', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

13.687790173s ago: executing program 2 (id=4645):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0xffffffff}}, 0x10)

13.411131772s ago: executing program 2 (id=4646):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r1)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$video(0x0, 0xa7, 0x800)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x44, 0x2007, @fd=r3, 0x73b, &(0x7f0000000500), 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x567, 0xa9ea, 0x5, 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x201f00)
socket$nl_generic(0x10, 0x3, 0x10)

11.477711779s ago: executing program 5 (id=4650):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
timerfd_create(0x8, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0)

10.586536173s ago: executing program 5 (id=4651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0)
ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x1000000010)
ioctl$BLKRRPART(r8, 0x125f, 0x0)
fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf256f00000008000300", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4e1f0bb1be9aec8a}, 0x10)

10.515735849s ago: executing program 7 (id=4652):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002)
writev(r0, &(0x7f0000000540)=[{&(0x7f00000007c0)}, {&(0x7f0000000300)="a4", 0x1}, {&(0x7f0000000640)="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", 0x137}, {&(0x7f0000000240)="00008287334aec085cd2b31681554c0bc55254e3cc223af9d1be9f4d121af1cc2723241f4853ed6237471e0edf1c36a4b9de2c4276", 0x35}, {0x0}, {&(0x7f0000000140)='G', 0x1}], 0x6)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0xac}}, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272696467657fc5f7", @ANYRESOCT], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000580)='0\x00', 0x2)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}}, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@generic={0x3, 0xffffffffffffffff, 0x1})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2)

9.784233138s ago: executing program 7 (id=4653):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef)
io_setup(0x9, &(0x7f0000000b80)=<r0=>0x0)
io_cancel(r0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff61", 0x12)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

9.580113977s ago: executing program 5 (id=4654):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$9p_tcp(0x0, 0x0, 0x0, 0x8010, 0x0)
r3 = epoll_create1(0x80000)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x4})

8.772741983s ago: executing program 2 (id=4655):
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1486000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
open_by_handle_at(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00000064d85688d32a5c5592"], 0x1)

8.457913452s ago: executing program 5 (id=4656):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6574, 0xb})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r3, &(0x7f0000001580)=[{0x0}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9})
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

7.437928222s ago: executing program 7 (id=4657):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0xfffffffe, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbd7e151ae70acd2c", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r3})

7.436736305s ago: executing program 2 (id=4658):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000)
getsockopt$inet6_int(r0, 0x29, 0x47, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x43d040, 0x98)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
close(0x3)
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181)
bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0xfc}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x2e]}}, 0x0, 0x4a}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="a3", 0x1, 0x0, 0x10000}], 0x3e0000)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000007440)={0x0, 0xb, {}, {0xffffffffffffffff}, 0x1ff, 0x6})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000b00)={{0x2, 0x4e23, @empty}, {0x1, @local}, 0x28, {0x2, 0x4e21, @empty}, 'lo\x00'})
syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

5.694469618s ago: executing program 3 (id=4660):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)

5.137329186s ago: executing program 3 (id=4661):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
timerfd_create(0x8, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0)

4.075755401s ago: executing program 3 (id=4662):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0)
sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0})
shutdown(r0, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r2}}, 0x30)

3.371354246s ago: executing program 5 (id=4663):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002)
writev(r0, &(0x7f0000000540)=[{&(0x7f00000007c0)}, {&(0x7f0000000300)="a4", 0x1}, {&(0x7f0000000640)="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", 0x137}, {&(0x7f0000000240)="00008287334aec085cd2b31681554c0bc55254e3cc223af9d1be9f4d121af1cc2723241f4853ed6237471e0edf1c36a4b9de2c4276", 0x35}, {0x0}, {&(0x7f0000000140)='G', 0x1}], 0x6)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0xac}}, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272696467657fc5f7", @ANYRESOCT], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000580)='0\x00', 0x2)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}}, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@generic={0x3, 0xffffffffffffffff, 0x1})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2)

3.290951049s ago: executing program 3 (id=4664):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_fd(0x0, 0x0, 0x0, 0x80108c, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x3}, 0xffffffff, 0x8, 0x2, 0x9, 0x0, 0x0, 0x8})
ftruncate(r3, 0x200004)
sendfile(r2, r3, 0x0, 0x80001d00c0d1)

3.289806351s ago: executing program 2 (id=4665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0)
ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x1000000010)
ioctl$BLKRRPART(r8, 0x125f, 0x0)
fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf256f00000008000300", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4e1f0bb1be9aec8a}, 0x10)

3.198503077s ago: executing program 7 (id=4666):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r1)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$video(0x0, 0xa7, 0x800)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x44, 0x2007, @fd=r3, 0x73b, &(0x7f0000000500), 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x567, 0xa9ea, 0x5, 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x201f00)
socket$nl_generic(0x10, 0x3, 0x10)

2.128790188s ago: executing program 2 (id=4667):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
readv(r1, &(0x7f0000000480), 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

2.017679377s ago: executing program 3 (id=4668):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef)
io_setup(0x9, &(0x7f0000000b80)=<r0=>0x0)
io_cancel(r0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff61", 0x12)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

1.876872912s ago: executing program 5 (id=4669):
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000880)="eb", 0x1}], 0x1, 0x7ffffd, 0x8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x2000081)

844.277839ms ago: executing program 3 (id=4670):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000280)=[{0x7, 0x200, 0x0, 0x0}, {0x5, 0x1001, 0x0, 0x0}], 0x2})

0s ago: executing program 7 (id=4671):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x3e5, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x200, 0x0)
r8 = dup2(r7, r6)
readv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1)

kernel console output (not intermixed with test programs):

862576][T23447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1917.771467][T16153] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1918.550039][T16153] usb 3-1: Using ep0 maxpacket: 8
[ 1918.567306][T16153] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1918.577359][T16153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1918.593277][T23454] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3857'.
[ 1918.680073][T16153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1918.704579][T16153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1918.716270][T16153] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1918.760151][T16153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1918.837422][T16153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 1919.040819][T16153] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1919.054054][T16153] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1919.063731][T16153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1919.121909][T17961] usb 5-1: USB disconnect, device number 41
[ 1919.128453][T16153] usb 3-1: Product: syz
[ 1919.133989][T16153] usb 3-1: Manufacturer: syz
[ 1920.116386][T16153] usb 3-1: SerialNumber: syz
[ 1920.126037][T16153] usb 3-1: config 0 descriptor??
[ 1920.133231][T23455] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1920.141427][T23455] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1920.154222][T16153] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1922.503313][T16153] usb 3-1: USB disconnect, device number 28
[ 1924.165647][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1926.023073][T21235] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1926.590435][T21235] usb 5-1: device descriptor read/64, error -71
[ 1927.792161][T21235] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1927.967504][T21235] usb 5-1: device descriptor read/64, error -71
[ 1927.967691][   T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1928.082987][T21235] usb usb5-port1: attempt power cycle
[ 1928.192444][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1928.237676][   T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1928.263453][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1928.297127][   T24] usb 6-1: config 0 descriptor??
[ 1928.345989][   T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1928.580023][T16123] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[ 1930.086173][T16123] usb 8-1: Using ep0 maxpacket: 8
[ 1930.151631][T16123] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1930.159825][T21235] usb 6-1: USB disconnect, device number 25
[ 1930.188052][T16123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1930.230663][T16123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1930.249438][T16123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1930.386380][T16123] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1930.481672][T23533] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1930.489418][T23533] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1930.649407][T16123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1930.692781][T16123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 1930.716339][T16123] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1930.763167][T16123] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1930.788810][T16123] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1930.868016][T16123] usb 8-1: Product: syz
[ 1930.873621][T16123] usb 8-1: Manufacturer: syz
[ 1930.895097][T16123] usb 8-1: SerialNumber: syz
[ 1930.954440][T16123] usb 8-1: config 0 descriptor??
[ 1930.981058][T23519] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1931.482759][T23519] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1931.827087][T16123] usb 8-1: can't set config #0, error -71
[ 1931.883272][T16123] usb 8-1: USB disconnect, device number 42
[ 1932.152432][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'.
[ 1934.579681][T23567] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3893'.
[ 1936.721326][T21235] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1936.992125][T21235] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1937.013308][T21235] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1937.030190][T21235] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1937.066920][T21235] usb 10-1: config 0 descriptor??
[ 1937.108048][T21235] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1937.940213][T14669] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1938.194993][T14669] usb 3-1: Using ep0 maxpacket: 8
[ 1938.226678][T14669] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1938.242766][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1938.274097][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1938.299987][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1938.337065][T14669] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1938.377895][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1938.409996][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 1938.451899][T14669] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1938.503728][T14669] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1938.529804][T14669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1938.560031][T14669] usb 3-1: Product: syz
[ 1938.586254][T14669] usb 3-1: Manufacturer: syz
[ 1938.599987][T14669] usb 3-1: SerialNumber: syz
[ 1938.621369][T14669] usb 3-1: config 0 descriptor??
[ 1938.630958][T23589] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1938.639073][T23589] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1938.695488][T14669] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1940.974410][T21235] usb 10-1: USB disconnect, device number 48
[ 1942.299186][T16153] usb 3-1: USB disconnect, device number 29
[ 1943.762876][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3909'.
[ 1945.213264][T23654] qrtr: Invalid version 0
[ 1945.368112][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'.
[ 1946.390040][T21235] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1946.462090][   T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1946.586745][T21235] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1946.626834][T21235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1946.668296][T21235] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1946.703113][T21235] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1946.713523][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1946.735593][T21235] usb 3-1: Manufacturer: syz
[ 1946.751440][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1946.799115][T21235] usb 3-1: config 0 descriptor??
[ 1947.011599][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1947.021591][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1947.172217][   T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1947.206029][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1947.279290][   T24] usb 4-1: config 0 descriptor??
[ 1947.290207][T14669] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[ 1947.302628][T21235] rc_core: IR keymap rc-hauppauge not found
[ 1947.310553][T21235] Registered IR keymap rc-empty
[ 1947.323733][T21235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1947.710759][T14669] usb 8-1: Using ep0 maxpacket: 8
[ 1947.923443][T14669] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1947.951894][T21235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35
[ 1947.987960][T14669] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1948.030616][T14669] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1948.075496][T14669] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1948.162066][T14669] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1948.198038][   T24] usbhid 4-1:0.0: can't add hid device: -71
[ 1948.223109][T14669] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1948.233029][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1948.269711][T14669] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 1948.314982][   T24] usb 4-1: USB disconnect, device number 26
[ 1948.329172][T14669] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1948.366219][T14669] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1948.389267][T14669] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1948.428879][T14669] usb 8-1: Product: syz
[ 1948.454727][T14669] usb 8-1: Manufacturer: syz
[ 1948.476426][T14669] usb 8-1: SerialNumber: syz
[ 1948.515932][T14669] usb 8-1: config 0 descriptor??
[ 1948.544827][T23667] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1948.570245][T23667] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1948.833711][T21235] usb 3-1: USB disconnect, device number 30
[ 1949.037147][T14669] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1951.416796][T14669] usb 8-1: USB disconnect, device number 43
[ 1952.102312][ T5140] Bluetooth: hci3: command 0x0406 tx timeout
[ 1954.830036][T16153] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1956.088105][T21235] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[ 1956.110559][T16153] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1956.118278][T16153] usb 10-1: can't read configurations, error -71
[ 1956.976527][T21235] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1957.228842][T21235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1957.260160][T21235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1957.330012][T21235] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1957.363471][T21235] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1957.397341][T21235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1957.448907][T21235] usb 8-1: config 0 descriptor??
[ 1957.821917][T17961] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1957.901899][T21235] usbhid 8-1:0.0: can't add hid device: -71
[ 1957.920675][T21235] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1957.937716][T21235] usb 8-1: USB disconnect, device number 44
[ 1958.060017][T17961] usb 3-1: Using ep0 maxpacket: 8
[ 1958.096266][T23749] qrtr: Invalid version 0
[ 1958.261967][T17961] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1958.271892][T17961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1958.284239][T17961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1958.294524][T17961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1958.318492][T17961] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1958.391722][T17961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1958.413553][T17961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 1958.425485][T17961] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1958.461739][T17961] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1958.480039][T17961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1958.500430][T17961] usb 3-1: Product: syz
[ 1958.518302][T17961] usb 3-1: Manufacturer: syz
[ 1958.535150][T17961] usb 3-1: SerialNumber: syz
[ 1958.567925][T17961] usb 3-1: config 0 descriptor??
[ 1958.588590][T23742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1958.596518][T23742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1958.615089][T17961] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1961.390922][T13514] usb 3-1: USB disconnect, device number 31
[ 1962.054762][T23774] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1962.323333][T13514] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[ 1962.390178][T16153] usb 8-1: new full-speed USB device number 45 using dummy_hcd
[ 1962.931640][T13514] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1963.031796][T16153] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1963.055183][T13514] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1963.078889][T16153] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1963.095616][T16153] usb 8-1: Product: syz
[ 1963.105959][T13514] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1963.123852][T16153] usb 8-1: Manufacturer: syz
[ 1963.141549][T16153] usb 8-1: SerialNumber: syz
[ 1963.146226][T13514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1963.163050][T16153] usb 8-1: config 0 descriptor??
[ 1963.409154][T13514] usb 4-1: usb_control_msg returned -32
[ 1963.439363][T16153] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1963.448723][T13514] usbtmc 4-1:16.0: can't read capabilities
[ 1964.350057][T23787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1964.358957][T23787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1964.372458][T23787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1964.381231][T23787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1964.577102][T21235] usb 4-1: USB disconnect, device number 27
[ 1966.078828][T16153] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1966.711507][T16153] usb 8-1: USB disconnect, device number 45
[ 1967.120042][T14669] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1967.613350][T14669] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1967.649230][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1967.950159][T14669] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1968.740063][T14669] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1968.748806][T14669] usb 3-1: Manufacturer: syz
[ 1968.785929][T14669] usb 3-1: config 0 descriptor??
[ 1969.740180][T14669] rc_core: IR keymap rc-hauppauge not found
[ 1969.752570][T14669] Registered IR keymap rc-empty
[ 1969.806181][T14669] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1969.852223][T14669] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36
[ 1969.903841][T14669] usb 3-1: USB disconnect, device number 32
[ 1970.228248][T23834] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3966'.
[ 1970.254995][T23834] block nbd0: reconnected socket
[ 1970.289536][   T24] usb 10-1: new full-speed USB device number 51 using dummy_hcd
[ 1970.320853][T20568] block nbd0: Receive control failed (result -32)
[ 1970.486211][   T24] usb 10-1: config 0 has an invalid interface number: 29 but max is 0
[ 1970.518044][   T24] usb 10-1: config 0 has no interface number 0
[ 1970.545308][   T24] usb 10-1: config 0 interface 29 has no altsetting 0
[ 1970.593680][   T24] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[ 1970.623130][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1970.652253][   T24] usb 10-1: Product: syz
[ 1970.670104][   T24] usb 10-1: Manufacturer: syz
[ 1970.693596][   T24] usb 10-1: SerialNumber: syz
[ 1971.005188][T23844] fuse: Bad value for 'fd'
[ 1971.305981][   T24] usb 10-1: config 0 descriptor??
[ 1971.782487][   T24] peak_usb 10-1:0.29: PEAK-System PCAN-USB X6 v84 fw v198.0.0 (2 channels)
[ 1973.421972][   T24] peak_usb 10-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[ 1973.451240][   T24] peak_usb 10-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[ 1974.012233][T23863] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1974.081783][   T24] peak_usb 10-1:0.29: probe with driver peak_usb failed with error -71
[ 1974.143610][   T24] usb 10-1: USB disconnect, device number 51
[ 1974.490011][T13514] usb 8-1: new full-speed USB device number 46 using dummy_hcd
[ 1975.725365][T13514] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1975.750956][T13514] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1975.765385][T13514] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1975.845327][T13514] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1976.091894][T13514] usb 8-1: usb_control_msg returned -32
[ 1976.130009][T13514] usbtmc 8-1:16.0: can't read capabilities
[ 1977.294858][T23885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1977.303734][T23885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1977.314705][T23885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1977.323798][T23885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1977.527854][T14669] usb 8-1: USB disconnect, device number 46
[ 1978.467904][T23902] fuse: Bad value for 'fd'
[ 1980.619168][T23927] netlink: 'syz.3.3991': attribute type 2 has an invalid length.
[ 1982.599362][ T5140] Bluetooth: hci2: command 0x0406 tx timeout
[ 1984.142363][T17961] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1984.602129][T17961] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1984.613957][T17961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1984.681998][T17961] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1984.714971][T17961] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1984.770331][T17961] usb 5-1: Manufacturer: syz
[ 1984.802541][T17961] usb 5-1: config 0 descriptor??
[ 1985.080025][T17961] rc_core: IR keymap rc-hauppauge not found
[ 1985.114600][T17961] Registered IR keymap rc-empty
[ 1985.143788][T17961] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1985.261404][T23966] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4001'.
[ 1985.424479][T17961] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37
[ 1985.751924][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1986.022458][T17961] usb 5-1: USB disconnect, device number 45
[ 1986.171890][T23974] fuse: Bad value for 'fd'
[ 1994.041915][T14669] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1997.515640][T24057] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4027'.
[ 1998.683084][T24064] Trying to write to read-only block-device nullb0
[ 1998.836829][T24065] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4028'.
[ 2000.721045][T24071] nbd1: detected capacity change from 0 to 127
[ 2000.764606][T24074] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4031'.
[ 2000.774657][T24074] block nbd0: reconnected socket
[ 2000.781600][T20568] block nbd1: Receive control failed (result -104)
[ 2000.782628][ T5140] block nbd0: Receive control failed (result -32)
[ 2000.835994][T14669] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 2001.022001][T14669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 2001.787653][T14669] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 2001.811042][T14669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2001.826496][T14669] usb 4-1: config 0 descriptor??
[ 2001.836666][T24070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2001.950427][T21235] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 2002.124269][T21235] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2002.160384][T21235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2002.195177][T21235] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2002.217298][T21235] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2002.261949][T21235] usb 5-1: Manufacturer: syz
[ 2002.300413][T14669] elan 0003:04F3:0755.0020: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[ 2002.322958][T21235] usb 5-1: config 0 descriptor??
[ 2003.412254][T21235] rc_core: IR keymap rc-hauppauge not found
[ 2003.418200][T21235] Registered IR keymap rc-empty
[ 2003.444775][T21235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2003.526755][T21235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input38
[ 2003.832218][T21235] usb 5-1: USB disconnect, device number 46
[ 2004.155660][T14669] usb 4-1: USB disconnect, device number 29
[ 2008.511077][T24149] qrtr: Invalid version 0
[ 2008.881934][   T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 2009.337657][   T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2009.504256][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2009.563933][   T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2009.610031][   T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2009.658769][   T24] usb 5-1: Manufacturer: syz
[ 2009.670573][   T24] usb 5-1: config 0 descriptor??
[ 2010.010100][   T24] rc_core: IR keymap rc-hauppauge not found
[ 2010.021348][   T24] Registered IR keymap rc-empty
[ 2010.574958][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2011.754699][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39
[ 2012.475876][   T24] usb 5-1: USB disconnect, device number 47
[ 2016.042103][T24194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4070'.
[ 2016.751613][T24200] fuse: Bad value for 'fd'
[ 2016.757557][T24200] fuse: Bad value for 'fd'
[ 2017.101900][T17961] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 2017.571206][T17961] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2017.593529][T17961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2017.641531][T17961] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2017.669955][T17961] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2017.712564][T17961] usb 5-1: Manufacturer: syz
[ 2017.751119][T17961] usb 5-1: config 0 descriptor??
[ 2018.560131][T17961] rc_core: IR keymap rc-hauppauge not found
[ 2018.579275][T17961] Registered IR keymap rc-empty
[ 2018.598696][T17961] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2018.662655][T17961] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40
[ 2018.820790][T14669] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 2018.865499][T17961] usb 5-1: USB disconnect, device number 48
[ 2019.041596][T14669] usb 10-1: Using ep0 maxpacket: 8
[ 2019.064097][T14669] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 2019.077126][T14669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 2019.124012][T14669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2019.160171][T14669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 2019.202044][T14669] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 2019.231735][T14669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2019.257330][T14669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 2019.287645][T14669] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 2019.323012][T14669] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 2019.350897][T14669] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2019.399993][T14669] usb 10-1: Product: syz
[ 2019.409956][T14669] usb 10-1: Manufacturer: syz
[ 2019.419943][T14669] usb 10-1: SerialNumber: syz
[ 2019.431802][T14669] usb 10-1: config 0 descriptor??
[ 2019.447933][T24220] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 2019.461477][T24220] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 2019.484894][T14669] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 2022.435476][T13514] usb 10-1: USB disconnect, device number 52
[ 2022.891600][T24254] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4085'.
[ 2023.760798][T24263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4088'.
[ 2024.614506][T14669] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 2024.950060][T21235] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 2024.970369][T14669] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2025.003768][T14669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2025.039953][T14669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2025.083441][T14669] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2025.271878][T21235] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2025.293081][T14669] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2025.306869][T21235] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2025.327532][T14669] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2025.341184][T21235] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2025.366195][T21235] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2025.494991][T14669] usb 10-1: config 0 descriptor??
[ 2025.507232][T21235] usb 6-1: Manufacturer: syz
[ 2025.832601][T21235] usb 6-1: config 0 descriptor??
[ 2026.120108][T21235] rc_core: IR keymap rc-hauppauge not found
[ 2026.140476][T21235] Registered IR keymap rc-empty
[ 2026.155797][T21235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2026.208441][T21235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41
[ 2026.295828][T14669] usbhid 10-1:0.0: can't add hid device: -71
[ 2026.330038][T14669] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 2026.363687][T14669] usb 10-1: USB disconnect, device number 53
[ 2026.584953][T13443] usb 6-1: USB disconnect, device number 26
[ 2028.042409][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'.
[ 2028.264893][T24305] fuse: Bad value for 'fd'
[ 2028.271460][T24305] fuse: Bad value for 'fd'
[ 2029.099993][T13514] usb 8-1: new high-speed USB device number 47 using dummy_hcd
[ 2029.720103][T13514] usb 8-1: Using ep0 maxpacket: 32
[ 2029.754588][T13514] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2029.763796][T13514] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2029.802363][T13514] usb 8-1: config 0 descriptor??
[ 2030.069409][T13514] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2030.095926][T13514] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2030.603702][T13514] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2030.659247][T13514] usb 8-1: media controller created
[ 2030.730508][T13514] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2031.040306][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 30 seconds
[ 2031.051073][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 30 seconds
[ 2031.062450][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 30 seconds
[ 2031.073478][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 30 seconds
[ 2031.110008][T13514] DVB: Unable to find symbol dib7000p_attach()
[ 2031.116334][T13514] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 2031.890035][T13514] rc_core: IR keymap rc-dib0700-rc5 not found
[ 2031.918532][T13514] Registered IR keymap rc-empty
[ 2031.940715][T13514] dvb-usb: could not initialize remote control.
[ 2031.979161][T13514] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 2032.048009][T13514] usb 8-1: USB disconnect, device number 47
[ 2032.190147][T13514] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 2034.508614][T24357] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4112'.
[ 2035.090555][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'.
[ 2035.715587][T24379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4118'.
[ 2036.437592][T24379] libceph: resolve '0..' (ret=-3): failed
[ 2036.710054][T21235] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 2036.900027][T21235] usb 3-1: Using ep0 maxpacket: 32
[ 2036.907557][T21235] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2036.959943][T21235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2037.060571][T21235] usb 3-1: config 0 descriptor??
[ 2037.289625][T21235] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2037.393851][T24393] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2037.401148][T24393] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2037.463060][T21235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2037.545985][T21235] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2037.594980][T21235] usb 3-1: media controller created
[ 2038.160473][T21235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2038.464668][T21235] DVB: Unable to find symbol dib7000p_attach()
[ 2038.495436][T21235] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 2038.849988][T21235] rc_core: IR keymap rc-dib0700-rc5 not found
[ 2038.856118][T21235] Registered IR keymap rc-empty
[ 2038.915313][T21235] dvb-usb: could not initialize remote control.
[ 2038.940167][T21235] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 2039.001580][T21235] usb 3-1: USB disconnect, device number 33
[ 2040.083953][T21235] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 2040.573187][T24420] fuse: Bad value for 'fd'
[ 2040.587058][T24420] fuse: Bad value for 'fd'
[ 2040.666483][T24422] binder: 24421:24422 ioctl c0306201 0 returned -14
[ 2040.871054][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4131'.
[ 2044.130045][T24443] nbd2: detected capacity change from 0 to 127
[ 2044.149436][T24447] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4135'.
[ 2044.202329][T24447] block nbd0: reconnected socket
[ 2044.223086][ T5140] block nbd2: Receive control failed (result -104)
[ 2044.243946][T20568] block nbd0: Receive control failed (result -32)
[ 2044.360018][T13514] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 2044.444269][   T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 2044.558601][T13514] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2044.599431][T13514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2044.632067][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 2044.640880][T13514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2044.661823][T13514] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2044.675236][   T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2044.690002][T13443] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 2044.697677][T13514] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2044.712102][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2044.723368][T13514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2044.746766][   T24] usb 6-1: config 0 descriptor??
[ 2044.771531][T13514] usb 5-1: config 0 descriptor??
[ 2044.791377][T24457] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4139'.
[ 2044.920050][T13443] usb 4-1: Using ep0 maxpacket: 32
[ 2044.935478][T13443] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1
[ 2044.947470][T13443] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 2044.957826][T13443] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[ 2044.967614][T13443] usb 4-1: Product: syz
[ 2044.976266][   T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2045.014431][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2045.026952][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2045.040556][   T24] usb 6-1: media controller created
[ 2045.144986][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2045.395447][T13514] usbhid 5-1:0.0: can't add hid device: -71
[ 2045.406282][T13514] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2045.471793][   T24] DVB: Unable to find symbol dib7000p_attach()
[ 2045.478448][T13514] usb 5-1: USB disconnect, device number 49
[ 2045.508583][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 2045.720295][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[ 2045.726447][   T24] Registered IR keymap rc-empty
[ 2045.757123][   T24] dvb-usb: could not initialize remote control.
[ 2045.793710][   T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 2045.810180][   T24] usb 6-1: USB disconnect, device number 27
[ 2046.855200][   T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 2047.052944][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 2047.609306][T24475] binder: 24474:24475 ioctl c0306201 0 returned -14
[ 2047.640070][T24458] usb 4-1: USB disconnect, device number 30
[ 2048.591259][T24485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'.
[ 2052.359979][T14669] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 2052.715834][T14669] usb 10-1: Using ep0 maxpacket: 32
[ 2052.723689][T14669] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2052.733978][T14669] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2053.636671][T14669] usb 10-1: config 0 descriptor??
[ 2053.879582][T14669] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2053.916474][T14669] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2053.946160][T14669] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2053.977372][T14669] usb 10-1: media controller created
[ 2054.053622][T14669] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2054.597205][T14669] DVB: Unable to find symbol dib7000p_attach()
[ 2055.232185][T14669] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 2055.610066][T14669] rc_core: IR keymap rc-dib0700-rc5 not found
[ 2055.637407][T14669] Registered IR keymap rc-empty
[ 2055.668036][T14669] dvb-usb: could not initialize remote control.
[ 2055.695894][T14669] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 2055.791524][T14669] usb 10-1: USB disconnect, device number 54
[ 2055.953366][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4164'.
[ 2055.981493][T14669] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 2057.369978][T24564] nbd3: detected capacity change from 0 to 127
[ 2057.378071][T24567] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4168'.
[ 2057.420532][T24567] block nbd0: reconnected socket
[ 2057.431954][T20568] block nbd3: Receive control failed (result -104)
[ 2057.447958][ T5140] block nbd0: Receive control failed (result -32)
[ 2059.579524][T24578] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 2059.626592][T24580] tipc: Started in network mode
[ 2059.641956][T24580] tipc: Node identity 84e, cluster identity 4711
[ 2059.662233][T24580] tipc: Node number set to 2126
[ 2059.667705][T24578] syzkaller0: entered promiscuous mode
[ 2059.682117][T24578] syzkaller0: entered allmulticast mode
[ 2059.870114][T24581] syz.3.4172 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 2060.495325][T24574] tipc: Resetting bearer <eth:syzkaller0>
[ 2061.150265][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 60 seconds
[ 2061.161038][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 60 seconds
[ 2061.172219][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 60 seconds
[ 2061.183342][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 60 seconds
[ 2061.204760][T24574] tipc: Disabling bearer <eth:syzkaller0>
[ 2063.189377][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'.
[ 2063.613358][ T5189] udevd[5189]: worker [24073] /devices/virtual/block/nbd1 is taking a long time
[ 2066.322049][T24630] tipc: Started in network mode
[ 2066.326977][T24630] tipc: Node identity 84e, cluster identity 4711
[ 2066.334441][T24630] tipc: Node number set to 2126
[ 2068.367292][T24644] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2068.559994][T21235] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[ 2069.638449][T21235] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2069.665868][T21235] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2069.700154][T21235] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2069.767725][T21235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2070.207861][T21235] usb 3-1: usb_control_msg returned -32
[ 2070.244996][T21235] usbtmc 3-1:16.0: can't read capabilities
[ 2071.629190][T21235] usb 3-1: USB disconnect, device number 34
[ 2071.962675][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4199'.
[ 2074.848320][T21371] block nbd2: Possible stuck request ffff888025f90000: control (read@0,1024B). Runtime 30 seconds
[ 2074.859749][T21371] block nbd2: Possible stuck request ffff888025f90200: control (read@1024,1024B). Runtime 30 seconds
[ 2074.879945][T21371] block nbd2: Possible stuck request ffff888025f90400: control (read@2048,1024B). Runtime 30 seconds
[ 2074.891021][T21371] block nbd2: Possible stuck request ffff888025f90600: control (read@3072,1024B). Runtime 30 seconds
[ 2079.057905][T24724] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2079.272192][T24725] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2079.690230][T24458] usb 8-1: new full-speed USB device number 48 using dummy_hcd
[ 2080.218292][T24458] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2080.256890][T24458] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2080.330051][T24458] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2080.677222][T24458] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2080.787616][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'.
[ 2080.970665][T24458] usb 8-1: usb_control_msg returned -32
[ 2080.976318][T24458] usbtmc 8-1:16.0: can't read capabilities
[ 2081.610465][T13514] usb 10-1: new full-speed USB device number 55 using dummy_hcd
[ 2082.488272][T24750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2082.497337][T24750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2082.502077][T13514] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2082.529265][T13514] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2082.554981][T24750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2082.564325][T24750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2082.731171][T13514] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2082.788587][T13514] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2082.820517][T13514] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2082.903720][T13514] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22
[ 2085.494071][T17961] usb 10-1: USB disconnect, device number 55
[ 2088.280490][   T56] block nbd3: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 30 seconds
[ 2088.291238][   T56] block nbd3: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 30 seconds
[ 2088.302269][   T56] block nbd3: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 30 seconds
[ 2088.338711][   T56] block nbd3: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 30 seconds
[ 2089.528510][T14669] usb 8-1: USB disconnect, device number 48
[ 2090.140374][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4230'.
[ 2091.203273][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 90 seconds
[ 2091.214020][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 90 seconds
[ 2091.225020][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 90 seconds
[ 2091.236040][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 90 seconds
[ 2091.949983][T24809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4236'.
[ 2100.088748][T24855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'.
[ 2102.435451][T24884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4258'.
[ 2105.281508][T21371] block nbd2: Possible stuck request ffff888025f90000: control (read@0,1024B). Runtime 60 seconds
[ 2105.292511][T21371] block nbd2: Possible stuck request ffff888025f90200: control (read@1024,1024B). Runtime 60 seconds
[ 2105.303512][T21371] block nbd2: Possible stuck request ffff888025f90400: control (read@2048,1024B). Runtime 60 seconds
[ 2105.314488][T21371] block nbd2: Possible stuck request ffff888025f90600: control (read@3072,1024B). Runtime 60 seconds
[ 2106.315997][T24920] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2106.396812][T24921] openvswitch: netlink: Missing key (keys=800040, expected=2000)
[ 2107.841089][T24927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4267'.
[ 2108.478164][T24927] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2108.533342][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 2108.800921][   T24] usb 10-1: new full-speed USB device number 56 using dummy_hcd
[ 2109.013438][   T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2109.054881][   T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2109.099986][   T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2109.143237][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2110.315384][   T24] usb 10-1: usb_control_msg returned -32
[ 2110.340027][   T24] usbtmc 10-1:16.0: can't read capabilities
[ 2110.960024][T24458] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 2111.232403][T24458] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2111.293173][T24458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2111.358107][T24458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2111.382248][T24458] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2111.412212][T24458] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2111.438035][T24458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2111.479793][T24458] usb 3-1: config 0 descriptor??
[ 2111.785529][T14669] usb 10-1: USB disconnect, device number 56
[ 2112.258820][T24458] usbhid 3-1:0.0: can't add hid device: -71
[ 2112.271609][T24458] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2112.357177][T24458] usb 3-1: USB disconnect, device number 35
[ 2114.024119][T24965] syz_tun: entered allmulticast mode
[ 2116.146963][ T5189] udevd[5189]: worker [24103] /devices/virtual/block/nbd2 is taking a long time
[ 2117.685495][T13514] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 2117.949989][T13514] usb 3-1: Using ep0 maxpacket: 32
[ 2117.970317][T24981] binder: BINDER_SET_CONTEXT_MGR already set
[ 2117.976338][T24981] binder: 24978:24981 ioctl 4018620d 200000004a80 returned -16
[ 2117.979686][T13514] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 2118.035374][T13514] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[ 2118.053810][T13514] usb 3-1: Product: syz
[ 2118.152993][T13514] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 2118.822358][T13514] gspca_nw80x: reg_r err -110
[ 2118.828147][T13514] nw80x 3-1:3.0: probe with driver nw80x failed with error -110
[ 2118.943108][   T56] block nbd3: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 60 seconds
[ 2118.953880][   T56] block nbd3: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 60 seconds
[ 2118.965752][   T56] block nbd3: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 60 seconds
[ 2118.976753][   T56] block nbd3: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 60 seconds
[ 2119.080225][T13514] usb 3-1: USB disconnect, device number 36
[ 2120.043238][T24994] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2121.249993][T13514] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[ 2121.501511][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 120 seconds
[ 2121.514435][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 120 seconds
[ 2121.529047][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 120 seconds
[ 2121.540758][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 120 seconds
[ 2121.626137][T13514] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2121.648624][T13514] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2122.389998][T13514] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2122.448209][T13514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2123.558298][T13514] usb 6-1: usb_control_msg returned -32
[ 2123.574118][T13514] usbtmc 6-1:16.0: can't read capabilities
[ 2123.590294][T17961] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 2123.822147][T17961] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2123.848665][T17961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2123.882655][T17961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2123.912864][T17961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2123.932877][T17961] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2123.952730][T17961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2123.978501][T17961] usb 4-1: config 0 descriptor??
[ 2124.139989][T14669] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 2124.239422][T25018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4296'.
[ 2124.321637][T14669] usb 3-1: Using ep0 maxpacket: 8
[ 2124.330240][T14669] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2124.358339][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 2124.388563][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2124.423299][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 2124.467940][T14669] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 2124.501097][T17961] plantronics 0003:047F:FFFF.0021: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 2124.533902][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2125.428059][T14669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 2125.456601][T14669] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 2125.509205][T14669] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 2125.549917][T14669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2125.701486][T14669] usb 3-1: Product: syz
[ 2125.742127][T14669] usb 3-1: Manufacturer: syz
[ 2125.746752][T14669] usb 3-1: SerialNumber: syz
[ 2125.764481][T17961] usb 4-1: USB disconnect, device number 31
[ 2125.881742][T14669] usb 3-1: config 0 descriptor??
[ 2125.893603][T25016] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2125.910303][T25016] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2125.945619][T14669] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 2126.001267][T16122] usb 6-1: USB disconnect, device number 28
[ 2126.066180][T25034] binder_alloc: 25031: binder_alloc_buf, no vma
[ 2128.390150][T25022] fido_id[25022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 2128.961493][T14669] usb 3-1: USB disconnect, device number 37
[ 2129.114231][T25048] No control pipe specified
[ 2131.290928][T25065] nbd: couldn't find a device at index -2133000188
[ 2133.100403][ T5189] udevd[5189]: worker [24086] /devices/virtual/block/nbd3 is taking a long time
[ 2135.786006][T21371] block nbd2: Possible stuck request ffff888025f90000: control (read@0,1024B). Runtime 90 seconds
[ 2135.797065][T21371] block nbd2: Possible stuck request ffff888025f90200: control (read@1024,1024B). Runtime 90 seconds
[ 2135.808044][T21371] block nbd2: Possible stuck request ffff888025f90400: control (read@2048,1024B). Runtime 90 seconds
[ 2135.819011][T21371] block nbd2: Possible stuck request ffff888025f90600: control (read@3072,1024B). Runtime 90 seconds
[ 2137.510367][T13514] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 2137.712235][T13514] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2137.757297][T13514] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2137.799946][T13514] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2137.841106][T13514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2137.849975][T14669] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 2138.178587][T14669] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2138.215459][T14669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2138.254174][T13514] usb 4-1: usb_control_msg returned -32
[ 2138.259817][T13514] usbtmc 4-1:16.0: can't read capabilities
[ 2138.429709][T14669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2138.494671][T14669] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2138.548326][T14669] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2138.800784][T14669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2139.761586][T14669] usb 6-1: config 0 descriptor??
[ 2139.913634][T25106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4318'.
[ 2141.336141][T14669] plantronics 0003:047F:FFFF.0022: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 2141.349373][T16122] usb 4-1: USB disconnect, device number 32
[ 2142.128944][T25121] syzkaller0: entered promiscuous mode
[ 2142.146700][T25121] syzkaller0: entered allmulticast mode
[ 2142.239768][T13514] usb 6-1: USB disconnect, device number 29
[ 2143.836589][T25119] fido_id[25119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 2145.407740][T25140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4327'.
[ 2146.842448][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4333'.
[ 2148.412242][T25168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4336'.
[ 2148.607807][T25173] No control pipe specified
[ 2148.699992][T21235] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[ 2149.826891][T21235] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2149.929989][   T56] block nbd3: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 90 seconds
[ 2149.942106][   T56] block nbd3: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 90 seconds
[ 2149.953957][   T56] block nbd3: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 90 seconds
[ 2149.965028][   T56] block nbd3: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 90 seconds
[ 2149.996419][T21235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2150.012407][T21235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2150.025400][T21235] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2150.040023][T21235] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2150.049769][T21235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2150.071268][T21235] usb 8-1: config 0 descriptor??
[ 2151.873146][T21235] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 2152.000837][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 150 seconds
[ 2152.011685][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 150 seconds
[ 2152.022797][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 150 seconds
[ 2152.033880][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 150 seconds
[ 2153.470463][T13514] usb 8-1: reset high-speed USB device number 49 using dummy_hcd
[ 2153.534580][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4351'.
[ 2154.141247][T25220] No control pipe specified
[ 2154.682970][T24458] usb 8-1: USB disconnect, device number 49
[ 2158.225634][T24458] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 2159.350300][T24458] usb 4-1: Using ep0 maxpacket: 32
[ 2159.471874][T24458] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 2159.511948][T24458] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[ 2159.577426][T24458] usb 4-1: Product: syz
[ 2159.617316][T24458] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 2159.702882][T25264] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4366'.
[ 2159.720153][T25264] block nbd0: reconnected socket
[ 2159.732834][T20568] block nbd0: Receive control failed (result -32)
[ 2160.198108][T25276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4369'.
[ 2160.225718][T24458] gspca_nw80x: reg_w err -71
[ 2160.233648][T24458] nw80x 4-1:3.0: probe with driver nw80x failed with error -71
[ 2160.254013][T24458] usb 4-1: USB disconnect, device number 33
[ 2162.182928][T25287] 0x7fffffffffffffff-0x8000000000000006 : ""
[ 2163.092955][T25287] mtd: partition "" is out of reach -- disabled
[ 2163.700317][T25287] ftl_cs: FTL header not found.
[ 2165.905552][T25320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'.
[ 2166.000545][T25315] fuse: Bad value for 'fd'
[ 2166.007833][T25315] fuse: Bad value for 'fd'
[ 2166.028408][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2166.037089][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2166.080933][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2166.089556][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2166.109928][T21371] block nbd2: Possible stuck request ffff888025f90000: control (read@0,1024B). Runtime 120 seconds
[ 2166.123052][T21371] block nbd2: Possible stuck request ffff888025f90200: control (read@1024,1024B). Runtime 120 seconds
[ 2166.140146][T21371] block nbd2: Possible stuck request ffff888025f90400: control (read@2048,1024B). Runtime 120 seconds
[ 2166.151230][T21371] block nbd2: Possible stuck request ffff888025f90600: control (read@3072,1024B). Runtime 120 seconds
[ 2166.164549][T25321] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4381'.
[ 2166.234128][T25321] block nbd0: reconnected socket
[ 2166.249926][T20568] block nbd0: Receive control failed (result -32)
[ 2166.780132][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2166.788944][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2166.800009][T14669] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 2167.000473][T14669] usb 3-1: Using ep0 maxpacket: 32
[ 2167.095850][T14669] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 2167.115543][T14669] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[ 2167.149953][T14669] usb 3-1: Product: syz
[ 2167.205351][T14669] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 2167.780494][T14669] gspca_nw80x: reg_w err -110
[ 2167.785305][T14669] nw80x 3-1:3.0: probe with driver nw80x failed with error -110
[ 2167.919177][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2167.927841][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2169.046053][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2169.054429][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2169.398827][T24458] usb 3-1: USB disconnect, device number 38
[ 2169.971045][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 2171.839517][ T6104] net_ratelimit: 2 callbacks suppressed
[ 2171.839544][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2171.853581][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2171.863772][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2171.872132][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2172.289993][T21235] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 2172.570238][T21235] usb 5-1: Using ep0 maxpacket: 8
[ 2173.024429][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2173.032835][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2173.078875][T21235] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 2173.164197][T21235] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 2173.210030][T21235] usb 5-1: Product: syz
[ 2173.224231][T21235] usb 5-1: Manufacturer: syz
[ 2175.076946][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2175.085127][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2175.093254][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2175.101380][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2175.139885][T21235] usb 5-1: SerialNumber: syz
[ 2175.213800][T21235] usb 5-1: config 0 descriptor??
[ 2175.256582][T21235] usb 5-1: can't set config #0, error -71
[ 2175.329981][T21235] usb 5-1: USB disconnect, device number 50
[ 2175.433386][   T31] audit: type=1326 audit(1769965375.308:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25375 comm="syz.4.4398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f1579aeb9 code=0x0
[ 2176.155383][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4400'.
[ 2177.018465][   T50] net_ratelimit: 2 callbacks suppressed
[ 2177.018492][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2177.032443][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2177.052912][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2177.061276][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2177.537181][T25393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4403'.
[ 2177.664849][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4403'.
[ 2179.645085][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2179.653640][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2179.913923][T25415] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2180.206234][   T56] block nbd3: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 120 seconds
[ 2180.217206][   T56] block nbd3: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 120 seconds
[ 2180.235772][   T56] block nbd3: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 120 seconds
[ 2180.254959][   T56] block nbd3: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 120 seconds
[ 2180.579959][T14669] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[ 2180.733618][T14669] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2180.788292][T14669] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2180.805583][T23391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2180.814314][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2180.822437][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2180.830693][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2180.858286][T14669] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2180.867644][T14669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2180.902656][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4412'.
[ 2180.921750][T25424] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4412'.
[ 2181.443381][T14669] usb 5-1: usb_control_msg returned -32
[ 2181.491020][T14669] usbtmc 5-1:16.0: can't read capabilities
[ 2181.871384][T25434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2181.884011][T25434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2181.957930][T25435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2181.969425][T25435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2182.462990][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2182.463318][T23025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2182.471810][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2182.529193][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 180 seconds
[ 2182.540973][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 180 seconds
[ 2182.552321][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 180 seconds
[ 2182.563395][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 180 seconds
[ 2182.677303][T16123] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2182.718323][T23025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2182.733265][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2182.741613][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2182.749714][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2182.758033][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2182.951037][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4414'.
[ 2183.080143][T14669] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2183.840633][T16123] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2184.178015][T14669] usb 5-1: USB disconnect, device number 51
[ 2184.890992][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2184.899325][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2186.880076][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2187.204581][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2187.212781][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2187.364956][ T5189] udevd[5189]: worker [24073] /devices/virtual/block/nbd1 timeout; kill it
[ 2187.382308][ T5189] udevd[5189]: seq 23744 '/devices/virtual/block/nbd1' killed
[ 2187.981577][T18200] net_ratelimit: 2 callbacks suppressed
[ 2187.981599][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2187.995467][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2189.068794][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2189.077484][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2189.085611][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2189.094011][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2189.679077][T25484] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4427'.
[ 2189.721666][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4428'.
[ 2190.550252][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2190.558635][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2190.705911][T25495] binder_alloc: 25490: binder_alloc_buf, no vma
[ 2191.894955][T25510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2191.903620][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2193.014076][T23620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2193.022236][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2193.030362][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2193.038738][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2193.557496][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4438'.
[ 2193.570367][T25532] netlink: 'syz.5.4438': attribute type 2 has an invalid length.
[ 2194.382934][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2194.391123][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2194.399225][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2194.407337][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2194.896032][T23391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2194.904524][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2195.499984][   T24] IPVS: starting estimator thread 0...
[ 2195.520099][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2195.633287][T25545] IPVS: using max 25 ests per chain, 60000 per kthread
[ 2196.160263][T21371] block nbd2: Possible stuck request ffff888025f90000: control (read@0,1024B). Runtime 150 seconds
[ 2196.171151][T21371] block nbd2: Possible stuck request ffff888025f90200: control (read@1024,1024B). Runtime 150 seconds
[ 2196.182285][T21371] block nbd2: Possible stuck request ffff888025f90400: control (read@2048,1024B). Runtime 150 seconds
[ 2196.193375][T21371] block nbd2: Possible stuck request ffff888025f90600: control (read@3072,1024B). Runtime 150 seconds
[ 2197.258224][T25560] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4448'.
[ 2197.308950][T25560] block nbd0: reconnected socket
[ 2197.329621][T20568] block nbd0: Receive control failed (result -32)
[ 2197.420125][T25564] tipc: Started in network mode
[ 2197.425035][T25564] tipc: Node identity 36360251039e, cluster identity 4711
[ 2197.505196][T25564] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 2197.524593][T25568] syzkaller0: entered promiscuous mode
[ 2197.600393][T25568] syzkaller0: entered allmulticast mode
[ 2198.463847][T25563] tipc: Resetting bearer <eth:syzkaller0>
[ 2198.628860][T25563] tipc: Disabling bearer <eth:syzkaller0>
[ 2198.795411][T16810] net_ratelimit: 2 callbacks suppressed
[ 2198.795439][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2198.809402][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2198.818203][T23391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2198.826518][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2198.916255][   T24] tipc: Node number set to 900203089
[ 2200.033728][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2200.042065][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2200.059492][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2200.068188][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2200.654952][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2200.663712][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2202.703257][T25616] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4464'.
[ 2202.727341][T25616] block nbd0: reconnected socket
[ 2202.744260][T20568] block nbd0: Receive control failed (result -32)
[ 2202.948916][T16122] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 2203.173455][T16122] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2203.189992][T16122] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2203.234504][T16122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2203.263207][T16122] usb 5-1: config 0 descriptor??
[ 2203.299474][T16122] pwc: Askey VC010 type 2 USB webcam detected.
[ 2203.326394][T25625] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4465'.
[ 2203.529979][T24458] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[ 2203.910329][T16122] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2203.937855][T16122] pwc: recv_control_msg error -32 req 02 val 2700
[ 2203.945447][T16122] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2203.955275][T16122] pwc: recv_control_msg error -32 req 04 val 1000
[ 2203.963794][T16122] pwc: recv_control_msg error -32 req 04 val 1300
[ 2203.974412][T16122] pwc: recv_control_msg error -32 req 04 val 1400
[ 2204.078140][T16122] pwc: recv_control_msg error -32 req 02 val 2000
[ 2204.142174][T24458] usb 6-1: config 0 has no interfaces?
[ 2204.154619][T24458] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[ 2204.181863][T24458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128
[ 2204.276875][T24458] usb 6-1: SerialNumber: syz
[ 2204.295758][T16122] pwc: recv_control_msg error -71 req 04 val 1500
[ 2204.304186][T16122] pwc: recv_control_msg error -71 req 02 val 2500
[ 2204.311324][T24458] usb 6-1: config 0 descriptor??
[ 2204.314235][T16122] pwc: recv_control_msg error -71 req 02 val 2400
[ 2204.323309][T16122] pwc: recv_control_msg error -71 req 02 val 2600
[ 2204.332476][T16122] pwc: recv_control_msg error -71 req 02 val 2900
[ 2204.339540][T16122] pwc: recv_control_msg error -71 req 02 val 2800
[ 2204.347222][T16122] pwc: recv_control_msg error -71 req 04 val 1100
[ 2204.354683][T16122] pwc: recv_control_msg error -71 req 04 val 1200
[ 2204.367001][T16122] pwc: Registered as video103.
[ 2204.375682][T16122] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49
[ 2204.391042][T16122] usb 5-1: USB disconnect, device number 52
[ 2204.554686][T25623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2204.572057][T25623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2205.085557][T25623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2205.130480][ T6092] net_ratelimit: 2 callbacks suppressed
[ 2205.130508][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2205.144477][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2205.163316][T25623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2205.173180][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2205.181408][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2205.231295][T25623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2205.296197][T16153] usb 6-1: USB disconnect, device number 30
[ 2205.886516][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2205.894899][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2205.914322][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2205.922629][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2206.447315][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2206.733844][T25660] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4479'.
[ 2206.743210][T25660] block nbd0: reconnected socket
[ 2206.769374][T20568] block nbd0: Receive control failed (result -32)
[ 2207.045967][T24458] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 2207.212265][T24458] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2207.241845][T24458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2207.273627][T24458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2207.306218][T24458] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2207.332275][T16123] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 2207.347814][T24458] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2207.368046][T24458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2207.425572][T24458] usb 4-1: config 0 descriptor??
[ 2207.472699][T25672] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4483'.
[ 2207.521085][T16123] usb 10-1: Using ep0 maxpacket: 8
[ 2207.531896][T16123] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 2207.564539][T16123] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2207.597033][T16123] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2207.627735][T16123] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2207.715300][T16123] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2207.739623][T16123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2207.891473][T24458] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 2207.939957][T16123] usb 10-1: Product: syz
[ 2207.959489][T16123] usb 10-1: Manufacturer: syz
[ 2207.985774][T16123] usb 10-1: SerialNumber: syz
[ 2208.219247][T16123] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found
[ 2208.248692][T16123] cdc_ncm 10-1:1.0: bind() failure
[ 2208.302017][T16123] usb 10-1: USB disconnect, device number 57
[ 2209.709957][T16122] usb 4-1: reset high-speed USB device number 34 using dummy_hcd
[ 2210.251087][   T56] block nbd3: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 150 seconds
[ 2210.262287][   T56] block nbd3: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 150 seconds
[ 2210.278131][   T56] block nbd3: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 150 seconds
[ 2210.290197][   T56] block nbd3: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 150 seconds
[ 2210.885066][T25700] fuse: Bad value for 'fd'
[ 2210.891421][T25700] fuse: Bad value for 'fd'
[ 2210.898007][   T68] net_ratelimit: 3 callbacks suppressed
[ 2210.898035][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2210.911994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2211.035700][T16123] usb 4-1: USB disconnect, device number 34
[ 2211.059550][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2211.067890][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2211.520084][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2211.529979][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2211.538409][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2211.809938][T16123] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 2212.160564][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2212.168811][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2212.205773][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2212.214186][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2212.414287][T25721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4499'.
[ 2212.532171][T24458] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[ 2212.975526][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 210 seconds
[ 2213.006915][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 210 seconds
[ 2213.018336][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 210 seconds
[ 2213.040149][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 210 seconds
[ 2213.090076][T16123] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2213.129941][T16123] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[ 2213.169951][T16123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2213.232000][T24458] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2213.249967][T24458] usb 3-1: config 0 has no interface number 0
[ 2213.275647][T16123] usb 4-1: config 0 descriptor??
[ 2213.299718][T24458] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 2213.363121][T24458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2213.408961][T24458] usb 3-1: config 0 descriptor??
[ 2213.446594][T24458] usb 3-1: selecting invalid altsetting 1
[ 2213.477346][T24458] dvb_ttusb_budget: ttusb_init_controller: error
[ 2213.500093][T24458] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 2213.950099][T16123] usbhid 4-1:0.0: can't add hid device: -71
[ 2213.995526][T16123] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2214.040346][T16123] usb 4-1: USB disconnect, device number 35
[ 2214.714224][T24458] DVB: Unable to find symbol cx22700_attach()
[ 2215.021537][T25742] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 2215.109964][T16123] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 2215.327896][T24458] DVB: Unable to find symbol tda10046_attach()
[ 2215.421209][T25742] syzkaller0: entered promiscuous mode
[ 2215.428360][T25742] syzkaller0: entered allmulticast mode
[ 2215.444439][T24458] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 2215.602020][T16123] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2215.603449][T24458] usb 3-1: USB disconnect, device number 39
[ 2215.645476][T16123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2216.553211][T25741] tipc: Resetting bearer <eth:syzkaller0>
[ 2216.660156][T16123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2216.688510][ T6104] net_ratelimit: 2 callbacks suppressed
[ 2216.688536][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2216.702266][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2216.710447][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2216.718629][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2216.726790][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2216.734951][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2216.743606][T16123] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2216.821913][T16123] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2216.879917][T16123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2216.934077][T16123] usb 6-1: config 0 descriptor??
[ 2216.946529][T25741] tipc: Disabling bearer <eth:syzkaller0>
[ 2217.024791][T25756] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4512'.
[ 2217.382655][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2217.391126][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2218.100864][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2218.109151][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2218.372928][T16123] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 2218.539967][   T31] audit: type=1804 audit(1769965418.398:33): pid=25771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4515" name="file0" dev="ramfs" ino=75156 res=1 errno=0
[ 2219.239960][T16123] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 2219.492114][T16123] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2219.571365][T16123] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[ 2219.599786][T16123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2219.609906][T16153] usb 6-1: reset high-speed USB device number 31 using dummy_hcd
[ 2219.618141][T25779] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4517'.
[ 2219.660149][T25779] block nbd0: reconnected socket
[ 2219.738055][T16123] usb 3-1: config 0 descriptor??
[ 2219.927638][T20568] block nbd0: Receive control failed (result -32)
[ 2220.670006][T24458] usb 6-1: USB disconnect, device number 31
[ 2220.929127][T25782] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4518'.
[ 2222.213857][T16123] usbhid 3-1:0.0: can't add hid device: -71
[ 2222.255061][T16123] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2222.290285][T16123] usb 3-1: USB disconnect, device number 40
[ 2222.403231][T23621] net_ratelimit: 2 callbacks suppressed
[ 2222.403259][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2222.417324][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2222.426784][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2222.435128][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2223.040380][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2223.048817][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2223.268424][T25805] fuse: Unknown parameter 'grou00000000000000000000'
[ 2223.888327][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2223.896643][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2224.063118][T25811] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 2224.300651][T25813] syzkaller0: entered promiscuous mode
[ 2224.327077][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2224.327226][T25813] syzkaller0: entered allmulticast mode
[ 2224.335452][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2226.345141][T16122] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 2226.355711][T21371] block nbd2: Possible stuck request ffff888025f90000: control (read@0,1024B). Runtime 180 seconds
[ 2226.367798][T21371] block nbd2: Possible stuck request ffff888025f90200: control (read@1024,1024B). Runtime 180 seconds
[ 2226.385204][T21371] block nbd2: Possible stuck request ffff888025f90400: control (read@2048,1024B). Runtime 180 seconds
[ 2226.396628][T21371] block nbd2: Possible stuck request ffff888025f90600: control (read@3072,1024B). Runtime 180 seconds
[ 2226.420158][T25810] tipc: Resetting bearer <eth:syzkaller0>
[ 2226.964663][T16122] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2226.975568][T25810] tipc: Disabling bearer <eth:syzkaller0>
[ 2226.979921][T16122] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2226.999942][T16122] usb 10-1: Product: syz
[ 2227.004366][T16122] usb 10-1: Manufacturer: syz
[ 2227.009066][T16122] usb 10-1: SerialNumber: syz
[ 2228.089678][T16122] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2228.163390][   T37] net_ratelimit: 2 callbacks suppressed
[ 2228.163414][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2228.177403][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2228.187039][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2228.195368][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2228.243128][T25841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4535'.
[ 2228.278131][T16123] usb 10-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[ 2228.279217][T24458] usb 10-1: USB disconnect, device number 58
[ 2228.368019][T24458] usb 10-1: ath9k_htc: USB layer deinitialized
[ 2228.956392][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2228.964861][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2229.413997][T25855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2229.422412][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2230.124767][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4537'.
[ 2230.191094][T23620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2230.199230][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2231.390913][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 2231.663457][T25875] fuse: Unknown parameter 'grou00000000000000000000'
[ 2232.028045][ T5189] udevd[5189]: worker [24103] /devices/virtual/block/nbd2 timeout; kill it
[ 2232.045811][ T5189] udevd[5189]: seq 23930 '/devices/virtual/block/nbd2' killed
[ 2232.076373][T25879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4539'.
[ 2232.098678][T25879] netlink: 'syz.5.4539': attribute type 2 has an invalid length.
[ 2232.550553][T25887] virtio-fs: tag </dev/md0> not found
[ 2233.771300][   T37] net_ratelimit: 4 callbacks suppressed
[ 2233.771327][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2233.785301][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2233.970901][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2233.979205][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2234.788085][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2234.796467][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2234.836705][T25899] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4546'.
[ 2235.562187][T25911] batman_adv: batadv0: Adding interface: gretap1
[ 2235.568641][T25911] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2235.594192][T25911] batman_adv: batadv0: Interface activated: gretap1
[ 2235.650177][T14669] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[ 2235.867842][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2235.876242][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2236.622145][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2236.630517][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2236.638794][T14669] usb 8-1: Using ep0 maxpacket: 32
[ 2237.253478][T14669] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2237.429925][T14669] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2237.473026][T14669] usb 8-1: config 0 descriptor??
[ 2238.050016][T14669] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2238.073867][T25926] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4556'.
[ 2238.221012][T14669] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2238.242759][T25907] dib0700: tx buffer length is larger than 4. Not supported.
[ 2238.280846][T14669] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2238.830519][T14669] usb 8-1: media controller created
[ 2238.859126][T14669] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2239.261586][T14669] DVB: Unable to find symbol dib7000p_attach()
[ 2239.286087][T14669] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 2239.836727][T16810] net_ratelimit: 4 callbacks suppressed
[ 2239.836749][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2239.850807][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2240.414557][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2240.423043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2240.730280][   T56] block nbd3: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 180 seconds
[ 2240.742363][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2240.742622][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2240.766443][   T56] block nbd3: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 180 seconds
[ 2240.778795][   T56] block nbd3: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 180 seconds
[ 2240.789875][   T56] block nbd3: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 180 seconds
[ 2240.896221][T14669] rc_core: IR keymap rc-dib0700-rc5 not found
[ 2240.903232][T14669] Registered IR keymap rc-empty
[ 2240.920131][T14669] dvb-usb: could not initialize remote control.
[ 2240.927307][T14669] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 2240.989154][T14669] usb 8-1: USB disconnect, device number 50
[ 2241.120533][T23620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2241.128835][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2241.332308][   T31] audit: type=1326 audit(1769965441.198:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.7.4562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f433179aeb9 code=0x0
[ 2241.351070][T14669] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 2242.138407][T23391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2242.146811][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2242.357579][T25955] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4563'.
[ 2243.914014][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 240 seconds
[ 2243.967285][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 240 seconds
[ 2243.978483][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 240 seconds
[ 2243.990052][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 240 seconds
[ 2244.800069][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2248.290327][T25982] net_ratelimit: 2 callbacks suppressed
[ 2248.290394][T25982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2248.305086][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.081513][ T5189] udevd[5189]: worker [24086] /devices/virtual/block/nbd3 timeout; kill it
[ 2249.104175][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.112457][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.137519][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.145832][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.153980][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.162097][T23620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.170278][T23620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.178568][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.393853][ T5189] udevd[5189]: seq 24034 '/devices/virtual/block/nbd3' killed
[ 2250.000328][T14669] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[ 2250.636197][T14669] usb 8-1: Using ep0 maxpacket: 32
[ 2250.718319][T14669] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2250.746487][T14669] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2250.772958][T14669] usb 8-1: config 0 descriptor??
[ 2251.246172][T14669] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2252.051587][T14669] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2253.441595][T26011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4576'.
[ 2253.549345][T26020] netlink: 'syz.4.4576': attribute type 2 has an invalid length.
[ 2254.696616][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2254.704807][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2254.712935][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2254.721314][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2255.042221][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2255.050366][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2255.058582][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2255.066845][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2255.843175][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2255.851507][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2256.990096][T21371] block nbd2: Possible stuck request ffff888025f90000: control (read@0,1024B). Runtime 210 seconds
[ 2257.052869][T21371] block nbd2: Possible stuck request ffff888025f90200: control (read@1024,1024B). Runtime 210 seconds
[ 2257.069953][T21371] block nbd2: Possible stuck request ffff888025f90400: control (read@2048,1024B). Runtime 210 seconds
[ 2257.082052][T21371] block nbd2: Possible stuck request ffff888025f90600: control (read@3072,1024B). Runtime 210 seconds
[ 2257.137640][T14669] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2257.168231][T14669] usb 8-1: media controller created
[ 2257.811681][T14669] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2258.939998][T14669] DVB: Unable to find symbol dib7000p_attach()
[ 2259.290586][T26057] fuse: Unknown parameter 'group_i00000000000000000000'
[ 2259.361126][T14669] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 2259.920341][   T68] net_ratelimit: 2 callbacks suppressed
[ 2259.920368][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2259.934405][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2259.942816][T14669] rc_core: IR keymap rc-dib0700-rc5 not found
[ 2259.948896][T14669] Registered IR keymap rc-empty
[ 2260.201298][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.209675][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.670146][T14669] dvb-usb: could not initialize remote control.
[ 2260.676467][T14669] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 2260.691178][T23620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.699515][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2261.040081][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2261.048389][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2261.060496][T14669] usb 8-1: USB disconnect, device number 51
[ 2262.152966][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2262.161328][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2262.725573][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2262.741604][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2262.824392][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2262.863927][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2262.882522][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2262.998172][T14669] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 2263.130926][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4594'.
[ 2263.711169][T26083] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4596'.
[ 2264.805291][T26093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4597'.
[ 2264.815152][T26093] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4597'.
[ 2264.825639][T26093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4597'.
[ 2264.834973][T26093] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4597'.
[ 2264.844045][T26093] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4597'.
[ 2265.126999][ T5140] Bluetooth: hci4: command tx timeout
[ 2265.620060][T14669] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 2266.571992][T14669] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2266.686803][T26106] net_ratelimit: 2 callbacks suppressed
[ 2266.686830][T26106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.701107][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.802680][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.811124][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.827923][T23620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.836208][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.845317][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.853573][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.986223][T14669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2266.997765][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.997957][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2267.015416][T14669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2267.025889][T14669] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2267.105307][T14669] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2267.141059][T14669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2267.176824][T14669] usb 4-1: config 0 descriptor??
[ 2267.201279][ T5140] Bluetooth: hci4: command tx timeout
[ 2267.972000][T14669] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 2268.113555][T26078] chnl_net:caif_netlink_parms(): no params data found
[ 2268.214061][T20568] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2268.225022][T20568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2268.234618][T20568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2268.247525][T20568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2268.260950][T20568] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2268.294390][T23620] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2268.408421][T26124] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 2268.580798][T21235] usb 4-1: USB disconnect, device number 36
[ 2269.114450][T23620] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2269.149586][T26118] tipc: Disabling bearer <eth:syzkaller0>
[ 2269.279923][T20568] Bluetooth: hci4: command tx timeout
[ 2269.398646][T23620] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2270.320693][T20568] Bluetooth: hci0: command tx timeout
[ 2270.627031][T26143] nbd: must specify a size in bytes for the device
[ 2270.689941][T26147] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4611'.
[ 2270.719615][T26147] block nbd0: reconnected socket
[ 2270.735912][T23620] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2270.760865][T20568] block nbd0: Receive control failed (result -32)
[ 2270.833625][T26078] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2271.419760][T20568] Bluetooth: hci4: command tx timeout
[ 2271.637566][   T56] block nbd3: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 210 seconds
[ 2271.648986][   T56] block nbd3: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 210 seconds
[ 2271.660018][   T56] block nbd3: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 210 seconds
[ 2271.673000][   T56] block nbd3: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 210 seconds
[ 2271.686500][T26078] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2271.865430][T26078] bridge_slave_0: entered allmulticast mode
[ 2272.221905][T26078] bridge_slave_0: entered promiscuous mode
[ 2272.478581][T20568] Bluetooth: hci0: command tx timeout
[ 2272.487881][T23025] net_ratelimit: 4 callbacks suppressed
[ 2272.487903][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2272.501561][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2272.509659][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2272.517798][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2272.525897][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2272.534007][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2272.793586][T26078] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2272.837537][T26078] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2272.914504][T26078] bridge_slave_1: entered allmulticast mode
[ 2272.943267][T26078] bridge_slave_1: entered promiscuous mode
[ 2272.960533][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2272.968820][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2273.054830][T26078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2273.122903][T26078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2273.147839][T26170] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2273.430333][T16153] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[ 2273.750736][T16153] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2273.801052][T16153] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2273.840863][T16153] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2273.860020][T16153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2274.051828][T26078] team0: Port device team_slave_0 added
[ 2274.091112][T26178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4621'.
[ 2274.117035][T26078] team0: Port device team_slave_1 added
[ 2274.157108][T16153] usb 3-1: usb_control_msg returned -32
[ 2274.170242][T16153] usbtmc 3-1:16.0: can't read capabilities
[ 2274.331254][T21371] block nbd1: Possible stuck request ffff888025f08000: control (read@0,1024B). Runtime 270 seconds
[ 2274.334134][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2274.342677][T21371] block nbd1: Possible stuck request ffff888025f08200: control (read@1024,1024B). Runtime 270 seconds
[ 2274.350356][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2274.369499][T21371] block nbd1: Possible stuck request ffff888025f08400: control (read@2048,1024B). Runtime 270 seconds
[ 2274.380527][T21371] block nbd1: Possible stuck request ffff888025f08600: control (read@3072,1024B). Runtime 270 seconds
[ 2274.511366][T23620] bridge_slave_1: left allmulticast mode
[ 2274.518274][T23620] bridge_slave_1: left promiscuous mode
[ 2274.526573][T23620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2274.540984][T23620] bridge_slave_0: left allmulticast mode
[ 2274.546905][T23620] bridge_slave_0: left promiscuous mode
[ 2274.553435][T23620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2274.562445][T20568] Bluetooth: hci0: command tx timeout
[ 2274.900808][T26187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2274.913712][T26187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2274.934794][T26187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2274.946493][T26187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2276.417475][T23620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2276.447887][T23620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2276.485324][T23620] bond0 (unregistering): Released all slaves
[ 2276.640268][T20568] Bluetooth: hci0: command tx timeout
[ 2276.660987][T16122] usb 3-1: USB disconnect, device number 41
[ 2276.673560][T26078] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2276.762734][T26078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2276.850252][T26078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2276.885617][T26078] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2276.909889][T26078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2276.972285][T26078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2277.045942][T23620] tipc: Left network mode
[ 2278.013174][T26201] syzkaller0: entered promiscuous mode
[ 2278.022215][T26201] syzkaller0: entered allmulticast mode
[ 2278.081023][ T6092] net_ratelimit: 2 callbacks suppressed
[ 2278.081050][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.095288][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.103412][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.111552][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.119701][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.127865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.299895][T16122] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2278.720605][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.728962][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.822513][T26223] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2278.871282][T16122] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2278.896222][T16122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2278.915153][T16122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2278.935303][T16122] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2278.984475][T16122] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2279.007055][T16122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2279.036313][T16122] usb 6-1: config 0 descriptor??
[ 2279.814792][T16122] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 2280.000787][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2280.009112][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2280.674327][T16153] usb 6-1: USB disconnect, device number 32
[ 2280.795790][T26236] nbd: must specify a size in bytes for the device
[ 2280.803641][T26236] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4630'.
[ 2280.813279][T26236] block nbd0: reconnected socket
[ 2280.823754][T20568] block nbd0: Receive control failed (result -32)
[ 2282.989148][T26121] chnl_net:caif_netlink_parms(): no params data found
[ 2283.061830][T26078] hsr_slave_0: entered promiscuous mode
[ 2283.075367][T26078] hsr_slave_1: entered promiscuous mode
[ 2283.089141][T26078] debugfs: 'hsr0' already exists in 'hsr'
[ 2283.101277][T26078] Cannot create hsr debugfs directory
[ 2283.157331][T26253] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2283.194031][T23620] hsr_slave_0: left promiscuous mode
[ 2283.216904][T23620] hsr_slave_1: left promiscuous mode
[ 2283.229312][T23620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2283.253164][T23620] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2283.269939][T23620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2283.288918][T23620] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2283.327706][T23620] veth1_macvtap: left promiscuous mode
[ 2283.340318][T23620] veth0_macvtap: left promiscuous mode
[ 2283.409884][T16123] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[ 2283.656501][T16123] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2283.683613][T16123] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2283.738322][T16123] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2283.773293][T16123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2283.851730][T23621] net_ratelimit: 2 callbacks suppressed
[ 2283.851757][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2283.865621][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2283.880557][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2283.888802][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2284.147430][T16123] usb 4-1: usb_control_msg returned -32
[ 2284.406093][T16123] usbtmc 4-1:16.0: can't read capabilities
[ 2284.533821][T26262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2284.546539][T26262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2284.566877][T26262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2284.580293][T26262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2284.631322][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2284.639680][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2285.172558][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2285.180902][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2285.244960][T26261] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4637'.
[ 2286.299937][T16153] usb 4-1: USB disconnect, device number 37
[ 2286.816157][T23620] team0 (unregistering): Port device team_slave_1 removed
[ 2286.905042][T23620] team0 (unregistering): Port device team_slave_0 removed
[ 2287.042290][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2287.050690][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2287.730395][T21371] block nbd2: Possible stuck request ffff888025f90000: control (read@0,1024B). Runtime 240 seconds
[ 2287.743176][T21371] block nbd2: Possible stuck request ffff888025f90200: control (read@1024,1024B). Runtime 240 seconds
[ 2287.756708][T21371] block nbd2: Possible stuck request ffff888025f90400: control (read@2048,1024B). Runtime 240 seconds
[ 2287.768257][T21371] block nbd2: Possible stuck request ffff888025f90600: control (read@3072,1024B). Runtime 240 seconds
[ 2288.070481][T26286] fuse: Bad value for 'fd'
[ 2288.088894][T26286] fuse: Bad value for 'fd'
[ 2289.632082][   T68] net_ratelimit: 2 callbacks suppressed
[ 2289.632105][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2289.646096][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2289.660335][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2289.668604][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2290.451990][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2290.460387][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2290.880995][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2290.889337][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2290.929287][T26121] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2290.951827][T26121] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2291.380083][T26121] bridge_slave_0: entered allmulticast mode
[ 2291.387592][T26121] bridge_slave_0: entered promiscuous mode
[ 2291.453062][T26121] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2291.512645][T26121] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2291.540092][T26121] bridge_slave_1: entered allmulticast mode
[ 2291.595732][T26121] bridge_slave_1: entered promiscuous mode
[ 2292.359005][T26121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2292.409924][T26121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2292.487991][T23620] IPVS: stop unused estimator thread 0...
[ 2292.804613][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 2292.811473][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2292.819697][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2293.321151][T26121] team0: Port device team_slave_0 added
[ 2293.345231][T26121] team0: Port device team_slave_1 added
[ 2293.567223][T23620] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2293.861638][T26121] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2293.868712][T26121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2294.698249][T26121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2294.976551][T26349] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4656'.
[ 2295.189722][T23620] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2295.360566][T18200] net_ratelimit: 2 callbacks suppressed
[ 2295.360586][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2295.374451][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2295.383110][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2295.391371][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2295.442405][T26121] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2295.465484][T26121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2295.534261][T26121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2295.603484][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2295.612208][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2296.293168][T23620] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2296.529384][T26121] hsr_slave_0: entered promiscuous mode
[ 2296.547250][T26121] hsr_slave_1: entered promiscuous mode
[ 2296.579300][T26121] debugfs: 'hsr0' already exists in 'hsr'
[ 2296.603571][T26121] Cannot create hsr debugfs directory
[ 2296.640888][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2296.649195][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2296.717808][T23620] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2296.788994][T26364] nbd: must specify at least one socket
[ 2296.835718][T26364] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4660'.
[ 2296.886441][T26364] block nbd0: reconnected socket
[ 2296.931987][T20568] block nbd0: Receive control failed (result -32)
[ 2297.922604][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2297.931033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2298.424151][T26078] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2298.755783][T26078] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2298.925100][T26078] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2300.153816][T26078] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2300.187164][T23620] bridge_slave_1: left allmulticast mode
[ 2300.205619][T23620] bridge_slave_1: left promiscuous mode
[ 2300.253846][T23620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2300.336870][T23620] bridge_slave_0: left allmulticast mode
[ 2300.343941][T23620] bridge_slave_0: left promiscuous mode
[ 2300.360028][T23620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2300.560690][   T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 2300.568848][ T6092] net_ratelimit: 2 callbacks suppressed
[ 2300.568873][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2300.582833][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2300.742975][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2300.765056][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2300.791031][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2300.801431][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2300.861297][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2300.882112][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2300.911115][   T24] usb 3-1: config 0 descriptor??
[ 2301.121094][T23621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2301.129470][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2301.143729][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2301.152172][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2301.382200][   T24] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 2301.490752][T23620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2301.503360][T23620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2301.534238][T23620] bond0 (unregistering): Released all slaves
[ 2301.760132][   T56] block nbd3: Possible stuck request ffff888025fc8000: control (read@0,1024B). Runtime 240 seconds
[ 2301.771210][   T56] block nbd3: Possible stuck request ffff888025fc8200: control (read@1024,1024B). Runtime 240 seconds
[ 2301.779938][T16153] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 2301.786913][   T56] block nbd3: Possible stuck request ffff888025fc8400: control (read@2048,1024B). Runtime 240 seconds
[ 2301.801367][   T56] block nbd3: Possible stuck request ffff888025fc8600: control (read@3072,1024B). Runtime 240 seconds
[ 2301.871942][T23620] tipc: Left network mode
[ 2301.973778][T16153] usb 4-1: Using ep0 maxpacket: 32
[ 2302.004324][T16153] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2302.026778][T16153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2302.060694][T16153] usb 4-1: config 0 descriptor??
[ 2302.208839][T16123] usb 3-1: USB disconnect, device number 42
[ 2302.287746][T16153] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2302.324348][T16153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2302.345876][T16153] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2302.361227][T16153] usb 4-1: media controller created
[ 2302.406594][T16153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2302.419736][T18200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2302.428021][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2302.443422][T23620] hsr_slave_0: left promiscuous mode
[ 2302.461529][T23620] hsr_slave_1: left promiscuous mode
[ 2302.477782][T23620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2302.493814][T26411] ------------[ cut here ]------------
[ 2302.499337][T26411] usb 4-1: BOGUS control dir, pipe 80002680 doesn't match bRequestType c0
[ 2302.507999][T26411] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.3.4670/26411
[ 2302.509455][T23620] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2302.518574][T26411] Modules linked in:
[ 2302.529965][T26411] CPU: 0 UID: 0 PID: 26411 Comm: syz.3.4670 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2302.540972][T26411] Tainted: [L]=SOFTLOCKUP
[ 2302.545401][T26411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2302.555965][T26411] RIP: 0010:usb_submit_urb+0x157e/0x1910
[ 2302.561922][T26411] Code: d2 74 5d 48 89 54 24 40 e8 4f 35 ca fa 4c 89 ef e8 c7 ff df fe 48 89 c6 48 8d 3d ad 7d 87 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 23 35 ca fa 89 ee bf ff 00 00 00
[ 2302.582148][T26411] RSP: 0018:ffffc90003d5f970 EFLAGS: 00010283
[ 2302.589497][T26411] RAX: ffffffff8c5f42e0 RBX: ffff888029fa0e00 RCX: 0000000080002680
[ 2302.598540][T26411] RDX: ffff888032544ba0 RSI: ffffffff8c5f42e0 RDI: ffffffff90c422b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2302.607359][T26411] RBP: ffff88807c89c058 R08: 00000000000000c0 R09: 0000000000000000
[ 2302.615378][T26411] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880678c1aa0
[ 2302.623404][T26411] R13: ffff88807c89c0b0 R14: 0000000080002680 R15: 00000000000000c0
[ 2302.631783][T26411] FS:  00007f29ba2cd6c0(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000
[ 2302.640888][T26411] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2302.647506][T26411] CR2: 00007f433254da08 CR3: 0000000037c4b000 CR4: 0000000000350ef0
[ 2302.655549][T26411] Call Trace:
[ 2302.658843][T26411]  <TASK>
[ 2302.661920][T26411]  ? __init_swait_queue_head+0xca/0x150
[ 2302.667530][T26411]  usb_start_wait_urb+0x106/0x4c0
[ 2302.672644][T26411]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2302.678222][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.683966][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.690463][T26411]  ? __asan_memset+0x23/0x50
[ 2302.695146][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.702077][T26411]  usb_control_msg+0x326/0x4a0
[ 2302.706894][T26411]  ? __pfx_usb_control_msg+0x10/0x10
[ 2302.713346][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.719029][T26411]  dib0700_ctrl_rd+0x1b5/0x320
[ 2302.723926][T26411]  dib0700_i2c_xfer+0x460/0xd90
[ 2302.728833][T26411]  __i2c_transfer+0x5e1/0x1610
[ 2302.733725][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.739436][T26411]  ? __pfx___i2c_transfer+0x10/0x10
[ 2302.744782][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.750522][T26411]  ? rt_mutex_slowtrylock+0x93/0x100
[ 2302.755865][T26411]  i2c_transfer+0x15f/0x380
[ 2302.760476][T26411]  i2cdev_ioctl_rdwr+0x3ec/0x700
[ 2302.765470][T26411]  i2cdev_ioctl+0x19d/0x830
[ 2302.770043][T26411]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 2302.775122][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.780846][T26411]  ? __fget_files+0x21f/0x3d0
[ 2302.785553][T26411]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 2302.790667][T26411]  __x64_sys_ioctl+0x18e/0x210
[ 2302.795480][T26411]  do_syscall_64+0xc9/0xf80
[ 2302.801319][T26411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2302.807242][T26411] RIP: 0033:0x7f29b939aeb9
[ 2302.812722][T26411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2302.832399][T26411] RSP: 002b:00007f29ba2cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2302.840920][T26411] RAX: ffffffffffffffda RBX: 00007f29b9615fa0 RCX: 00007f29b939aeb9
[ 2302.848919][T26411] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004
[ 2302.856971][T26411] RBP: 00007f29b9408c1f R08: 0000000000000000 R09: 0000000000000000
[ 2302.865012][T26411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2302.873134][T26411] R13: 00007f29b9616038 R14: 00007f29b9615fa0 R15: 00007ffc9282feb8
[ 2302.881322][T26411]  </TASK>
[ 2302.885629][T26411] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2302.892934][T26411] CPU: 0 UID: 0 PID: 26411 Comm: syz.3.4670 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2302.903902][T26411] Tainted: [L]=SOFTLOCKUP
[ 2302.908233][T26411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2302.918301][T26411] Call Trace:
[ 2302.921588][T26411]  <TASK>
[ 2302.924524][T26411]  dump_stack_lvl+0x100/0x190
[ 2302.929242][T26411]  vpanic+0x20d/0x630
[ 2302.933268][T26411]  panic+0xd1/0xd1
[ 2302.937013][T26411]  ? __pfx_panic+0x10/0x10
[ 2302.941475][T26411]  check_panic_on_warn.cold+0x19/0x34
[ 2302.946873][T26411]  ? usb_submit_urb+0x1573/0x1910
[ 2302.951923][T26411]  __warn.cold+0x191/0x2f8
[ 2302.956371][T26411]  __report_bug+0x296/0x3d0
[ 2302.960898][T26411]  ? usb_submit_urb+0x1573/0x1910
[ 2302.966119][T26411]  ? __pfx___report_bug+0x10/0x10
[ 2302.971158][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.976811][T26411]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2302.982646][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2302.988302][T26411]  ? kasan_save_stack+0x3f/0x50
[ 2302.993272][T26411]  ? kasan_save_stack+0x30/0x50
[ 2302.998154][T26411]  ? kasan_save_track+0x14/0x30
[ 2303.003068][T26411]  ? __kasan_kmalloc+0xaa/0xb0
[ 2303.007872][T26411]  report_bug_entry+0xe1/0x290
[ 2303.012655][T26411]  ? usb_submit_urb+0x157e/0x1910
[ 2303.017697][T26411]  handle_bug+0x1c9/0x2a0
[ 2303.022058][T26411]  exc_invalid_op+0x17/0x50
[ 2303.026677][T26411]  asm_exc_invalid_op+0x1a/0x20
[ 2303.031543][T26411] RIP: 0010:usb_submit_urb+0x157e/0x1910
[ 2303.037197][T26411] Code: d2 74 5d 48 89 54 24 40 e8 4f 35 ca fa 4c 89 ef e8 c7 ff df fe 48 89 c6 48 8d 3d ad 7d 87 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 23 35 ca fa 89 ee bf ff 00 00 00
[ 2303.057090][T26411] RSP: 0018:ffffc90003d5f970 EFLAGS: 00010283
[ 2303.063184][T26411] RAX: ffffffff8c5f42e0 RBX: ffff888029fa0e00 RCX: 0000000080002680
[ 2303.071172][T26411] RDX: ffff888032544ba0 RSI: ffffffff8c5f42e0 RDI: ffffffff90c422b0
[ 2303.079154][T26411] RBP: ffff88807c89c058 R08: 00000000000000c0 R09: 0000000000000000
[ 2303.087135][T26411] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880678c1aa0
[ 2303.095128][T26411] R13: ffff88807c89c0b0 R14: 0000000080002680 R15: 00000000000000c0
[ 2303.103144][T26411]  ? __init_swait_queue_head+0xca/0x150
[ 2303.108724][T26411]  usb_start_wait_urb+0x106/0x4c0
[ 2303.113780][T26411]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2303.119346][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2303.125015][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2303.130672][T26411]  ? __asan_memset+0x23/0x50
[ 2303.135289][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2303.140946][T26411]  usb_control_msg+0x326/0x4a0
[ 2303.145732][T26411]  ? __pfx_usb_control_msg+0x10/0x10
[ 2303.151034][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2303.156700][T26411]  dib0700_ctrl_rd+0x1b5/0x320
[ 2303.161497][T26411]  dib0700_i2c_xfer+0x460/0xd90
[ 2303.166389][T26411]  __i2c_transfer+0x5e1/0x1610
[ 2303.171190][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2303.176858][T26411]  ? __pfx___i2c_transfer+0x10/0x10
[ 2303.182105][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2303.187759][T26411]  ? rt_mutex_slowtrylock+0x93/0x100
[ 2303.193098][T26411]  i2c_transfer+0x15f/0x380
[ 2303.197637][T26411]  i2cdev_ioctl_rdwr+0x3ec/0x700
[ 2303.202622][T26411]  i2cdev_ioctl+0x19d/0x830
[ 2303.207154][T26411]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 2303.212206][T26411]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2303.217863][T26411]  ? __fget_files+0x21f/0x3d0
[ 2303.222554][T26411]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 2303.227610][T26411]  __x64_sys_ioctl+0x18e/0x210
[ 2303.232406][T26411]  do_syscall_64+0xc9/0xf80
[ 2303.236945][T26411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2303.242851][T26411] RIP: 0033:0x7f29b939aeb9
[ 2303.247373][T26411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2303.266997][T26411] RSP: 002b:00007f29ba2cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2303.275437][T26411] RAX: ffffffffffffffda RBX: 00007f29b9615fa0 RCX: 00007f29b939aeb9
[ 2303.283417][T26411] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004
[ 2303.291394][T26411] RBP: 00007f29b9408c1f R08: 0000000000000000 R09: 0000000000000000
[ 2303.299457][T26411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2303.307435][T26411] R13: 00007f29b9616038 R14: 00007f29b9615fa0 R15: 00007ffc9282feb8
[ 2303.315442][T26411]  </TASK>
[ 2303.318775][T26411] Kernel Offset: disabled
[ 2303.323183][T26411] Rebooting in 86400 seconds..