last executing test programs:

22m59.084616154s ago: executing program 32 (id=469):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000100)={'U+', 0xa578}, 0x16, 0x1)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0xfffffffe, 0x1, 0x2, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x63e, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]})
ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f00000000c0))
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, r2})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="5b03a5687eb9d52fb0a138243cd14ee73d5311"], 0x14}], 0x1, 0x0, 0x0, 0x4004c8c1}, 0x0)

18m3.760322679s ago: executing program 33 (id=2088):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x1ff, 0x80000000}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0x50dc85624ea6cf59}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x804, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x2}) (async)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf)

14m2.206414031s ago: executing program 34 (id=3485):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000a01"])
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x9, 0x80000000})

12m42.311919219s ago: executing program 35 (id=3545):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0xeaa, 0x80000000)
read$eventfd(r0, &(0x7f0000000300), 0x8)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m54.957776839s ago: executing program 6 (id=4059):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000018c0)={'macvlan0\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x0, [], [], [], [0x2]}) (async)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000000022, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = syz_open_dev$video4linux(&(0x7f0000000200), 0x308000, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async)
r7 = accept(r6, 0x0, 0x0) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001a80)=ANY=[@ANYBLOB="020300030f39b71a0339db820cdaa43cc533ee0c0000000100000000000000020009004087000023492741702c8b8303000600002000000200000000000020000000000000000002000100000004d300000502000000e0030005003c0000000295b1d5abb88ff817e34a76a58c400b016d243a1d418c301640811cd9b8de46e099244c74aba4b8d47bc1fee407b505000000000000005ccccf2057ad2cd9017db62555e8866ca9ecb8fb41e9fd90043b66b3c3a6ceb9d19957b724946d52b885afa1fddd5e313fca796822c290"], 0x60}, 0x1, 0x7}, 0x0) (async)
sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmsg(r7, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r9, 0x400448ca, 0x0) (async)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x48, &(0x7f0000000100)={0x0, 0x4, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x17, "3d03e1f771a66caf0f6fd147d909f471d5f66f2dfed60b"}]}, 0x28)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000600)={0x0, 0x0, '\x00', {0x0, @reserved}}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000001900)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0xa, 0x0, 0x408d}, @ipv4=@tcp={{0x1a, 0x4, 0x0, 0x3, 0x16b, 0x68, 0x0, 0xf, 0x6, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x23, 0xd7, [@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010100, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @local, @broadcast]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0x2, [{@multicast1}]}, @ssrr={0x89, 0x1f, 0x3b, [@rand_addr=0x64010102, @broadcast, @remote, @private=0xa010102, @rand_addr=0x64010102, @multicast1, @loopback]}, @end]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0xc2, 0xa, 0x0, 0x57c, {[@md5sig={0x13, 0x12, "a5be62c67db3093e758bddfa60e4eaf7"}, @sack={0x5, 0x6, [0x1]}, @sack_perm={0x4, 0x2}, @generic={0x3, 0xe, "50602fd51461475c0e8db480"}, @exp_fastopen={0xfe, 0xa, 0xf989, "10f4f16eeda2"}, @nop, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}, {"5aa6a8041797706503ef4cc1b76ee9827189b99a8aa03c019d59ccdbdfca76bd721d8ea0cc88b696f796fc1cb73b50cd95239c73a00cdfb1b4caab761dade01aef2b8a616b804574b5cbb73d9c41d91379bc70e8b612856b71321f4e06528722fc6e06ecb3f460629ed32bc3587583c5b1f4c3d771678415c020d8ff6875c29686361a9dd0a81ed4d5ab7a17f10ff2cc56ef823be14b483e89ed86bd812c162725f11cf5b8c25c0476634bae5894b2d77b628498d78684"}}}}, 0x179)
recvmmsg(r0, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/254, 0xfe}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/189, 0xbd}, {&(0x7f00000016c0)=""/235, 0xeb}, {&(0x7f00000017c0)=""/42, 0x2a}], 0xa}, 0x10001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0x3cd1fa5d}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x4022, 0x0)

10m54.71176661s ago: executing program 6 (id=4062):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) (async)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3)

10m53.327505409s ago: executing program 6 (id=4072):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="89282abd7000ffdbdf250100000008000200030000000900010073797a30da03a3475d3018304b7c50000000007c8b02130b5dd6f3a104a352eb7a933127b78e203708c2d5aab8d9ff9796b14297482062ca3c8d0fe203fc0e72990f504f9fbc28856084d0fbac44c0c57e90a906f572d0d9038c98d294eee4bacea0f7a606515a8ab090e0ffd33d67f4a162c433b71823af11b46b0452395687272f1814e0923b582863e68f92bc504132dce6ccb4c6c896e7922da93dd9374d63b4c2040b754553052788a80b465a33c093e1d8ae8479f0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)

10m53.025227084s ago: executing program 6 (id=4074):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r1)
chown(&(0x7f0000000040)='./file2\x00', r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

10m52.933200307s ago: executing program 6 (id=4075):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r1)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r2, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_FLOW={0x6}]}, 0x38}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x50})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80800)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000140)={0x4, "baf7da"}, 0x6)

10m52.647077337s ago: executing program 6 (id=4077):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xe0002000})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1})
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffe)
accept4(r7, 0x0, 0x0, 0x80800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(r9, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50)
vmsplice(r8, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e54", 0x4}], 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2a00, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x3, 0x10000, 0xffff, 0x9, 0x5, 0x8, 0x1, {0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0xfff, 0x7, 0x0, 0xffff0000, 0x1}}, &(0x7f0000000140)=0xb0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000000000000034d564b"])
r11 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000340)={0x1, 0x4, 0x1})

10m52.549104658s ago: executing program 36 (id=4077):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xe0002000})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1})
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffe)
accept4(r7, 0x0, 0x0, 0x80800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(r9, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50)
vmsplice(r8, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e54", 0x4}], 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2a00, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x3, 0x10000, 0xffff, 0x9, 0x5, 0x8, 0x1, {0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0xfff, 0x7, 0x0, 0xffff0000, 0x1}}, &(0x7f0000000140)=0xb0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000000000000034d564b"])
r11 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000340)={0x1, 0x4, 0x1})

9m19.428692147s ago: executing program 5 (id=4538):
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f0000000080)='jfs\x00', 0x3a0c010, 0x0)

9m19.31556208s ago: executing program 5 (id=4540):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000000000000f00000005"])
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x40000)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

9m19.171767961s ago: executing program 5 (id=4542):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0xa0, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0xffffffff}})
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
setpriority(0x1000000, 0x0, 0x4)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000280)={0x10, 0x4, 0x4, {0x1, @sdr={0x2036315a, 0x3}}, 0x9})
socket(0x400000000010, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c)

9m19.063352839s ago: executing program 5 (id=4544):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000040)='./bus\x00', 0x34)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26)
io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x1f0e, r5, &(0x7f0000000140)='i', 0x1, 0x24}])
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mount$pvfs2(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x40000, &(0x7f0000000440)={[{'/dev/nullb0\x00'}, {'.'}, {'!\x89@.^[!'}, {'\\'}], [{@appraise_type}, {@subj_user={'subj_user', 0x3d, 'lowerdir'}}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4c22, 0x4, @empty, 0x888}, 0x1c)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_clone(0x6000400, &(0x7f00000000c0)="1a80a99b373ad8bc97ef27ed9322c298f7a7f47dcbcf61557ccbb168e836b9a1ee565eadd3a2fbc8cb8f03078195", 0x2e, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000580)="be68838a72e87290095604db098f5b2ffe31d17127b373e6896c207244f445fcebb7781e9a093e7fa886eb2c3a3f83909096eaa61d31edad581cbedfbbe3fd0111740cb41ebb619e08a4f2a1eec334db89aa00df7a8f4806701708bd2c86618b925341abbbcb03306d5e550cad352bad36a0d23944fadcc13a9b3b5154bbc0aa12d891cb791e7d529392d21ceaaec2dd3304ec551531752388e2c84e0329b5aac62924196224233b79d96fd6e789520147ec224671e52cebc2c48fe6c7026b715c73f2fad8674ee24be9e53df2486413e92c369d6be4835324748ce0a59fd4ea4916121a6aad3f8e")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x3011, r0, 0xffffc000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)

9m18.589355485s ago: executing program 5 (id=4551):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f00000001c0)=0xb00) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r2, &(0x7f00000062c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x80000}}, 0x50) (async)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (async, rerun: 64)
readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1) (rerun: 64)
ioctl$KVM_CREATE_VM(r1, 0xae03, 0xa) (async)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000"], 0x0)

9m18.057928634s ago: executing program 5 (id=4552):
r0 = socket(0x15, 0x80805, 0x1)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x401}, 0xe)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa050102}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x8000, 0xfff7, 0x202, 0x1, 0x5, 0xc, 0x5, 0x2}, 0x20)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e08007b0c23"], 0xb)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000001080)=0x6)

9m17.920467325s ago: executing program 37 (id=4552):
r0 = socket(0x15, 0x80805, 0x1)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x401}, 0xe)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa050102}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x8000, 0xfff7, 0x202, 0x1, 0x5, 0xc, 0x5, 0x2}, 0x20)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e08007b0c23"], 0xb)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000001080)=0x6)

8m44.487324517s ago: executing program 9 (id=4702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fe48ac3ebe203772cc2c09845b0a3e697718fb04bf6ddb", @ANYRES32=r2, @ANYBLOB="0800050004000000"], 0x24}}, 0x40010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x20044001)

8m44.388706937s ago: executing program 9 (id=4704):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
userfaultfd(0x80001)
close(0x3)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006)

8m44.283852028s ago: executing program 9 (id=4706):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x4a, 0x0, "34ae2da04a8efc144b88e127072bbe96d6393c3e96539a44edcc29087f5d9eb0ea6eb48148753ea282e7121b4d6c111bd6163ed8ec063b9f573668b52b6c7210b81f3c94b7909bacefb956163799d5bf"}, 0xd8) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000004c0)=0x6, 0x41) (async, rerun: 64)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000fa3000/0x4000)=nil}) (async)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f000030a000/0x400000)=nil) (async)
ioctl$TCXONC(r3, 0x540a, 0x3)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 32)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="51e657b8220c", 0x6}], 0x1}}], 0x2, 0xc0) (async)
sendto$inet(r1, &(0x7f0000000580)="bb", 0x1, 0x10008095, 0x0, 0x0)

8m44.178880916s ago: executing program 9 (id=4708):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x280}) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00') (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
setpgid(0x0, r1) (async)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) (async)
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0xe9a}}, 0xb03c, 0x7}, 0x90) (async)
epoll_create1(0x80000) (async)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) (async)
ioprio_set$pid(0x1, 0x0, 0x4) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)) (async)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$describe(0x6, r6, 0x0, 0x0)

8m44.058017806s ago: executing program 9 (id=4709):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000801}, 0xd0)
recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0xfcd)

8m43.898680419s ago: executing program 9 (id=4710):
syz_usb_connect(0x5, 0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000001109400c0904080601ff8bbd020a240107000d02014db8240503ac5f"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r0, 0x0)
ftruncate(r0, 0x200000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x600200, 0x0)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="dbcdf2d72b2b710539dd248ad2de1fb556be768dea7e43d6107288490298c26d20c5fc19c36a8b9757eaa339b0a88e272607520087cdd0cab17a35c6c61b95fe2f49c8bd4c893ff16a3fd3bcee48abff501bf5f8d954ffce6ef0e65ffae196cdd2fd7bff12fc747aaa924b2e7ce840d3bc44d556c3303211dee013c5c3a0d09ae053d9823b4a645a0d1a0dcfb859161889443735b7", 0x95}, {&(0x7f0000000100)="d3cd8c2d664972e3b14da6f8e21caf5dd7c37dce9dc9a2b640fed8dbdb85c51f29337dc6951a1ac785eede2235c179db97d3d3b6d750a57cbd124a53d79b171189fc8942db17ced6181dee3b85cdb8087ef36ab8b3069a37a282c9162cb543fcb78149013a17b43364677d3b25ec287eb132676fe2205c9c02793a304f4e97670e7fefdbd3be3705ccb75fe1309a4183920a22998833be6c64da63d9ce6cf82060ba27", 0xa3}, {&(0x7f00000001c0)="136b0a4b5fa259a4e77117", 0xb}, {&(0x7f0000000200)="1895fab3017f8b759bb3def1e5c3", 0xe}, {&(0x7f0000000240)="b0b3d56e64804e233f71ff3b0574b697d3b8302c06d96c156a68457928f6b1c02b683c95b259b1c6a22e4d182ffdf928d287b37026d3f4380c5aef6b490b7cb9abaaf2c7be79cc7a79050af63ef1bcd1b0f97abda8", 0x55}, {&(0x7f00000002c0)="bac4afac74b709faaefa48657c7d7c4615f3b53033d495d85bd028c4efdbbbefa4443bcd7faf9e93e8e1883b283a631fa64f8c7d40f91cc857281e2ab639771bdafb1b8ae8620b966f7b95bce550156bb595a8dd0b7e6d7b62e56440154972ba", 0x60}, {&(0x7f0000000400)="db893dc4a58f4306153cd4ba0d2f4f4f6650bb8c0eb32e311f628c79e323634f18c1711aabee8de6fb63f7c1a0596f91de05d8c53c2c7a7d5b3ceda70fb4f18dbfe01a9d39412bd581f457b6a00cb817ce0a4ecc1b75650994e4f16acc66168271c44f764f5a41d9f6281f9dd7", 0x6d}, {&(0x7f0000000480)="2f1c62a7594e528f43e7b3e17f976ddfc84ef6c314bdd0b6fc38e4207d78fdc42e3f06fac465aafa0ebdb65321794873fbdc9deb9d677ecc7839a862a4d4346e42f7a334f13b82b68d3bd340ad7926d19644f99836a9f6b07c9e71160554fe5255da4f68f7aa016acc735df21f5a4a225a096e60663b3ada6bd0af1c94ca37d3de07b6ffd43826bb9395c12c9b31d4bfdc5bd11487962a6a531f387e34345fb041af3f14144b0c00195f8fac552540d94bf09396a3dc89474e0e9d12479c2b", 0xbf}], 0x8)

8m43.750331671s ago: executing program 38 (id=4710):
syz_usb_connect(0x5, 0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000001109400c0904080601ff8bbd020a240107000d02014db8240503ac5f"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r0, 0x0)
ftruncate(r0, 0x200000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x600200, 0x0)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="dbcdf2d72b2b710539dd248ad2de1fb556be768dea7e43d6107288490298c26d20c5fc19c36a8b9757eaa339b0a88e272607520087cdd0cab17a35c6c61b95fe2f49c8bd4c893ff16a3fd3bcee48abff501bf5f8d954ffce6ef0e65ffae196cdd2fd7bff12fc747aaa924b2e7ce840d3bc44d556c3303211dee013c5c3a0d09ae053d9823b4a645a0d1a0dcfb859161889443735b7", 0x95}, {&(0x7f0000000100)="d3cd8c2d664972e3b14da6f8e21caf5dd7c37dce9dc9a2b640fed8dbdb85c51f29337dc6951a1ac785eede2235c179db97d3d3b6d750a57cbd124a53d79b171189fc8942db17ced6181dee3b85cdb8087ef36ab8b3069a37a282c9162cb543fcb78149013a17b43364677d3b25ec287eb132676fe2205c9c02793a304f4e97670e7fefdbd3be3705ccb75fe1309a4183920a22998833be6c64da63d9ce6cf82060ba27", 0xa3}, {&(0x7f00000001c0)="136b0a4b5fa259a4e77117", 0xb}, {&(0x7f0000000200)="1895fab3017f8b759bb3def1e5c3", 0xe}, {&(0x7f0000000240)="b0b3d56e64804e233f71ff3b0574b697d3b8302c06d96c156a68457928f6b1c02b683c95b259b1c6a22e4d182ffdf928d287b37026d3f4380c5aef6b490b7cb9abaaf2c7be79cc7a79050af63ef1bcd1b0f97abda8", 0x55}, {&(0x7f00000002c0)="bac4afac74b709faaefa48657c7d7c4615f3b53033d495d85bd028c4efdbbbefa4443bcd7faf9e93e8e1883b283a631fa64f8c7d40f91cc857281e2ab639771bdafb1b8ae8620b966f7b95bce550156bb595a8dd0b7e6d7b62e56440154972ba", 0x60}, {&(0x7f0000000400)="db893dc4a58f4306153cd4ba0d2f4f4f6650bb8c0eb32e311f628c79e323634f18c1711aabee8de6fb63f7c1a0596f91de05d8c53c2c7a7d5b3ceda70fb4f18dbfe01a9d39412bd581f457b6a00cb817ce0a4ecc1b75650994e4f16acc66168271c44f764f5a41d9f6281f9dd7", 0x6d}, {&(0x7f0000000480)="2f1c62a7594e528f43e7b3e17f976ddfc84ef6c314bdd0b6fc38e4207d78fdc42e3f06fac465aafa0ebdb65321794873fbdc9deb9d677ecc7839a862a4d4346e42f7a334f13b82b68d3bd340ad7926d19644f99836a9f6b07c9e71160554fe5255da4f68f7aa016acc735df21f5a4a225a096e60663b3ada6bd0af1c94ca37d3de07b6ffd43826bb9395c12c9b31d4bfdc5bd11487962a6a531f387e34345fb041af3f14144b0c00195f8fac552540d94bf09396a3dc89474e0e9d12479c2b", 0xbf}], 0x8)

3m31.89595816s ago: executing program 0 (id=5860):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x32315852}})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched_retired(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x781, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x1}, {0xfff1, 0xffff}, {0x9}}}, 0x24}}, 0x20000000)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40408d1}, 0x0)
r5 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "365c350403785f5211ca3557f21b5a8f6683ba992b84eae8a9e518173cf8b86f76c6437b1602bb4799a1eaff90cd74e2453ed695e18adbdcffdde8d61ec4de5e", 0x2d}, 0x48, 0xfffffffffffffffb)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x200401c4)
keyctl$clear(0x7, r5)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2501000000080001000300000008000200020000008b14855015ea62b46ebe71f446a61483f09945ce2907e7730da0018910a2fb150d61a746c451854442fffbc90ce7128bd6130779e22d0a3c7cb6be4b87e1aba5575ac98d08a7aae86ce87b98bb935d2a5056ec2fd43126771068450b3a"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)

3m31.868445168s ago: executing program 0 (id=5861):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)={0x5, @local}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xd, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x48005) (async)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f00000001c0)={0x4, 0x2a5, 0x7, @multicast, 'bridge_slave_0\x00'}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x69}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8800) (async)
r4 = getpgrp(0xffffffffffffffff)
ptrace(0x11, r4) (async)
r5 = dup3(r2, r2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r6=>0x0}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000380)={0xc, <r7=>0x0})
ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000003c0)={0x28, 0x0, r6, r7, 0x2, 0x10000, 0x5}) (async)
timerfd_create(0x5, 0x80800)
r8 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x8b)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r5)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, r9, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x40000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x0, 0x2})
r10 = syz_open_procfs(r4, &(0x7f0000000640)='net/arp\x00')
sendmsg$rds(r5, &(0x7f0000001bc0)={&(0x7f0000000680)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001b00)=[{&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000740)=""/175, 0xaf}, {&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000900)=""/195, 0xc3}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/208, 0xd0}], 0x6, &(0x7f0000001b80), 0x0, 0x20000000}, 0x20004088)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4e86f06a2dbc6be4}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4d001}, 0x4000080) (async)
ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f0000001d40)={0x28, 0x2, r6, 0x0, &(0x7f0000001d00)="ad2069", 0x3, 0x1577434e}) (async)
ptrace$cont(0x1f, r4, 0x7, 0x7)
r11 = getpgid(r4)
ptrace$cont(0x1f, r11, 0xfff, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r8, 0x5385, &(0x7f0000001d80)={0x92, ""/146}) (async)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r10, 0x80605414, &(0x7f0000001e40))
fcntl$getownex(r8, 0x10, &(0x7f0000001ec0))

3m31.794781594s ago: executing program 0 (id=5862):
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00')
ftruncate(r0, 0x7fffffffffffffff) (async)
r1 = socket$netlink(0x10, 0x3, 0xc) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000100)=0xc)
prlimit64(r2, 0x6, &(0x7f0000000180)={0x8, 0x7}, 0x0) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000006cda8d3791146de000000000020000086547c5ee3225fdb88fbbeb422c4cebc1bc8c99d31c3486082ff2f2129e58685d957c83969c4afdc1b8b33be059e43894fc8a8fc2379f8ee83467072a643a5b2e1cdfd0175b90cc586681ec85f41877bae994004574cbc0d3773364bbf621df36f713e4ba4910cc"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

3m31.520026455s ago: executing program 0 (id=5863):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 32)
r0 = socket$isdn(0x22, 0x3, 0x3)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/24, 0x18}], 0xa, 0xfffffe01, 0x3) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1)

3m31.4908519s ago: executing program 0 (id=5864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r4, @ANYBLOB="0a0091"], 0x28}, 0x1, 0x0, 0x0, 0x44000045}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x384, 0x13, 0x8, 0x70bd29, 0x25dfdbfc, {0x1, 0x3, 0x8, 0x9, {0x4e24, 0x4e22, [0x2, 0x8e, 0x0, 0x99a], [0x2fe, 0x10001, 0x1ac], r4, [0x140000]}, 0x323, 0x78a}, [@INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "9f96582b2172a2da72c9dce9b59ffec992e2cef493966f6fdff7073f5755b32f45a2f3b9cdf44276195d84098bbc61996c9fc57f6582aab1d2ec866bd76636a89f0a84f9d1358f7e45ea0d4a11c3478226a89683e601379af228157d5b5cd3de4cb3687bc7e84074bc4dc6f175d27cf9aa1fd589caa3a2b95ebc851f317fbf975c695e7c92f0f2abad309cd06dd8eaf5f0c17840cc8e08a2b2835ffcddfcd9c9e26d7fdb93287d235b805ecc4d9964e025613aacd4a600dff064505cd112f9d30be17ee5b083d9ea1a71c566"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "d45025c039a4df28"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "9c94a1d268b99695d6b8c6ea8903e663b9d7d2ea55e47db979a56c0cfb2a851d791281ccf1b3ba513447532bb31d73233b6b7d065748052e8162eab523fcf39ae5222206d97f45ecd55fb3da1d3a9d0ffbfb2047ba4cf309608138f9f1e7c4c9e688c689f4c31529a0042733ee9459fb34789517909bf4c37ccba20c68e11f78c7e7febd980664bd64c804f312175691874e8664a413ad63cdf01786a8bf15743bc4ef2b6c68b238954ef8f6abc99f2816981f"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "50d5fb84404119bc5d48ddbe175e99984310e62320817c8d04c20f1b5fdb35141ec3e046e2c674a0fa2cc13dc12faf7e6395459fae5135a7566029499117095cf36ab90eb0905be979312bedc139b7880ca78c95f72f9e1e2c756d9a0220230513ae611552503132f040b8c5b7943b4634d4074bccced2ee56b66b0a94c9c8a6423dcfa03a886047ec9e7b602745a6a55363449b32d1faf5ae066ef35cf0d64af0a177314f1f8d03"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "89fb3ee0cefcdc927f7098d1f87d73446b817f70e1bd5960f8918da4b68a3376678d59b557ab67aab25a95dc9253077543b56b085b49c6469b337b075359e78ac6c151f9a34309588213004355ad171a85241cb9d05ce1723e339b91f07f97b7845bb59be6bfccc368c153e12fdef5b251c2adc16b43f7ffcd30f57f8af85bd39883da1039b3c3dc71947684f665df7a8d6c0482c6c45f46ad9e05d2f21a3b3dc439f8c4d891f8a6801d61bafebaf664ec3ae80985886ec1120b9e07089618267ba363e0fbfa793275936d9d155ec69684a09691a51a459fdab36c3b66eee37ee43a6ca99e9d635230681c3dc33c9acb24ce"}]}, 0x384}, 0x1, 0x0, 0x0, 0x40804}, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x4d, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x240009d0)

3m30.3858943s ago: executing program 0 (id=5868):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af4fe800000000000000000000000000010ff02000000000000000000120000000189"], 0x340a)

3m30.106938585s ago: executing program 39 (id=5868):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af4fe800000000000000000000000000010ff02000000000000000000120000000189"], 0x340a)

1m58.585581065s ago: executing program 1 (id=6376):
mkdir(&(0x7f0000000000)='./file0\x00', 0x18a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r2, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x5}, 0x90)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x42067112}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
setresuid(0x0, 0xee01, 0x0)
ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x9)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[], [], 0x2c})

1m58.427991202s ago: executing program 1 (id=6378):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000640)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x980001, 0x0, '\x00', @p_u8=0x0}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000640)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x980001, 0x0, '\x00', @p_u8=0x0}}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

1m58.22894236s ago: executing program 1 (id=6380):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x1, 0x5, 0x7fffffff}, 0x18)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET(r1, 0x40043d14, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x1, 0x5, 0x7fffffff}, 0x18) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$PTP_SYS_OFFSET(r1, 0x40043d14, 0x0) (async)

1m58.123415662s ago: executing program 1 (id=6382):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/clear_refs\x00', 0x1, 0x0) (async)
r1 = syz_clone(0xa8100800, &(0x7f0000000000)="2119b724eb1ce4c14e2623d32ae9130f653dc2e3081baf9282292147e6525965a418013b44687c400663b1c8baab8281e2a5af005c009f48ae1d033ff1a7b9a2d4adb71d1fb1383c0d73fbe6a499bd5ff3806278d0dafbb04033287d51cf79863a32d6358a748af27eb11935d08fb332f8e07584e735a9d2355deea372de3ebcc9693c6d203f80c127663fd863fcbac9f9bcf59099d69adb475dc6ed1283d589bee410457fd08abf74520fe35acadb3e6b13712ffc71ff8a70e979a92cf95428ad09b3ef6ee4a11c3e4cf031b0f50aedfcf059cb7a8333", 0xd7, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="e0568d42772d171b59bf6e682e0582599e722ebfe8e975c51d")
sched_setattr(r1, &(0x7f0000000240)={0x38, 0x5, 0x10000000, 0x0, 0xb9, 0x4, 0x4, 0xfffffffffffffffb, 0x2, 0x40}, 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000280)='./file0/../file0\x00', 0xd2) (async, rerun: 64)
write$sysctl(r0, 0x0, 0xfffffdeb) (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260)

1m58.001453802s ago: executing program 1 (id=6385):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x12, 0x5, 0x0, 0x29, 0x4, 0x6, 0x200, 0xbdb], 0xffff1001, 0x24b140})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x20048054)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}})
r5 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0xfffffffd)
r7 = accept4(r6, 0x0, 0x0, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xd0c)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

1m57.642087924s ago: executing program 1 (id=6390):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8810) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xfffffffffffffdbc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000108000440000000040900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20040805}, 0x40000)

1m57.468641728s ago: executing program 40 (id=6390):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8810) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xfffffffffffffdbc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000108000440000000040900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20040805}, 0x40000)

1m24.791832686s ago: executing program 2 (id=6571):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async)
write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)=0x9) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)=0x9)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe, 0x1, 0xc, '\x00', 0x8168}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe, 0x1, 0xc, '\x00', 0x8168})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x40048c0}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x2, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r7, r8, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="78010000", @ANYRES16=r9, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4810}, 0x40)

1m16.03803763s ago: executing program 2 (id=6618):
r0 = socket$inet(0x2, 0x3, 0x9)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x12, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x20}}], 0x2, 0x0) (async)
socket(0x2c, 0x3, 0x1)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', <r2=>0x0, 0x8, 0x20, 0x4, 0x1, {{0x6, 0x4, 0x0, 0x31, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @remote, @multicast1, {[@noop]}}}}}) (rerun: 32)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@empty, @multicast2, r2}, 0xc)

1m15.091978843s ago: executing program 2 (id=6626):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000080)={[{@inode32}]})

1m15.082745816s ago: executing program 2 (id=6627):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x301091, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180))
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa08, &(0x7f00000001c0)={&(0x7f00000b0000/0x2000)=nil, 0x2000})
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003d80)=@newtaction={0xe4, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0xd0, 0x1, [@m_ipt={0xcc, 0x1, 0x0, 0x0, {{0xffffffd7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x48, 0x6, {0xba15, 'security\x00', 0xdb, 0xffff, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080)
pipe2(&(0x7f0000000000), 0x0)

1m14.408737889s ago: executing program 2 (id=6635):
r0 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb2<S\xd8\x11\x8b\x9a0\xea1\xde_\xcfW\xfa', 0x3)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0xbc4, 0x2}}, 0x30)
socket$inet(0x2, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8932, &(0x7f0000000000)={'dummy0\x00'})
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="8afde0d85910dade13d784ad7a11bf66d48ad01a39280f95ba99c32313434d1283354f1e6c0c40f4ca5fef6256718509c8288f621bb03ed91fa5754062cecb4c4c0783e3cc992cb7a2931cc5b636113b535258fa880577d30ae0671204d5884b37f0db86a3d3dc950f", 0x69}, {&(0x7f00000001c0)="081b0e202dbff8d72cdbd08482fa0b7b7d2f314b671157b4ceb88b39a6bd0f7b930d8e2f09098a1815e3588e2bbf59a508fdc5fdf6216e45e860ca798e5f39f7c81a11f045f5279dccc970cba77b1176eda7226da8494e88f693234f464bf900d12fda60f0fd346257e47fc33fe9680a0d240bd4a9b19cab194e970206e643b5494fcd376299db6bbf950bd82154777632d1df67825e13f2a51551712990f0a056adb8aa35438405237a0dba32685b8786c2036ac602ebfd66a70b391ee94a92b10c2c3d5d3dee33f9dda6745000f024c3f6005fba310cefcef0fa30e20a714d673956ea48de2ca29aa040455256f0b9249635ab27fbcbdb", 0xf8}], 0x2, 0x0, 0x0, 0x60000000}, 0x8040)

1m14.035986133s ago: executing program 2 (id=6637):
socket$igmp(0x2, 0x3, 0x2)
socket(0x840000000002, 0x3, 0xff) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
pread64(r0, &(0x7f0000000140)=""/215, 0xd7, 0x100000076)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
pread64(r1, &(0x7f0000000340)=""/98, 0x62, 0x8000000000000000) (async)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300) (async)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0x80045300, 0xfffffffffffffffe) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000280)={'comedi_parport\x00', [0x4f27, 0xb, 0xcd, 0x400, 0x1, 0xcc7, 0x5, 0x5c95239b, 0x5, 0x3ff, 0x7fffffff, 0x1600, 0x3, 0x40009, 0x5, 0xe1cb, 0x6, 0xffffffff, 0x3, 0x3, 0x85, 0xfffffffd, 0xfffffffd, 0xfffffff5, 0x6, 0x0, 0x2000003c, 0x4, 0x3528, 0x2, 0x3]})

1m13.894197433s ago: executing program 41 (id=6637):
socket$igmp(0x2, 0x3, 0x2)
socket(0x840000000002, 0x3, 0xff) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
pread64(r0, &(0x7f0000000140)=""/215, 0xd7, 0x100000076)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
pread64(r1, &(0x7f0000000340)=""/98, 0x62, 0x8000000000000000) (async)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300) (async)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0x80045300, 0xfffffffffffffffe) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000280)={'comedi_parport\x00', [0x4f27, 0xb, 0xcd, 0x400, 0x1, 0xcc7, 0x5, 0x5c95239b, 0x5, 0x3ff, 0x7fffffff, 0x1600, 0x3, 0x40009, 0x5, 0xe1cb, 0x6, 0xffffffff, 0x3, 0x3, 0x85, 0xfffffffd, 0xfffffffd, 0xfffffff5, 0x6, 0x0, 0x2000003c, 0x4, 0x3528, 0x2, 0x3]})

7.279117431s ago: executing program 3 (id=7100):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32)
ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0x3) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x25f, 0x69}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "45733e0eeb622662eef0a466f7c64f33"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a30503bfebcde739a5c1f6fb12e33223"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000280)) (async)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, <r3=>0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002340)={0x50, 0x0, r3, {0x7, 0x2b, 0xfff, 0x440020, 0x94, 0xfffd, 0xffffffe2, 0x7, 0x0, 0x0, 0x4, 0x7}}, 0x50) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x54, r1, 0x222, 0x70bd26, 0x9, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x20000001)
connect$inet(r0, &(0x7f0000002500)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000002540)={0x80})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x30, r1, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x4c}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xf800}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x20040881) (async)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000002700)=r4) (async, rerun: 32)
r5 = getpid() (rerun: 32)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000002740)=r5)
mkdirat(r0, &(0x7f0000002780)='./file0\x00', 0x18) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002800), r0) (rerun: 32)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x54, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x99c8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x80000001}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4756ecaf}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xa6b}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000) (async)
syz_open_dev$dri(&(0x7f0000002940), 0x200, 0x10000) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000029c0), r0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002a00)={'team0\x00', <r8=>0x0}) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002ac0)={'ip6tnl0\x00', &(0x7f0000002a40)={'syztnl0\x00', <r9=>0x0, 0x4, 0x8, 0x10, 0xffff, 0x46, @mcast2, @empty, 0x7800, 0x80, 0x0, 0x2400}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002b00)={'batadv_slave_0\x00', <r10=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002b40)={'rose0\x00', <r11=>0x0}) (async)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000002b80)={@local, @rand_addr, <r12=>0x0}, &(0x7f0000002bc0)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002c00)={'team0\x00', <r13=>0x0}) (async, rerun: 32)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002c40)={<r14=>0x0}, &(0x7f0000002c80)=0xc) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002cc0)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003280)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003240)={&(0x7f0000002dc0)={0x444, r7, 0x803, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x48}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0xfd, 0x4, 0x6}, {0x3, 0x2, 0x7, 0x4}, {0x6, 0xb8, 0x5, 0x10001}, {0x0, 0xa, 0x6d, 0x9}, {0x410, 0x8, 0x0, 0xd}, {0x9, 0xf, 0xf0, 0x1}, {0x5, 0x1b, 0x6, 0xe4}]}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7b}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x20004810}, 0x44051)

7.226522551s ago: executing program 3 (id=7102):
r0 = socket(0x1e, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040045}, 0x40010)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) (async)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x1, "fafddb58"}, @local=@item_4={0x3, 0x2, 0x4, "bdbb50fa"}]}}, 0x0}, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@host}) (async)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5768, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x20000004) (async)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004880}, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f18b3d106d04b2085980010203010902120001000020060904"], 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020301"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000104"], 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0xa77, 0x0, 0x5}]})

5.643524299s ago: executing program 3 (id=7112):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0xf02, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x7d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x40001)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x71}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x17}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf14}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000)
r5 = syz_open_dev$dmmidi(&(0x7f0000000440), 0x8000000000000001, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000480))
writev(r5, &(0x7f0000001880)=[{&(0x7f00000005c0)="943686659ea13ab1418601194667224b77c5a62bbb278d781dadd54cac95e11fc71c16dddfb55b7c57a6901f627462fd0786430528eb9c3a01ef854cd484d331680404ed78564a9039bbf090f671a4c1970fb526b6c20270ff8e3a93c530a3c75ebc2bcaf412f97921320b4a45d7afce89afd6c6213388025a33aabfa49c760a9ea4be69866912b8cf3ee0d8a72217cd62d8135704c9a13317a971d08c9a043d69d49329c9c4e3036a2c77377281bc02", 0xb0}, {&(0x7f0000000680)="13dc64a016aaa8f449c6c8be3f5eed9be002c70f17ad71f8e61c1173abad5c11a766170551f27a1cc48fe591b02cdfd655971e0fe253f6084600b131369c78f1730ff460b234f19465f5cf4f90aab4e4824f72018fc29c9fe930301a5f865e9da69d6bcfa7211a0beda87fa225896e9414dc37a87ad5b7a38a5d958da6a8c4d5f9b26c9dbe353f83fe13cb294d24a5a432ba5891fcedfd5a254f8546cc8a1edeee3411cbb44c0d608d17cc2fd3bdd4382dbe451bdc1a8482813180ab7a03c03a0736bc80af28cc08438956e29a838fa7eac75ac05b87034d3c66f809afe4c95de9", 0xe1}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="db998d8454651279ce594e90f8a2738f75976d51e1d1ff865df074293123c374fc7ef202b5a94404a65ee1e6d9a781656fd1d73fdf288f532430064b2d5a2fda73fc02a4855ebefb6f68d5e263a986bab25eeab1c6aeab7e443953955b4962a069203ceb554ff43c6829bf66fb04f4c5113deca52e3c67cc2e4dc36893ea92a13a005067a0a0b91830e0f51857bdd482d64e1c889568275c3294cef8b3cde339b1cea69e4a9e73b4c7ecc3b58722db9418326727aa72f7f4519c0f8f49fe18473d18a92e7c759177761e7b124fadd34d4a89b98253ed3ba4c5113cc9e2f3cb95220be9ed461114a864b2c535fea3ce24dc67ad2080", 0xf5}], 0x4)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x140, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcac}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x74, 0xa}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x14}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x30}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0x140}, 0x1, 0x0, 0x0, 0x4044801}, 0x42)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x2, 0x16, 0x6, 0x8, 0x1a, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x2, 0x315, 0x6, 0x3, 0x79}, @sadb_x_filter={0x5, 0x1a, @in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6, 0x0, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x25, 0x10}, @sadb_ident={0x2, 0xa, 0x1, 0x0, 0xf000}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bbe, 0x10, {0x6, 0xda, 0x2, 0x0, 0x0, 0x6, 0x0, @in=@remote, @in6=@loopback}}]}, 0xd0}}, 0x20000000)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c80), r5)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000801}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000001d80)='wg2\x00', 0x4)
getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4)
r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001e80), 0x103000, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x3c, r8, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "cd0a28565dfb89"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "5e14694f05ee0a1364dfbb772564"}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x54, 0x0, 0x20, 0x3, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4002010}, 0xbc186770404e2c91)
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002280)={&(0x7f0000002180)={0xcc, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_SSID={0x17, 0x34, @random="e35eb4a3acc8b1cf9c0d3eefdee74a50ffbf67"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xfffa, 0x2, 0xff00, 0x0, 0xf, 0xfff, 0x9, 0xd, 0xfffa, 0x0, 0x9, 0x1ff, 0x9, 0x1, 0x4, 0x9]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4, 0x0, 0x6, 0x0, {0x40, 0x6, 0x0, 0xe, 0x0, 0x0, 0x1}, 0x800, 0x84a8, 0x3}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x1, 0x0, {0xb76, 0x1ff8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x9, 0x1}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x0, 0x0, {0x564c, 0x81, 0x0, 0x31a, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x54}}]}, 0xcc}}, 0x4000050)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000002300)={0x1})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000023c0)={{0x1, 0x1, 0x18, <r11=>r9, {<r12=>0xee01, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000002400)={0x0, <r13=>0x0}, &(0x7f0000002440)=0xc)
mount$9p_fd(0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380), 0x40000, &(0x7f0000002480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@mmap}], [{@fowner_lt={'fowner<', r12}}, {@euid_lt={'euid<', r13}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@flag='posixacl'}, {@permit_directio}, {@euid_gt={'euid>', 0xee01}}, {@subj_role={'subj_role', 0x3d, '\''}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/:$'}}]}})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r11, 0x3ba0, &(0x7f00000025c0)={0x48, 0x9, 0x0, 0x0, 0x4})

5.642858446s ago: executing program 4 (id=7113):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$loop(0x0, 0xf01c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@none}]}) (async)
mount$cgroup(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@none}]})
sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x0, 0x4)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) (async)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000500)=0xd0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)

5.628545475s ago: executing program 3 (id=7114):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x2)

5.367951796s ago: executing program 3 (id=7116):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x20, 0x30, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0})

5.353117403s ago: executing program 4 (id=7118):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) (async)
arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffe) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x4c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x4c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000c200e20bd5fc2f0f9bcedf8431155256bf3b8c4ddead52041d8f6d2d4f6adfcd7fcb1b2c77e74957e59c594904a2267aa8bd82bae6fc068521721bba3216b71e80be4e994d25c73e5f5ba38e7e3533a5d0c56f563e597ce609f26475b1da933ccdbd4caffd2217a8d189901bf824e0b396670efba37d676b352837af960a0a69dd878b4dc91da6abc36d04008d326fc029469b8312c30fc9062e8513ad4402596aeff79e826416a61312d546978642274f8a1b06aca6682c25b81c57483bf2f6b4c13f3aac4d0428fda6cd1465b863017314ada6699fbd6089c833764de9907a3e768bef5511f572bb7a2b1b51c635a0", @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25630000000c009900010000007f000000"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x1)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf255c00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e1209002100000004", 0x2f}], 0x1}, 0x24004880) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

5.246625262s ago: executing program 4 (id=7119):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x50, 0x23, 0x5, {0x5, 0x6, "68b8bf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x50, 0x23, 0x5, {0x5, 0x6, "68b8bf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

4.47593397s ago: executing program 7 (id=7124):
r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
unshare(0x2c020400) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x40049409, 0x0) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0x6) (async)
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)='|w') (async)
ioctl$sock_bt_hci(r2, 0x400448e6, 0x0) (async)
ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d"], 0x18}}, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0xc0089364, 0x0)
recvmmsg(r3, &(0x7f0000002480)=[{{&(0x7f0000000140)=@nl, 0x80, &(0x7f00000006c0)=[{&(0x7f00000025c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000002580)=""/3, 0x3}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/189, 0xbd}], 0x8}, 0xfffffeff}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/46, 0x2e}, {&(0x7f0000000880)=""/225, 0xe1}, {&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/217, 0xd9}, {&(0x7f0000001b80)=""/232, 0xe8}], 0x8, &(0x7f0000001d00)=""/130, 0x82}, 0x20000007}, {{&(0x7f0000001dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e40)=""/52, 0x34}, {&(0x7f0000001e80)=""/76, 0x4c}, {&(0x7f0000001f00)=""/220, 0xdc}, {&(0x7f0000002000)=""/114, 0x72}, {&(0x7f0000002080)=""/167, 0xa7}, {&(0x7f0000002140)=""/236, 0xec}, {&(0x7f0000002240)=""/40, 0x28}, {&(0x7f0000002280)=""/1, 0x1}, {&(0x7f00000022c0)=""/55, 0x37}], 0x9, &(0x7f00000023c0)=""/191, 0xbf}, 0x9}], 0x3, 0x12103, &(0x7f0000002540)={0x0, 0x3938700})
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x6) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

4.47098898s ago: executing program 7 (id=7125):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) (async)
r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, 0x0) (async, rerun: 32)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)

4.096094886s ago: executing program 4 (id=7127):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
sendmmsg(r0, &(0x7f0000003440)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x4, @remote, 0x6}, 0x80, 0x0}}], 0x1, 0x20000000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f00000000c0)="918ed25efe9b9c211e618c46d048c621d8958188ad7ac3ffd0ce4d5c2838b562a622334dbc3d15986fd30a6627f61b89d5fc018a6a608b887c0ede1f02c34ee9bbd18cb1307df5dd34bc97e0c02b1d35d207fca42a48e86f0c3cf84904719608939303f78b81f7fe49c727c10a7e97829e91a353cca5c70a1c059f6195b8b15a5f7490f0278d624fb40f5f3d246241702eb11647d9e66c98c4369eefdd0f7b1316bb5aec6f68722bbef6", 0xaa, 0x8010, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @local, 0xffff}, 0x1c)
r2 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53a, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4})
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x8}}}}}]}}]}}, 0x0)

3.905336958s ago: executing program 7 (id=7128):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x11d1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={<r2=>0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x2, 0xf, 0x0, 0xb309, 0x7, 0x40, 0x7, 0xc, r2}, &(0x7f0000000080)=0x20)

3.348782678s ago: executing program 7 (id=7131):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3})
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"])

3.296216358s ago: executing program 7 (id=7132):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5})
ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @pic={0x10, 0xb, 0x5, 0x2d, 0x8, 0x4, 0x1, 0x1, 0x3, 0xfc, 0x8, 0x3, 0xfb, 0x8, 0x6, 0xa0}})
chdir(&(0x7f00000001c0)='./bus\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0xffffffffffffffff, 0x4, 0x3})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)

2.76408667s ago: executing program 4 (id=7136):
r0 = mq_open(&(0x7f0000000080)='$\x00', 0x800, 0x80, &(0x7f00000000c0)={0x8, 0x8, 0x4, 0x9})
preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/44, 0x2c}], 0x4, 0x62f, 0x8, 0x8)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100001e000100000000000000000007"], 0x114}], 0x1}, 0x0)

2.729715399s ago: executing program 4 (id=7138):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x3e, [0x2, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x0, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x5, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0xffffffff, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x10000, 0x4, 0xa, 0x8, 0x0, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x40004, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x4000008, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x80000007], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x1, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x0, 0x2, 0x4, 0xb, 0x9, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0xff, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0xb, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="0ac5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x27, 0xb4, 0xed, 0x40, 0x5ac, 0x290, 0x2c93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xc, 0x10, 0x3, [{{0x9, 0x4, 0xc1, 0x1a, 0x0, 0x3, 0xa6, 0x2, 0x6}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

2.328947976s ago: executing program 3 (id=7142):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0xff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc058560f, &(0x7f0000000080)={0xfffffffd, 0xd, 0x3, 0x0, 0xfc})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x34, r2, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x7f}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_usb_connect(0x5, 0x48, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0)

1.823999022s ago: executing program 8 (id=7143):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYRESDEC], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x4000)
fchdir(r1)
fsmount(0xffffffffffffffff, 0x1, 0x1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffedd, &(0x7f0000000000)=ANY=[])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.310989179s ago: executing program 8 (id=7144):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}]}})
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000540))
r3 = geteuid()
r4 = geteuid()
r5 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x0, 0x7fffffff}]})
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = dup2(r7, r6)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0x200d94b, 0x40, 0x3, 0x256}, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = epoll_create1(0x0)
epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '\xa8'}}, {@access_client}], [{@pcr={'pcr', 0x3d, 0x2f}}, {@uid_gt={'uid>', r3}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@hash}]}})

1.183846373s ago: executing program 8 (id=7145):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
msgsnd(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) (async)
close(0x3) (async)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x5, 0x8000000000000000, 0x1000})

1.11595502s ago: executing program 8 (id=7146):
r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x4040000}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4ca034ed3d386fe959a94601a4007f1f2060b59359747635b076db7697ba5ad45af0423dbb9966113fa5eb59118cac394c2e2b17ebec1b7ce18ede120b1f56956b12a95de708e780ba7a1ac3a9e31267a2c195acfcb3b20c2f5d20de288846045211da53649a6d8b23008449b763fe6a58243cde95093a9755e5725307af09c997520f159f4ec7d1e687a0cf5148721062ecc6b080f65a550730da9257f1515a10830e29b85de3138a77ee8d2f0cb129c971417d7bbcd982d684b697364084c5764bafb4e2211a82e8c962eefb1f000ac8f5f2567b580931676943cea9b95977d842c247a98672b5c73594eb51f927ee5ec2b0c45eda29fb83a092880e542c60113ca653923aa0c16e2e1604e5f437876cb7fa7d1498584f8800ff80804d41c7b89e9cba341fed8d260a6abd0fc242ba6b3d624c91c468e269069d0a121f0951c3765f18693a2c547d9bc924058d0ecece5c7802126d293d3033d6bbf83d4b8b0144d27cbb985dba465d75b62a93bf7a438cce59f", @ANYBLOB="1366c83841fd15d89cf5898383b2119d3e67cdb994850f8c2f2281d9322375137c68a8a9cca49370d4b5841b043db561258e0ca4b862d82a70c28cb26b9a5047059253aae9b30d8f4aa196f560cd852ab1c585ba00d492b20e8cf940f063a2ebecd56cdfbb6716f8e893679c5b6d57cc13eb6bd0e923d3a617a6c1c6f682cb6598ff19c64cf070101dbc6f9adae8340b153cf410f0c0976eb33148c2a4a64f8269f7eee6b026b0d78112cd9d274ca3c450683a7505387f38242b94f1ae84b1129f1d962bb8dab1"])
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r2, &(0x7f0000000080)="2fca97dc481fc2f48582ca90a18f61acf05e860d474f995897fc23bb69cb0a6197332ec22016df74a8a125614ce1e7775476885a3fb2bf67422d3fc8b0499fab9acb56bd8614cde1dd1853a94186ff217d46a8f92abd6bf881fae01f17fbb7b3c00a2e99d35ea08a8b16223d", 0x6c)

606.800333ms ago: executing program 8 (id=7147):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x80000001)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xd6, 0xfe, 0xd, 0x8, 0x50d, 0x122, 0xcc12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x98, 0x20, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x0, 0x67, 0x6d, 0x55}}]}}]}}, 0x0)

212.580679ms ago: executing program 7 (id=7148):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000200)=0x14)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xffffffff, 0x10}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r5, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000300)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x0, 0x2, 0x35}, 0x2c)
socket$nl_route(0x10, 0x3, 0x0)
accept(r6, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

0s ago: executing program 8 (id=7149):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x8, 0x100, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={0x0, 0xfefe, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c005}, 0x0)
tee(r3, r4, 0x401, 0x4)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x7, 0x11, 0x0, 0x1, [@generic="9e15c0"]}]}, 0x18}], 0x1}, 0x300)
r6 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='\a', 0x1}], 0x1}, 0x800)
sendmsg(r6, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
write(r2, &(0x7f0000000400)="1b051faf82e2f7a9f444853a6246c21441184e425b8607234d2e6379d684f3e48c32e434ae4ec0b63e2411ccf907040c6f38289c2e38a046b5882ae2f445126b85335423d813e6675534ac085fbc64f469296474ad3b3af0aab7981bbe253ad28716a0f0b403a99d6bfe9d9e91b2258003f795a798c0f0b9eaaa9533512ab11c27ad39630bc66e6d4c7cdb2262f520901d9d7c123730c115757db6af2f5d5a057009d323f46e19d2aca2ce16f89fecb215aebc", 0xb3)
syz_usb_connect(0x0, 0x7f, &(0x7f0000000080)=ANY=[@ANYRES8=r6], 0x0)

kernel console output (not intermixed with test programs):

4] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1466.698221][T29304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1466.756043][   T24] usb 8-1: device descriptor read/64, error -71
[ 1466.787079][T22236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1466.919804][T26569] usb 4-1: USB disconnect, device number 10
[ 1466.996023][   T24] usb 8-1: new high-speed USB device number 102 using dummy_hcd
[ 1467.125975][   T24] usb 8-1: device descriptor read/64, error -71
[ 1467.237101][   T24] usb usb8-port1: attempt power cycle
[ 1467.274916][T26569] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1467.387525][T29313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1467.397787][T29313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1467.428993][T22235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1467.432391][T26569] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1467.449135][T26569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1467.457192][T26569] usb 4-1: Product: syz
[ 1467.461347][T26569] usb 4-1: Manufacturer: syz
[ 1467.466025][T26569] usb 4-1: SerialNumber: syz
[ 1467.475249][T26569] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1467.492080][ T5959] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1467.575995][   T24] usb 8-1: new high-speed USB device number 103 using dummy_hcd
[ 1467.596786][   T24] usb 8-1: device descriptor read/8, error -71
[ 1467.836063][   T24] usb 8-1: new high-speed USB device number 104 using dummy_hcd
[ 1467.856626][   T24] usb 8-1: device descriptor read/8, error -71
[ 1467.896244][    T9] usb 4-1: USB disconnect, device number 11
[ 1467.943391][T29315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1467.952807][T29315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1467.967013][   T24] usb usb8-port1: unable to enumerate USB device
[ 1468.500795][T29316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1468.512612][T29316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1468.525972][T29316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1468.538680][T29316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1468.546987][ T5959] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1468.554707][ T5959] ath9k_htc: Failed to initialize the device
[ 1468.562584][    T9] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1468.637836][T29323] sit0: entered promiscuous mode
[ 1468.648245][T29323] netlink: 'syz.8.6598': attribute type 1 has an invalid length.
[ 1468.660277][T29323] netlink: 1 bytes leftover after parsing attributes in process `syz.8.6598'.
[ 1468.756955][T29326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1468.766576][T29326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1468.772267][T29316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1468.784180][T29316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1469.330912][T29341] netlink: 'syz.8.6604': attribute type 2 has an invalid length.
[ 1469.338922][T29341] netlink: 'syz.8.6604': attribute type 4 has an invalid length.
[ 1469.372733][T29342] overlay: Unknown parameter 'obj_user'
[ 1469.384451][T29342] netlink: 'syz.7.6603': attribute type 64 has an invalid length.
[ 1469.386184][    T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[ 1469.393748][T29342] netlink: 'syz.7.6603': attribute type 4 has an invalid length.
[ 1469.408272][T29342] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6603'.
[ 1469.439329][T29342] Malformed UNC in devname
[ 1469.439329][T29342] 
[ 1469.446581][T29342] CIFS: VFS: Malformed UNC in devname
[ 1469.487501][T29351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1469.497030][T29351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1469.532510][T29355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1469.542201][T29355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1469.554668][T29355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1469.564596][T29355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1469.575181][T29355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1469.584562][T29355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1469.587521][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1469.604605][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1469.614947][    T9] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[ 1469.624191][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.636308][    T9] usb 4-1: config 0 descriptor??
[ 1470.105473][    T9] bigben 0003:146B:0902.0080: unexpected rdesc, please submit for review
[ 1470.125775][    T9] bigben 0003:146B:0902.0080: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0
[ 1470.147905][    T9] bigben 0003:146B:0902.0080: missing HID_OUTPUT_REPORT 0
[ 1470.155070][    T9] bigben 0003:146B:0902.0080: no output report found
[ 1470.248972][T29362] /dev/nullb0: Can't open blockdev
[ 1470.259508][T29362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1470.273793][T29362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1470.312104][T29337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1470.320841][T29337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1470.409050][ T5959] usb 4-1: USB disconnect, device number 12
[ 1470.810715][T29379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1470.821011][T29379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1470.895973][ T5959] usb 8-1: new high-speed USB device number 105 using dummy_hcd
[ 1471.049727][ T5959] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1471.060434][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.068546][ T5959] usb 8-1: Product: syz
[ 1471.072713][ T5959] usb 8-1: Manufacturer: syz
[ 1471.077354][ T5959] usb 8-1: SerialNumber: syz
[ 1471.089010][ T5959] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1471.105420][   T24] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1471.185963][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1471.335966][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1471.342526][    T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1471.352101][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1471.366923][    T9] usb 4-1: config 0 descriptor??
[ 1471.408394][T29386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1471.420147][T29386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1471.569122][T21487] usb 8-1: USB disconnect, device number 105
[ 1471.999859][T29400] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1472.017815][T29400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1472.028448][T29400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1472.147725][   T24] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 1472.154813][   T24] ath9k_htc: Failed to initialize the device
[ 1472.188914][T21487] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1472.227775][    T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1472.257237][    T9] asix 4-1:0.0: probe with driver asix failed with error -71
[ 1472.284519][    T9] usb 4-1: USB disconnect, device number 13
[ 1472.547100][T22235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1472.591737][T29422] netlink: 'syz.7.6624': attribute type 1 has an invalid length.
[ 1472.618343][T29422] netlink: 'syz.7.6624': attribute type 11 has an invalid length.
[ 1472.647256][T29422] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6624'.
[ 1472.649527][T29427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1472.678853][T29427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1472.711263][T29427] netlink: 763 bytes leftover after parsing attributes in process `syz.8.6625'.
[ 1472.965259][T29447] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1473.008305][T29449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6633'.
[ 1473.053174][T29451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1473.062694][T29451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1473.086051][ T5923] usb 8-1: new high-speed USB device number 106 using dummy_hcd
[ 1473.093786][   T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[ 1473.186383][ T3170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1473.247046][ T5923] usb 8-1: too many configurations: 121, using maximum allowed: 8
[ 1473.256422][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1473.267094][ T5923] usb 8-1: config index 0 descriptor too short (expected 9, got 0)
[ 1473.275113][ T5923] usb 8-1: can't read configurations, error -22
[ 1473.283102][   T24] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a
[ 1473.292259][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.300317][   T24] usb 4-1: Product: syz
[ 1473.304483][   T24] usb 4-1: Manufacturer: syz
[ 1473.309133][   T24] usb 4-1: SerialNumber: syz
[ 1473.316422][   T24] usb 4-1: config 0 descriptor??
[ 1473.323532][   T24] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[ 1473.406001][ T5923] usb 8-1: new high-speed USB device number 107 using dummy_hcd
[ 1473.524857][    T9] usb 4-1: USB disconnect, device number 14
[ 1473.556649][ T5923] usb 8-1: too many configurations: 121, using maximum allowed: 8
[ 1473.566553][ T5923] usb 8-1: config index 0 descriptor too short (expected 9, got 0)
[ 1473.574537][ T5923] usb 8-1: can't read configurations, error -22
[ 1473.582025][ T5923] usb usb8-port1: attempt power cycle
[ 1473.612452][T29455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1473.621254][T29455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1473.633991][T29455] netlink: 165 bytes leftover after parsing attributes in process `syz.8.6636'.
[ 1473.721948][T16705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1473.832763][T16705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1473.932842][T16705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1473.951883][ T5923] usb 8-1: new high-speed USB device number 108 using dummy_hcd
[ 1473.991276][ T5923] usb 8-1: too many configurations: 121, using maximum allowed: 8
[ 1474.016117][ T5923] usb 8-1: config index 0 descriptor too short (expected 9, got 0)
[ 1474.024077][ T5923] usb 8-1: can't read configurations, error -22
[ 1474.032755][T16705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1474.132664][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1474.143458][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1474.152918][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1474.170147][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1474.177439][ T5923] usb 8-1: new high-speed USB device number 109 using dummy_hcd
[ 1474.187649][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1474.229384][ T5923] usb 8-1: too many configurations: 121, using maximum allowed: 8
[ 1474.256578][ T5923] usb 8-1: config index 0 descriptor too short (expected 9, got 0)
[ 1474.264557][ T5923] usb 8-1: can't read configurations, error -22
[ 1474.297921][ T5923] usb usb8-port1: unable to enumerate USB device
[ 1474.403893][T16705] bridge_slave_1: left allmulticast mode
[ 1474.411766][T16705] bridge_slave_1: left promiscuous mode
[ 1474.422111][T16705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1474.464214][T16705] bridge_slave_0: left allmulticast mode
[ 1474.476221][T16705] bridge_slave_0: left promiscuous mode
[ 1474.482022][T16705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1474.499793][T29470] netlink: 'syz.8.6641': attribute type 1 has an invalid length.
[ 1474.516141][T29470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6641'.
[ 1475.207587][T29493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1475.225328][T29493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1475.416306][T16705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1475.430196][T16705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1475.437760][T28827] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1475.449244][T16705] bond0 (unregistering): Released all slaves
[ 1475.528369][T29503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1475.549334][T29503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1475.605164][T28827] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1475.613677][T28827] usb 4-1: config 0 has no interface number 0
[ 1475.625345][T28827] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1475.636123][T28827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1475.636149][T28827] usb 4-1: Product: syz
[ 1475.636163][T28827] usb 4-1: Manufacturer: syz
[ 1475.636177][T28827] usb 4-1: SerialNumber: syz
[ 1475.647195][T28827] usb 4-1: config 0 descriptor??
[ 1475.709032][T29508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1475.709431][T29508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1475.853784][T28827] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[ 1475.899502][T28827] usb 4-1: USB disconnect, device number 15
[ 1476.075985][T16705] hsr_slave_0: left promiscuous mode
[ 1476.090070][T16705] hsr_slave_1: left promiscuous mode
[ 1476.111820][T16705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1476.152344][T16705] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1476.175499][T16705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1476.194927][T16705] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1476.226184][T11809] Bluetooth: hci0: command tx timeout
[ 1476.240888][T29531] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1476.246353][T16705] veth1_macvtap: left promiscuous mode
[ 1476.254814][T16705] veth0_macvtap: left promiscuous mode
[ 1476.261911][T16705] veth1_vlan: left promiscuous mode
[ 1476.267276][T16705] veth0_vlan: left promiscuous mode
[ 1476.706058][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1476.746374][T26569] usb 8-1: new high-speed USB device number 110 using dummy_hcd
[ 1476.874089][T16705] team0 (unregistering): Port device team_slave_1 removed
[ 1476.891060][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[ 1476.893508][T26569] usb 8-1: device descriptor read/64, error -71
[ 1476.900429][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1476.915132][    T9] usb 4-1: Product: syz
[ 1476.919362][    T9] usb 4-1: Manufacturer: syz
[ 1476.923957][    T9] usb 4-1: SerialNumber: syz
[ 1476.932080][    T9] usb 4-1: config 0 descriptor??
[ 1476.944262][    T9] gspca_main: sonixb-2.14.0 probing 0c45:608f
[ 1476.963032][T16705] team0 (unregistering): Port device team_slave_0 removed
[ 1477.146263][T26569] usb 8-1: new high-speed USB device number 111 using dummy_hcd
[ 1477.280932][T26569] usb 8-1: device descriptor read/64, error -71
[ 1477.366891][    T9] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input144
[ 1477.397833][T26569] usb usb8-port1: attempt power cycle
[ 1477.522721][T29459] chnl_net:caif_netlink_parms(): no params data found
[ 1477.635235][T29459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1477.642570][T29459] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1477.650548][T29459] bridge_slave_0: entered allmulticast mode
[ 1477.658705][T29459] bridge_slave_0: entered promiscuous mode
[ 1477.668081][T29459] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1477.675295][T29459] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1477.683148][T29459] bridge_slave_1: entered allmulticast mode
[ 1477.683263][   T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1477.692192][T29459] bridge_slave_1: entered promiscuous mode
[ 1477.766062][T26569] usb 8-1: new high-speed USB device number 112 using dummy_hcd
[ 1477.769110][T29459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1477.793896][T29459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1477.804420][T26569] usb 8-1: device descriptor read/8, error -71
[ 1477.834264][T29459] team0: Port device team_slave_0 added
[ 1477.845208][T29459] team0: Port device team_slave_1 added
[ 1477.880194][T29459] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1477.887281][T29459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1477.913154][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1477.920167][T29459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1477.934158][T29459] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1477.941846][T29459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1477.972373][T29459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1478.046063][T26569] usb 8-1: new high-speed USB device number 113 using dummy_hcd
[ 1478.073144][T29459] hsr_slave_0: entered promiscuous mode
[ 1478.079784][T26569] usb 8-1: device descriptor read/8, error -71
[ 1478.083396][T29459] hsr_slave_1: entered promiscuous mode
[ 1478.092848][T29459] debugfs: 'hsr0' already exists in 'hsr'
[ 1478.098791][T29459] Cannot create hsr debugfs directory
[ 1478.196566][T26569] usb usb8-port1: unable to enumerate USB device
[ 1478.307300][ T5183] Bluetooth: hci0: command tx timeout
[ 1478.580062][T29562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1478.591589][T29562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1478.793921][T29459] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1478.806650][T29459] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1478.824363][T29459] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1478.836959][T29459] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1478.946404][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1478.956505][T29459] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1478.988146][T29459] 8021q: adding VLAN 0 to HW filter on device team0
[ 1479.004178][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1479.011466][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1479.039218][T16705] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1479.046514][T16705] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1479.158519][T29584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1479.184570][T29584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1479.207301][T29584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1479.236597][T29584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1479.382789][T29459] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1479.481725][ T5959] usb 4-1: USB disconnect, device number 16
[ 1479.592329][T29601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6652'.
[ 1479.638425][T29601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6652'.
[ 1479.940821][T29459] veth0_vlan: entered promiscuous mode
[ 1479.954938][T29459] veth1_vlan: entered promiscuous mode
[ 1480.023109][T29459] veth0_macvtap: entered promiscuous mode
[ 1480.049323][T29459] veth1_macvtap: entered promiscuous mode
[ 1480.065706][T29628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.086997][T29628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.108056][T29630] ALSA: mixer_oss: invalid OSS volume ''
[ 1480.113990][T29459] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1480.114920][T29630] netlink: 'syz.3.6660': attribute type 10 has an invalid length.
[ 1480.129941][T29459] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1480.148728][T29630] team0: Device tunl0 is of different type
[ 1480.157970][T11809] Bluetooth: hci1: SCO packet for unknown connection handle 201
[ 1480.166191][T21487] usb 8-1: new high-speed USB device number 114 using dummy_hcd
[ 1480.167048][T16705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1480.193097][T16705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1480.208791][ T3170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1480.218175][ T3170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1480.318332][T21487] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1480.338875][T21487] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1480.350080][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1480.364914][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1480.371087][T21487] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1480.383809][T21487] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.386806][T11809] Bluetooth: hci0: command tx timeout
[ 1480.406747][  T938] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1480.414748][T21487] usb 8-1: Product: syz
[ 1480.422271][T21487] usb 8-1: Manufacturer: syz
[ 1480.431908][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1480.436009][T21487] usb 8-1: SerialNumber: syz
[ 1480.440459][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1480.475693][T21487] cdc_mbim 8-1:1.0: skipping garbage
[ 1480.569821][  T938] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1480.599025][  T938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1480.611132][  T938] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1480.623903][  T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1480.658510][  T938] usb 4-1: SerialNumber: syz
[ 1480.662087][T29622] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1480.744157][T29647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.758764][T29647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.811772][T29644] input: syz0 as /devices/virtual/input/input145
[ 1480.878761][T29622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.898265][T29622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.917451][  T938] usb 4-1: 0:2 : does not exist
[ 1480.923811][  T938] usb 4-1: unit 5 not found!
[ 1480.965015][  T938] usb 4-1: USB disconnect, device number 17
[ 1480.975973][ T5941] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1480.989303][T29656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1481.017716][T29656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1481.037026][T25831] udevd[25831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1481.136344][ T5941] usb 5-1: Using ep0 maxpacket: 8
[ 1481.146732][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1481.157920][ T5941] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1481.169271][ T5941] usb 5-1: config 0 interface 0 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1481.184199][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1481.202307][ T5941] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[ 1481.215908][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.235046][ T5941] usb 5-1: config 0 descriptor??
[ 1481.333833][T29622] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1481.341824][T21487] cdc_mbim 8-1:1.0: setting tx_max = 16384
[ 1481.350785][T21487] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device
[ 1481.363703][T21487] wwan wwan0: port wwan0mbim0 attached
[ 1481.385374][T21487] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, be:ae:d8:22:ff:07
[ 1481.478370][ T5941] usb 5-1: string descriptor 0 read error: -71
[ 1481.515353][ T5941] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1481.559298][T21487] usb 8-1: USB disconnect, device number 114
[ 1481.575474][ T5941] usb 5-1: USB disconnect, device number 81
[ 1481.584249][T21487] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM
[ 1481.688063][T21487] wwan wwan0: port wwan0mbim0 disconnected
[ 1481.816195][ T5959] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[ 1481.966798][ T5959] usb 4-1: device descriptor read/64, error -71
[ 1482.145493][T29699] netlink: 6080 bytes leftover after parsing attributes in process `syz.7.6667'.
[ 1482.218213][ T5959] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[ 1482.308861][T29710] netlink: 'syz.8.6670': attribute type 10 has an invalid length.
[ 1482.319257][T29708] mkiss: ax0: crc mode is auto.
[ 1482.333784][T29710] team0: Port device dummy0 added
[ 1482.357914][T29710] netlink: 'syz.8.6670': attribute type 10 has an invalid length.
[ 1482.378219][ T5959] usb 4-1: device descriptor read/64, error -71
[ 1482.401856][T29710] team0: Port device dummy0 removed
[ 1482.413073][T29710] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1482.467213][T11809] Bluetooth: hci0: command tx timeout
[ 1482.486446][ T5923] usb 5-1: new full-speed USB device number 82 using dummy_hcd
[ 1482.495197][ T5959] usb usb4-port1: attempt power cycle
[ 1482.596185][   T24] usb 8-1: new full-speed USB device number 115 using dummy_hcd
[ 1482.647652][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1482.657628][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1482.676016][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1482.685069][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.745990][   T24] usb 8-1: device descriptor read/64, error -71
[ 1482.835996][ T5959] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[ 1482.877548][ T5959] usb 4-1: device descriptor read/8, error -71
[ 1482.914724][ T5923] usb 5-1: usb_control_msg returned -32
[ 1482.918560][T29705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1482.930483][ T5923] usbtmc 5-1:16.0: can't read capabilities
[ 1482.945292][T29705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1482.986323][   T24] usb 8-1: new full-speed USB device number 116 using dummy_hcd
[ 1483.009983][T29737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.018884][T29737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.031718][T29737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.042286][T29737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.054059][T29737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.064714][T29737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.088323][T29737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.098937][T29737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.110322][T29737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.122348][T29737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.135442][T29737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.144293][ T5959] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[ 1483.152721][   T24] usb 8-1: device descriptor read/64, error -71
[ 1483.163374][T29737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.176692][ T5959] usb 4-1: device descriptor read/8, error -71
[ 1483.266624][   T24] usb usb8-port1: attempt power cycle
[ 1483.298166][ T5959] usb usb4-port1: unable to enumerate USB device
[ 1483.426643][T16705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1483.606128][   T24] usb 8-1: new full-speed USB device number 117 using dummy_hcd
[ 1483.627919][   T24] usb 8-1: device descriptor read/8, error -71
[ 1483.810860][T29771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.821822][T29771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.843589][T29771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.857913][T29771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.867171][   T24] usb 8-1: new full-speed USB device number 118 using dummy_hcd
[ 1483.896785][   T24] usb 8-1: device descriptor read/8, error -71
[ 1484.006358][   T24] usb usb8-port1: unable to enumerate USB device
[ 1484.573969][T29806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1484.590471][T29806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1484.619168][T29806] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6675'.
[ 1484.709919][T16705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1484.727819][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.996249][   T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1485.156808][   T24] usb 4-1: Using ep0 maxpacket: 8
[ 1485.182087][   T24] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1485.191326][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1485.199833][   T24] usb 4-1: Product: syz
[ 1485.204016][   T24] usb 4-1: Manufacturer: syz
[ 1485.212715][   T24] usb 4-1: SerialNumber: syz
[ 1485.222563][   T24] usb 4-1: config 0 descriptor??
[ 1485.222654][ T5941] usb 5-1: USB disconnect, device number 82
[ 1485.246155][   T24] gspca_main: se401-2.14.0 probing 047d:5003
[ 1485.362740][T29832] loop5: detected capacity change from 0 to 7
[ 1485.378640][    C0] blk_print_req_error: 56 callbacks suppressed
[ 1485.378659][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.394028][    C0] buffer_io_error: 23 callbacks suppressed
[ 1485.394043][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.408990][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.412274][T29835] binder: 29834:29835 ioctl 4018620d 0 returned -22
[ 1485.418166][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.442398][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.451641][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.460744][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.470092][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.484005][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.493210][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.501429][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.501458][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.501616][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.501640][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.502050][T25831] ldm_validate_partition_table(): Disk read failed.
[ 1485.514496][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.514532][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.523489][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.523522][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.523771][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1485.523795][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1485.524069][T25831] Dev loop5: unable to read RDB block 0
[ 1485.524733][T25831]  loop5: unable to read partition table
[ 1485.637037][T25831] loop5: partition table beyond EOD, truncated
[ 1485.661046][T29832] ldm_validate_partition_table(): Disk read failed.
[ 1485.670104][T29832] Dev loop5: unable to read RDB block 0
[ 1485.680666][T29832]  loop5: unable to read partition table
[ 1485.695230][T29832] loop5: partition table beyond EOD, truncated
[ 1485.703479][T29832] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[ 1485.720815][   T24] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input146
[ 1485.736552][ T5959] usb 8-1: new high-speed USB device number 119 using dummy_hcd
[ 1485.887195][T29852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6683'.
[ 1485.906164][ T5959] usb 8-1: Using ep0 maxpacket: 16
[ 1485.914388][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1485.926404][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1485.936835][ T5959] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1485.951963][ T5959] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1485.964461][ T5959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.985808][ T5959] usb 8-1: config 0 descriptor??
[ 1486.041555][T29857] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1486.110953][T29863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1486.125053][T29863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1486.405997][   T24] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[ 1486.536002][   T24] usb 5-1: device descriptor read/64, error -71
[ 1486.598549][ T5959] usbhid 8-1:0.0: can't add hid device: -71
[ 1486.607931][ T5959] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1486.619596][ T5959] usb 8-1: USB disconnect, device number 119
[ 1486.776020][   T24] usb 5-1: new full-speed USB device number 84 using dummy_hcd
[ 1486.906032][   T24] usb 5-1: device descriptor read/64, error -71
[ 1487.026680][   T24] usb usb5-port1: attempt power cycle
[ 1487.356067][T21916] usb 8-1: new high-speed USB device number 120 using dummy_hcd
[ 1487.366007][   T24] usb 5-1: new full-speed USB device number 85 using dummy_hcd
[ 1487.387645][   T24] usb 5-1: device descriptor read/8, error -71
[ 1487.523307][T21916] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1487.534570][T21916] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1487.544512][T21916] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1487.557905][T21916] usb 8-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[ 1487.567715][T21916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.587119][T21916] usb 8-1: config 0 descriptor??
[ 1487.625989][   T24] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[ 1487.646929][   T24] usb 5-1: device descriptor read/8, error -71
[ 1487.689087][ T5866] usb 4-1: USB disconnect, device number 22
[ 1487.716624][T29882] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6693'.
[ 1487.757105][   T24] usb usb5-port1: unable to enumerate USB device
[ 1487.884522][T29891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1487.893861][T29891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1487.973187][T29897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1487.983926][T29897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.024025][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.034223][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.046202][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.053113][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.062100][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.070306][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.086408][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.098970][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.105936][T21916] apple 0003:05AC:029C.0081: unknown main item tag 0x0
[ 1488.114156][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6697'.
[ 1488.117480][T21916] apple 0003:05AC:029C.0081: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.7-1/input0
[ 1488.221948][T29874] vivid-000: =================  START STATUS  =================
[ 1488.231040][T29874] vivid-000: Radio HW Seek Mode: Bounded
[ 1488.239370][T29874] vivid-000: Radio Programmable HW Seek: false
[ 1488.245658][T29874] vivid-000: RDS Rx I/O Mode: Block I/O
[ 1488.252017][T29874] vivid-000: Generate RBDS Instead of RDS: false
[ 1488.258658][T29874] vivid-000: RDS Reception: true
[ 1488.263802][T29874] vivid-000: RDS Program Type: 0 inactive
[ 1488.272700][T29874] vivid-000: RDS PS Name:  inactive
[ 1488.278469][T29874] vivid-000: RDS Radio Text:  inactive
[ 1488.284009][T29874] vivid-000: RDS Traffic Announcement: false inactive
[ 1488.292367][T29874] vivid-000: RDS Traffic Program: false inactive
[ 1488.301832][T29874] vivid-000: RDS Music: false inactive
[ 1488.312276][T29874] vivid-000: ==================  END STATUS  ==================
[ 1488.326436][T28827] usb 8-1: USB disconnect, device number 120
[ 1488.333830][T29905] /dev/nullb0: Can't open blockdev
[ 1488.595967][  T938] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[ 1488.677942][T29910] netlink: 'syz.8.6699': attribute type 6 has an invalid length.
[ 1488.732909][T29912] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6700'.
[ 1488.749227][  T938] usb 4-1: not running at top speed; connect to a high speed hub
[ 1488.761059][  T938] usb 4-1: config 9 has an invalid interface number: 153 but max is 1
[ 1488.769553][  T938] usb 4-1: config 9 has an invalid interface number: 224 but max is 1
[ 1488.778593][  T938] usb 4-1: config 9 has no interface number 0
[ 1488.785330][  T938] usb 4-1: config 9 has no interface number 1
[ 1488.791870][  T938] usb 4-1: config 9 interface 153 has no altsetting 0
[ 1488.800380][  T938] usb 4-1: config 9 interface 224 has no altsetting 0
[ 1488.810906][  T938] usb 4-1: string descriptor 0 read error: -22
[ 1488.813934][T29914] nfs4: Unknown parameter 'tcp]{xÁm )>úC“ÀS¯Eik†«�9øiÀ§©±¾ÇàÒºG|ÕfC�	'
[ 1488.817524][  T938] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=7e.83
[ 1488.835161][  T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.048105][T21916] usb 4-1: USB disconnect, device number 23
[ 1489.176026][  T938] usb 8-1: new high-speed USB device number 121 using dummy_hcd
[ 1489.186821][T16705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1489.264108][T29921] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1489.323989][T29923] fuse: Unknown parameter '000000000000000000000030x00000000000000050000000000000000000300000000000000000000'
[ 1489.338790][  T938] usb 8-1: Using ep0 maxpacket: 8
[ 1489.351131][T29923] netlink: 'syz.4.6705': attribute type 58 has an invalid length.
[ 1489.351195][  T938] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1489.368846][  T938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.377313][  T938] usb 8-1: Product: syz
[ 1489.381491][  T938] usb 8-1: Manufacturer: syz
[ 1489.386656][  T938] usb 8-1: SerialNumber: syz
[ 1489.393898][  T938] usb 8-1: config 0 descriptor??
[ 1489.405550][  T938] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1489.447409][T29926] loop9: detected capacity change from 0 to 7
[ 1489.455007][T29926] ldm_validate_partition_table(): Disk read failed.
[ 1489.462887][T29926] Dev loop9: unable to read RDB block 0
[ 1489.469519][T29926]  loop9: unable to read partition table
[ 1489.475497][T29926] loop9: partition table beyond EOD, truncated
[ 1489.487474][T29926] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[ 1489.487474][T29926] 
) failed (rc=-5)
[ 1489.511549][T29926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1489.520295][T29926] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1489.534652][T29926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1489.545719][T29926] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1489.630773][  T938] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32)
[ 1489.631392][T29916] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6702'.
[ 1489.652679][  T938] sq905 8-1:0.0: probe with driver sq905 failed with error -32
[ 1489.689328][ T5866] usb 8-1: USB disconnect, device number 121
[ 1489.729025][ T5233] ldm_validate_partition_table(): Disk read failed.
[ 1489.741168][ T5233] Dev loop9: unable to read RDB block 0
[ 1489.761398][ T5233]  loop9: unable to read partition table
[ 1489.768028][ T5233] loop9: partition table beyond EOD, truncated
[ 1489.830475][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1489.912957][T29945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6712'.
[ 1489.922205][T29945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6712'.
[ 1489.960713][T29950] comedi comedi2: pcl730: I/O port conflict (0x3,4)
[ 1490.005542][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1490.005560][   T30] audit: type=1326 audit(2000037522.381:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.8.6713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdfe98eec9 code=0x0
[ 1490.033620][T28827] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[ 1490.062488][T29955] tipc: Failed to obtain node identity
[ 1490.068249][T29955] tipc: Enabling of bearer <ib:veth1_to_team> rejected, failed to enable media
[ 1490.187561][T28827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1490.197992][T28827] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1490.210821][T28827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[ 1490.222344][T28827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64
[ 1490.235400][T28827] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1490.248273][ T5866] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1490.258285][T28827] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1490.267514][T28827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.275634][T28827] usb 4-1: Product: syz
[ 1490.281349][T28827] usb 4-1: Manufacturer: syz
[ 1490.286579][T28827] usb 4-1: SerialNumber: syz
[ 1490.298872][T28827] usb 4-1: config 0 descriptor??
[ 1490.304443][T29933] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1490.355957][T28827] rc_core: IR keymap rc-xbox-dvd not found
[ 1490.361839][T28827] Registered IR keymap rc-empty
[ 1490.370392][T28827] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1490.380390][T28827] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input147
[ 1490.396877][ T5866] usb 5-1: Using ep0 maxpacket: 32
[ 1490.404041][ T5866] usb 5-1: config 3 has an invalid interface number: 160 but max is 0
[ 1490.412749][ T5866] usb 5-1: config 3 has an invalid interface number: 5 but max is 0
[ 1490.427768][ T5866] usb 5-1: config 3 has an invalid descriptor of length 9, skipping remainder of the config
[ 1490.439418][ T5866] usb 5-1: config 3 has 2 interfaces, different from the descriptor's value: 1
[ 1490.450772][ T5866] usb 5-1: config 3 has no interface number 0
[ 1490.457144][ T5866] usb 5-1: config 3 has no interface number 1
[ 1490.472740][ T5866] usb 5-1: too many endpoints for config 3 interface 5 altsetting 6: 201, using maximum allowed: 30
[ 1490.488561][ T5866] usb 5-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201
[ 1490.507708][ T5866] usb 5-1: config 3 interface 5 has no altsetting 0
[ 1490.517329][ T5866] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01f4, bcdDevice=85.93
[ 1490.524414][T28827] usb 4-1: USB disconnect, device number 24
[ 1490.526432][    C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[ 1490.529965][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.532439][  T938] usb 8-1: new high-speed USB device number 122 using dummy_hcd
[ 1490.543771][ T5866] usb 5-1: Product: syz
[ 1490.561931][ T5866] usb 5-1: Manufacturer: syz
[ 1490.566809][ T5866] usb 5-1: SerialNumber: syz
[ 1490.706017][  T938] usb 8-1: Using ep0 maxpacket: 32
[ 1490.712714][  T938] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[ 1490.721158][  T938] usb 8-1: config 0 has no interface number 0
[ 1490.730076][  T938] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1490.739296][  T938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.747434][  T938] usb 8-1: Product: syz
[ 1490.751711][  T938] usb 8-1: Manufacturer: syz
[ 1490.757148][  T938] usb 8-1: SerialNumber: syz
[ 1490.764242][  T938] usb 8-1: config 0 descriptor??
[ 1490.773216][  T938] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1490.783698][ T5866] ftdi_sio 5-1:3.160: FTDI USB Serial Device converter detected
[ 1490.794837][ T5866] ftdi_sio ttyUSB0: unknown device type: 0x8593
[ 1490.805425][ T5866] ftdi_sio 5-1:3.5: FTDI USB Serial Device converter detected
[ 1490.815188][ T5866] ftdi_sio ttyUSB1: unknown device type: 0x8593
[ 1490.827812][ T5866] usb 5-1: USB disconnect, device number 87
[ 1490.846726][ T5866] ftdi_sio 5-1:3.160: device disconnected
[ 1490.850203][T29963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1490.860405][ T5866] ftdi_sio 5-1:3.5: device disconnected
[ 1490.867305][T29963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1490.884882][T29963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1490.895428][T29963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1490.974207][  T938] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1490.986331][  T938] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1491.093746][T29968] dlm: Unknown command passed to DLM device : 0
[ 1491.093746][T29968] 
[ 1491.356892][T29977] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1491.374045][    C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1491.375200][ T5866] usb 8-1: USB disconnect, device number 122
[ 1491.393474][T29981] netlink: 'syz.3.6721': attribute type 58 has an invalid length.
[ 1491.406764][ T5866] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1491.439623][ T5866] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1491.447897][T29981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input148
[ 1491.463447][ T5866] quatech2 8-1:0.51: device disconnected
[ 1491.544929][T29984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1491.553767][T29984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1491.616249][T26792] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1491.775940][T26792] usb 5-1: Using ep0 maxpacket: 32
[ 1491.783552][T26792] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1491.792373][T26792] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping
[ 1491.801373][T26792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.812349][T26792] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 19
[ 1491.821481][T26792] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 7
[ 1491.834840][T26792] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1491.846031][T21916] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1491.848020][T26792] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1491.862649][T26792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1491.871214][T26792] usb 5-1: Product: syz
[ 1491.875384][T26792] usb 5-1: Manufacturer: syz
[ 1491.880252][T26792] usb 5-1: SerialNumber: syz
[ 1491.923290][T29990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1491.932572][T29990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1491.997786][T21916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10
[ 1492.009118][T21916] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1492.018250][T21916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.030184][T21916] usb 4-1: config 0 descriptor??
[ 1492.105010][T26792] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1492.140100][T26792] usb 5-1: USB disconnect, device number 88
[ 1492.168804][T21487] usb 8-1: new high-speed USB device number 123 using dummy_hcd
[ 1492.310339][T29998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1492.320543][T29998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1492.347455][T21487] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1492.357778][T21487] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1492.370751][T21487] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1492.381198][T21487] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.392700][T21487] usb 8-1: config 0 descriptor??
[ 1492.445265][T21916] cm6533_jd 0003:0D8C:0022.0082: unknown main item tag 0x0
[ 1492.457436][T21916] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0082/input/input149
[ 1492.487685][T21916] cm6533_jd 0003:0D8C:0022.0082: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[ 1492.602758][T21487] usbhid 8-1:0.0: can't add hid device: -71
[ 1492.609168][T21487] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1492.620436][T21487] usb 8-1: USB disconnect, device number 123
[ 1492.650263][    C0] IPv4: Oversized IP packet from 172.20.20.24
[ 1492.888115][T30005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1492.901784][T30005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.518519][T21487] usb 8-1: new high-speed USB device number 124 using dummy_hcd
[ 1493.688282][T21487] usb 8-1: Using ep0 maxpacket: 32
[ 1493.700518][T21487] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1493.720921][T21487] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1493.785947][T21487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1493.808730][T21487] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1493.838372][T21487] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1493.856103][T21487] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1493.874841][T21487] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1493.888496][T21487] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.908561][T21487] usb 8-1: config 0 descriptor??
[ 1494.117646][T21487] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1494.207597][T30051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1494.258878][T30051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1494.308754][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1494.331558][  T938] usb 4-1: USB disconnect, device number 25
[ 1495.265934][T30079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1495.276266][T30079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1495.516519][T21916] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1495.588110][T22236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1495.666018][T21916] usb 5-1: device descriptor read/64, error -71
[ 1495.916025][T21487] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[ 1495.927370][T21916] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1496.076892][T21916] usb 5-1: device descriptor read/64, error -71
[ 1496.081217][T21487] usb 4-1: config 8 has an invalid interface number: 79 but max is 0
[ 1496.100346][T21487] usb 4-1: config 8 has no interface number 0
[ 1496.112679][T21487] usb 4-1: config 8 interface 79 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1496.157555][T21487] usb 4-1: config 8 interface 79 has no altsetting 0
[ 1496.186500][T21916] usb usb5-port1: attempt power cycle
[ 1496.197879][T21487] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=bc.04
[ 1496.224885][T21487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1496.248020][T21487] usb 4-1: Product: syz
[ 1496.252221][T21487] usb 4-1: Manufacturer: syz
[ 1496.260786][T30104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1496.276928][T21487] usb 4-1: SerialNumber: syz
[ 1496.293332][T30090] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1496.298224][T30104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1496.377899][T26792] usb 8-1: USB disconnect, device number 124
[ 1496.403783][T26792] usblp1: removed
[ 1496.546612][T21916] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1496.577195][T21916] usb 5-1: device descriptor read/8, error -71
[ 1496.612416][T21487] radio-si470x 4-1:8.79: could not find interrupt in endpoint
[ 1496.630891][T21487] radio-si470x 4-1:8.79: probe with driver radio-si470x failed with error -5
[ 1496.676305][T21487] radio-raremono 4-1:8.79: this is not Thanko's Raremono.
[ 1496.698232][T21487] usbhid 4-1:8.79: couldn't find an input interrupt endpoint
[ 1496.731242][T21487] usb 4-1: USB disconnect, device number 26
[ 1496.815984][T21916] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1496.836883][T21916] usb 5-1: device descriptor read/8, error -71
[ 1496.956451][T21916] usb usb5-port1: unable to enumerate USB device
[ 1497.273667][T30148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1497.296129][T30147] syzkaller1: entered promiscuous mode
[ 1497.316133][T30147] syzkaller1: entered allmulticast mode
[ 1497.318892][T30148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1497.420085][   T30] audit: type=1326 audit(2000037529.791:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.3.6757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53a2f8eec9 code=0x0
[ 1497.716044][    T9] usb 8-1: new high-speed USB device number 125 using dummy_hcd
[ 1497.866080][    T9] usb 8-1: Using ep0 maxpacket: 32
[ 1497.872517][    T9] usb 8-1: config 0 has an invalid interface number: 35 but max is 0
[ 1497.881082][    T9] usb 8-1: config 0 has no interface number 0
[ 1497.887341][    T9] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 150, changing to 11
[ 1497.901053][    T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1497.910214][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.918289][    T9] usb 8-1: Product: syz
[ 1497.922471][    T9] usb 8-1: Manufacturer: syz
[ 1497.927134][    T9] usb 8-1: SerialNumber: syz
[ 1497.934107][    T9] usb 8-1: config 0 descriptor??
[ 1497.945965][T26792] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1498.102535][T26792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1498.112468][T26792] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1498.122944][T26792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.152941][    T9] radio-si470x 8-1:0.35: this is not a si470x device.
[ 1498.162518][T26792] usb 5-1: config 0 descriptor??
[ 1498.206560][    T9] radio-raremono 8-1:0.35: this is not Thanko's Raremono.
[ 1498.231567][    T9] usb 8-1: USB disconnect, device number 125
[ 1498.421628][T30187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1498.436514][T30187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1498.707111][ T5866] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1498.805388][T30164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1498.819308][T30164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1498.829560][T21916] usb 5-1: USB disconnect, device number 93
[ 1498.875972][ T5866] usb 4-1: Using ep0 maxpacket: 16
[ 1498.882885][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1498.897762][ T5866] usb 4-1: New USB device found, idVendor=0711, idProduct=0950, bcdDevice= 6.9d
[ 1498.909155][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.917360][ T5866] usb 4-1: Product: syz
[ 1498.921609][ T5866] usb 4-1: Manufacturer: syz
[ 1498.929014][ T5866] usb 4-1: SerialNumber: syz
[ 1498.937141][ T5866] usb 4-1: config 0 descriptor??
[ 1498.949323][ T5866] sisusb 4-1:0.0: Invalid USB2VGA device
[ 1498.955640][ T5866] sisusb 4-1:0.0: probe with driver sisusb failed with error -22
[ 1498.995414][T30201] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6772'.
[ 1499.005362][T30201] NCSI netlink: No device for ifindex 0
[ 1499.069593][T30206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.080290][T30206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.099702][T30206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.110427][T30206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.163408][T30189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.175357][T30189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.184891][T21916] usb 4-1: USB disconnect, device number 27
[ 1499.656403][T21916] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1499.772519][T30239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.786530][T30239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.829054][T21916] usb 5-1: Using ep0 maxpacket: 32
[ 1499.844742][T21916] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[ 1499.855094][T21916] usb 5-1: config 0 has no interface number 0
[ 1499.875348][T21916] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1499.905797][T30248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.907990][T21916] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 1499.922847][T30248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.951311][T21916] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 1499.974946][T21916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1499.994777][T21916] usb 5-1: Product: syz
[ 1500.004897][T21916] usb 5-1: Manufacturer: syz
[ 1500.010231][T21916] usb 5-1: SerialNumber: syz
[ 1500.034227][T21916] usb 5-1: config 0 descriptor??
[ 1500.040736][T30220] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1500.056065][T30220] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1500.073894][T22236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1500.077473][T30248] fuse: root generation should be zero
[ 1500.125013][T21916] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 0a:6b:53:e2:c1:62
[ 1500.207685][T30264] MTD: Couldn't look up '': -22
[ 1500.215975][ T5941] usb 8-1: new high-speed USB device number 126 using dummy_hcd
[ 1500.302444][T21916] usb 5-1: USB disconnect, device number 94
[ 1500.334045][T21916] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1500.376416][ T5941] usb 8-1: Using ep0 maxpacket: 8
[ 1500.387035][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1500.417079][ T5941] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1500.450716][ T5941] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1500.463373][ T5941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.484964][ T5941] usb 8-1: Product: syz
[ 1500.495940][ T5941] usb 8-1: Manufacturer: syz
[ 1500.505959][ T5941] usb 8-1: SerialNumber: syz
[ 1500.526878][ T5941] usb 8-1: config 0 descriptor??
[ 1500.732119][T30295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1500.741656][T30295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1500.786994][T21487] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 1500.861430][T30298] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1500.937186][T21487] usb 4-1: too many endpoints for config 0 interface 0 altsetting 7: 34, using maximum allowed: 30
[ 1500.949310][T21487] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1500.960323][T21487] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1500.973210][T21487] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1500.980009][T21487] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[ 1500.989205][T21487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1500.999844][T21487] usb 4-1: config 0 descriptor??
[ 1501.030711][ T5941] usb 8-1: USB disconnect, device number 126
[ 1501.110753][T21916] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1501.213295][T21487] wacom 0003:056A:0094.0084: Using device in hidraw-only mode
[ 1501.222828][T21487] wacom 0003:056A:0094.0084: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0
[ 1501.266245][T21916] usb 5-1: Using ep0 maxpacket: 16
[ 1501.274153][T21916] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1501.285637][T21916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1501.296072][T21916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1501.307243][T21916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1501.316434][T21916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.324426][T21916] usb 5-1: Product: syz
[ 1501.329490][T21916] usb 5-1: Manufacturer: syz
[ 1501.334078][T21916] usb 5-1: SerialNumber: syz
[ 1501.349922][T16705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1501.386218][T30301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1501.395091][T30301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1501.399076][T30303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1501.411994][T30303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1501.413813][T21487] usb 4-1: USB disconnect, device number 28
[ 1501.544666][T30298] netlink: 'syz.4.6789': attribute type 32 has an invalid length.
[ 1501.754695][T21916] usb 5-1: 0:2 : does not exist
[ 1501.805961][ T5941] usb 8-1: new high-speed USB device number 127 using dummy_hcd
[ 1501.960269][ T5941] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1501.980741][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1502.012159][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1502.024490][ T5941] usb 8-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[ 1502.033924][ T5941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1502.047324][ T5941] usb 8-1: config 0 descriptor??
[ 1502.083042][T30314] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1502.210246][T30318] syzkaller1: left promiscuous mode
[ 1502.219352][T30318] syzkaller1: left allmulticast mode
[ 1502.406130][T21916] usb 5-1: USB disconnect, device number 95
[ 1502.443285][T25781] udevd[25781]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1502.493414][ T5941] wacom 0003:056A:0010.0085: item fetching failed at offset 5/7
[ 1502.512896][ T5941] wacom 0003:056A:0010.0085: parse failed
[ 1502.526051][ T5941] wacom 0003:056A:0010.0085: probe with driver wacom failed with error -22
[ 1502.548164][T30331] veth0_to_bond: entered promiscuous mode
[ 1502.553925][T30331] veth0_to_bond: entered allmulticast mode
[ 1502.684195][   T24] usb 8-1: USB disconnect, device number 127
[ 1503.046198][    T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1503.226214][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1503.240152][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1503.251537][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1503.263067][    T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[ 1503.273941][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1503.296524][    T9] usb 4-1: config 0 descriptor??
[ 1503.305964][ T5941] usb 5-1: new full-speed USB device number 96 using dummy_hcd
[ 1503.338064][T30353] netlink: 'syz.7.6805': attribute type 1 has an invalid length.
[ 1503.489462][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1503.499715][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1503.510830][ T5941] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1503.520274][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1503.528315][ T5941] usb 5-1: SerialNumber: syz
[ 1503.540505][ T5941] usb 5-1: 0:2 : does not exist
[ 1503.615994][ T5923] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1503.715424][    T9] usbhid 4-1:0.0: can't add hid device: -71
[ 1503.722823][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1503.735130][    T9] usb 4-1: USB disconnect, device number 29
[ 1503.767718][ T5923] usb 8-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 1503.779465][ T5923] usb 8-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1
[ 1503.805927][ T5923] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1503.826233][ T5923] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 1503.839695][ T5923] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1503.849688][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1503.893465][T30370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6811'.
[ 1503.903158][T30370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6811'.
[ 1504.009528][    T9] usb 5-1: USB disconnect, device number 96
[ 1504.064634][ T5923] ath6kl: Failed to submit usb control message: -71
[ 1504.073089][ T5923] ath6kl: unable to send the bmi data to the device: -71
[ 1504.081025][ T5923] ath6kl: Unable to send get target info: -71
[ 1504.093963][ T5923] ath6kl: Failed to init ath6kl core: -71
[ 1504.112007][ T5923] ath6kl_usb 8-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 1504.140747][ T5923] usb 8-1: USB disconnect, device number 2
[ 1504.516866][T30406] tmpfs: Bad value for 'mode'
[ 1504.604827][T30412] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6832'.
[ 1504.699448][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6833'.
[ 1504.886369][T30432] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6841'.
[ 1505.093166][T30445] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6846'.
[ 1505.106442][T30446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6848'.
[ 1505.117429][T30445] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6846'.
[ 1505.135329][T30449] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6847'.
[ 1505.152167][T30443] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6847'.
[ 1505.164205][T30449] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6847'.
[ 1505.208565][T30453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1505.215807][T30453] IPv6: NLM_F_CREATE should be set when creating new route
[ 1505.223112][T30453] IPv6: NLM_F_CREATE should be set when creating new route
[ 1505.230395][T30453] IPv6: NLM_F_CREATE should be set when creating new route
[ 1505.382042][T30466] netlink: 'syz.8.6856': attribute type 29 has an invalid length.
[ 1505.393489][T30466] netlink: 'syz.8.6856': attribute type 29 has an invalid length.
[ 1505.403733][T30466] netlink: 'syz.8.6856': attribute type 29 has an invalid length.
[ 1505.685606][T30490] netlink: 'syz.3.6867': attribute type 29 has an invalid length.
[ 1505.700106][T30491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6868'.
[ 1505.714298][T30490] netlink: 'syz.3.6867': attribute type 29 has an invalid length.
[ 1505.737696][T30490] netlink: 'syz.3.6867': attribute type 29 has an invalid length.
[ 1505.826844][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1505.990916][T30505] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1506.204288][T30519] netlink: 'syz.4.6880': attribute type 1 has an invalid length.
[ 1506.471162][T16705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1506.754054][   T30] audit: type=1107 audit(2000037539.141:539): pid=30548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f?-c
j'
[ 1508.590207][ T5923] syz2: Port: 1 Link DOWN
[ 1508.608909][T30549] netlink: 'syz.7.6894': attribute type 29 has an invalid length.
[ 1509.193837][T30606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1509.204499][T30606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1509.346448][    T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1509.405921][ T5941] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1509.416012][T21488] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[ 1509.475950][    T9] usb 8-1: device descriptor read/64, error -71
[ 1509.576029][ T5941] usb 5-1: Using ep0 maxpacket: 8
[ 1509.581742][ T5941] usb 5-1: too many configurations: 211, using maximum allowed: 8
[ 1509.591023][T21488] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1509.599356][T21488] usb 4-1: config 0 has no interface number 0
[ 1509.606776][ T5941] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1509.614344][ T5941] usb 5-1: can't read configurations, error -61
[ 1509.622702][T21488] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1509.631769][T21488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.640196][T21488] usb 4-1: Product: syz
[ 1509.644362][T21488] usb 4-1: Manufacturer: syz
[ 1509.649178][T21488] usb 4-1: SerialNumber: syz
[ 1509.655584][T21488] usb 4-1: config 0 descriptor??
[ 1509.727176][    T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1509.756071][ T5941] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1509.779793][T30608] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.832601][T30608] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.856080][    T9] usb 8-1: device descriptor read/64, error -71
[ 1509.901591][T30608] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.915986][ T5941] usb 5-1: Using ep0 maxpacket: 8
[ 1509.921685][ T5941] usb 5-1: too many configurations: 211, using maximum allowed: 8
[ 1509.931333][ T5941] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1509.938994][ T5941] usb 5-1: can't read configurations, error -61
[ 1509.951903][T30608] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.961910][ T5941] usb usb5-port1: attempt power cycle
[ 1509.968818][    T9] usb usb8-port1: attempt power cycle
[ 1510.033585][ T3170] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1510.052611][ T3170] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1510.074429][   T60] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1510.090622][ T3170] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1510.273950][T30619] __nla_validate_parse: 2 callbacks suppressed
[ 1510.273963][T30619] netlink: 188 bytes leftover after parsing attributes in process `syz.8.6918'.
[ 1510.326343][ T5941] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1510.334117][    T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[ 1510.356799][ T5941] usb 5-1: Using ep0 maxpacket: 8
[ 1510.362021][    T9] usb 8-1: device descriptor read/8, error -71
[ 1510.372507][ T5941] usb 5-1: too many configurations: 211, using maximum allowed: 8
[ 1510.382960][ T5941] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1510.392793][ T5941] usb 5-1: can't read configurations, error -61
[ 1510.441659][T30629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1510.451976][T30629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1510.478083][T21488] usb 4-1: Firmware version (0.0) predates our first public release.
[ 1510.489730][T21488] usb 4-1: Please update to version 0.2 or newer
[ 1510.525239][T30635] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1510.528971][T21488] usb 4-1: USB disconnect, device number 30
[ 1510.541305][ T5941] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1510.567474][ T5941] usb 5-1: Using ep0 maxpacket: 8
[ 1510.579637][ T5941] usb 5-1: too many configurations: 211, using maximum allowed: 8
[ 1510.585018][T30635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1510.602965][T30636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1510.605048][ T5941] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1510.617292][T30635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1510.620324][ T5941] usb 5-1: can't read configurations, error -61
[ 1510.629497][T30636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1510.633503][ T5941] usb usb5-port1: unable to enumerate USB device
[ 1510.648906][    T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[ 1510.686586][    T9] usb 8-1: device descriptor read/8, error -71
[ 1510.796422][    T9] usb usb8-port1: unable to enumerate USB device
[ 1510.947182][   T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1511.195741][T30642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1511.205202][T30642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1511.220834][T30642] /dev/nullb0: Can't open blockdev
[ 1511.306081][T21916] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[ 1511.457219][T21916] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[ 1511.465416][T21916] usb 4-1: config 0 has no interface number 0
[ 1511.471662][T21916] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[ 1511.482793][T21916] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1511.492803][T21916] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1511.503985][T21916] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1511.519546][T21916] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[ 1511.529158][T21916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1511.537216][T21916] usb 4-1: Product: syz
[ 1511.541390][T21916] usb 4-1: Manufacturer: syz
[ 1511.546141][T21916] usb 4-1: SerialNumber: syz
[ 1511.552289][T21916] usb 4-1: config 0 descriptor??
[ 1511.567385][T21916] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1511.578870][T21916] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input151
[ 1511.768105][T30640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1511.778141][T30644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1511.778801][T30640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1511.790682][T30644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1511.909023][    T9] usb 4-1: USB disconnect, device number 31
[ 1512.228323][   T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1512.416088][   T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1512.499135][T14505] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1512.566070][   T24] usb 5-1: device descriptor read/64, error -71
[ 1512.613946][T30663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1512.622733][T30663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1512.659236][T14505] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1512.669218][T14505] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1512.681574][T14505] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1512.691394][T14505] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1512.703173][T14505] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1512.712439][T14505] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.720564][T21916] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 1512.728183][T14505] usb 8-1: Product: syz
[ 1512.732338][T14505] usb 8-1: Manufacturer: syz
[ 1512.737531][T14505] usb 8-1: SerialNumber: syz
[ 1512.744244][T14505] usb 8-1: config 0 descriptor??
[ 1512.751392][T30655] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1512.759862][T14505] usb 8-1: ucan: probing device on interface #0
[ 1512.766263][T14505] usb 8-1: ucan: invalid in_ep MaxPacketSize
[ 1512.772262][T14505] usb 8-1: ucan: probe failed; try to update the device firmware
[ 1512.806272][   T24] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1512.887307][T21916] usb 4-1: config 16 has an invalid interface number: 19 but max is 0
[ 1512.895547][T21916] usb 4-1: config 16 has no interface number 0
[ 1512.903930][T21916] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee
[ 1512.913195][T21916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.921433][T21916] usb 4-1: Product: syz
[ 1512.925599][T21916] usb 4-1: Manufacturer: syz
[ 1512.930215][T21916] usb 4-1: SerialNumber: syz
[ 1512.936021][   T24] usb 5-1: device descriptor read/64, error -71
[ 1512.964300][T30655] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[ 1512.971275][ T5941] usb 8-1: USB disconnect, device number 7
[ 1513.046424][   T24] usb usb5-port1: attempt power cycle
[ 1513.182865][T21916] usb 4-1: USB disconnect, device number 32
[ 1513.205829][T25781] udevd[25781]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1513.299594][T30668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1513.308574][T30668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1513.386113][   T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1513.406586][   T24] usb 5-1: device descriptor read/8, error -71
[ 1513.645944][   T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1513.666944][   T24] usb 5-1: device descriptor read/8, error -71
[ 1513.776842][   T24] usb usb5-port1: unable to enumerate USB device
[ 1513.805946][T21916] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1513.851622][T30681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1513.861131][T30681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1513.959447][T21916] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1513.969175][T21916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1513.977328][T21916] usb 8-1: Product: syz
[ 1513.981498][T21916] usb 8-1: Manufacturer: syz
[ 1513.986175][T21916] usb 8-1: SerialNumber: syz
[ 1514.196033][T21916] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1514.208674][T21916] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1514.219438][T21916] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1514.230039][T21916] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71
[ 1514.242467][T21916] usb 8-1: USB disconnect, device number 8
[ 1514.460247][T30686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1514.469069][T30686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1515.034832][T30695] netlink: 'syz.8.6945': attribute type 21 has an invalid length.
[ 1515.043919][T30695] netlink: 'syz.8.6945': attribute type 5 has an invalid length.
[ 1515.052211][T30695] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6945'.
[ 1515.061373][T21488] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1515.220955][T21488] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1515.231468][T21488] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1515.241085][T21488] usb 8-1: Product: syz
[ 1515.245262][T21488] usb 8-1: Manufacturer: syz
[ 1515.249998][T21488] usb 8-1: SerialNumber: syz
[ 1515.256518][T21488] usb 8-1: config 0 descriptor??
[ 1515.464018][T21488] usb 8-1: ignoring: probably an ADSL modem
[ 1515.575980][ T5923] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1515.725928][ T5923] usb 5-1: Using ep0 maxpacket: 8
[ 1515.732553][ T5923] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1515.743806][ T5923] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1515.757072][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1515.763703][ T5923] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[ 1515.772861][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1515.783141][ T5923] usb 5-1: config 0 descriptor??
[ 1515.866310][T21488] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1515.993060][T30697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1516.001872][T30697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1516.212288][T30697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1516.221864][T30697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1516.239275][ T5923] lenovo 0003:17EF:60A4.0086: hidraw0: USB HID vf4.f6 Device [HID 17ef:60a4] on usb-dummy_hcd.4-1/input0
[ 1516.434841][ T5923] usb 5-1: USB disconnect, device number 105
[ 1516.706428][T16705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1516.806424][T30709] program syz.3.6950 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1517.476026][ T5923] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1517.630259][ T5923] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[ 1517.650639][ T5233] Dev loop6: unable to read RDB block 1
[ 1517.656727][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.675082][ T5233]  loop6: unable to read partition table
[ 1517.686542][ T5233] loop6: partition table beyond EOD, truncated
[ 1517.693736][ T5923] usb 5-1: config 0 descriptor??
[ 1517.728948][ T5923] usb 5-1: selecting invalid altsetting 1
[ 1517.741603][ T5923] flexcop_usb: set interface failed.
[ 1517.753882][ T5923] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[ 1517.977465][T21488] usb 5-1: USB disconnect, device number 106
[ 1517.990563][T16705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1518.320394][T30731] syzkaller0: entered promiscuous mode
[ 1518.326060][T30731] syzkaller0: entered allmulticast mode
[ 1518.394471][T30732] netlink: zone id is out of range
[ 1518.403224][T30732] netlink: zone id is out of range
[ 1518.427747][T30732] netlink: zone id is out of range
[ 1518.440564][T30732] netlink: zone id is out of range
[ 1518.452189][T30732] netlink: zone id is out of range
[ 1518.460841][T30732] netlink: zone id is out of range
[ 1518.467594][T30732] netlink: zone id is out of range
[ 1518.472725][T30732] netlink: zone id is out of range
[ 1518.478684][T30732] netlink: zone id is out of range
[ 1518.615942][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1518.695952][   T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1518.766198][    T9] usb 4-1: device descriptor read/64, error -71
[ 1518.846015][   T24] usb 5-1: Using ep0 maxpacket: 8
[ 1518.855231][   T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1518.863760][   T24] usb 5-1: config 179 has no interface number 0
[ 1518.871990][   T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1518.883526][   T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1518.895169][   T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1518.906735][   T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1518.914830][T30739] netlink: 200 bytes leftover after parsing attributes in process `syz.7.6958'.
[ 1518.917023][   T24] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1518.931705][T30739] tc_dump_action: action bad kind
[ 1518.940066][   T24] usb 5-1: config 179 interface 65 has no altsetting 0
[ 1518.951486][   T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1518.960732][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.004034][   T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input152
[ 1519.016807][    T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1519.111713][T30747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1519.120606][T30747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1519.166330][    T9] usb 4-1: device descriptor read/64, error -71
[ 1519.202111][T30731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1519.211166][T30731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1519.220195][T21487] usb 5-1: USB disconnect, device number 107
[ 1519.220267][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1519.276808][    T9] usb usb4-port1: attempt power cycle
[ 1519.626009][    T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1519.658235][    T9] usb 4-1: device descriptor read/8, error -71
[ 1519.899590][    T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1519.935828][    T9] usb 4-1: device descriptor read/8, error -71
[ 1520.053633][    T9] usb usb4-port1: unable to enumerate USB device
[ 1521.162208][T30756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1521.171407][T30756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1521.180502][T30756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1521.189836][T30756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1521.691801][T30763] netlink: 'syz.4.6966': attribute type 4 has an invalid length.
[ 1521.805408][T30767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1521.819021][T30767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1521.828834][T30767] netlink: 'syz.7.6967': attribute type 12 has an invalid length.
[ 1521.830935][   T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1521.838271][T30767] netlink: 14585 bytes leftover after parsing attributes in process `syz.7.6967'.
[ 1521.983136][T30772] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1522.084260][T30776] netlink: 'syz.7.6970': attribute type 5 has an invalid length.
[ 1522.092282][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6970'.
[ 1522.566861][   T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1522.736737][   T24] usb 4-1: no configurations
[ 1522.741418][   T24] usb 4-1: can't read configurations, error -22
[ 1522.888867][   T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1523.057482][   T24] usb 4-1: no configurations
[ 1523.062252][   T24] usb 4-1: can't read configurations, error -22
[ 1523.069311][   T24] usb usb4-port1: attempt power cycle
[ 1523.406994][   T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1523.439685][   T24] usb 4-1: no configurations
[ 1523.444501][   T24] usb 4-1: can't read configurations, error -22
[ 1523.588792][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1523.630863][   T24] usb 4-1: no configurations
[ 1523.635555][   T24] usb 4-1: can't read configurations, error -22
[ 1523.642495][   T24] usb usb4-port1: unable to enumerate USB device
[ 1523.747222][ T3170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1524.050202][    T9] syz2: Port: 1 Link DOWN
[ 1524.258640][T30799] netlink: 'syz.8.6977': attribute type 8 has an invalid length.
[ 1524.268406][T30801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1524.280133][T30801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1524.465726][T30818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1524.474550][T30818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1524.484794][T30818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1524.494062][T30818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1524.723448][T30833] kvm: user requested TSC rate below hardware speed
[ 1524.843836][T30835] 9pnet_fd: Insufficient options for proto=fd
[ 1524.952215][T30843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1524.962364][T30843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1524.962424][T30844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1524.979309][T30844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1525.052205][T30846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1525.062501][T30846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1525.072321][T30846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1525.081200][T30846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1525.349527][   T30] audit: type=1326 audit(2000037557.731:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30852 comm="syz.3.6991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53a2f8eec9 code=0x0
[ 1525.525943][   T24] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1525.661383][T30866] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6995'.
[ 1525.680471][   T24] usb 5-1: Using ep0 maxpacket: 8
[ 1525.691716][   T24] usb 5-1: config 0 has an invalid interface number: 48 but max is 12
[ 1525.708462][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1525.719965][   T24] usb 5-1: config 0 has no interface number 0
[ 1525.727962][   T24] usb 5-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[ 1525.739530][   T24] usb 5-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1525.745941][    T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1525.753276][   T24] usb 5-1: config 0 interface 48 has no altsetting 0
[ 1525.770182][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1525.782333][   T24] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[ 1525.811687][   T24] usb 5-1: Product: syz
[ 1525.815975][   T24] usb 5-1: Manufacturer: syz
[ 1525.820593][   T24] usb 5-1: SerialNumber: syz
[ 1525.842912][   T24] usb 5-1: config 0 descriptor??
[ 1526.061943][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1526.080872][   T24] gspca_zc3xx: reg_w_i err -71
[ 1526.131998][T30883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1526.145498][T30883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1526.226193][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1526.232965][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1526.243920][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1526.253708][    T9] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1526.262798][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1526.273260][    T9] usb 4-1: config 0 descriptor??
[ 1526.675960][   T24] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1526.682360][   T24] gspca_zc3xx 5-1:0.48: probe with driver gspca_zc3xx failed with error -71
[ 1526.691812][T30858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1526.700736][T30858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1526.702478][   T24] usb 5-1: USB disconnect, device number 108
[ 1526.713236][T30858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1526.728033][T30858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1526.741538][T30858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1526.753361][T30858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1526.777574][T30858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1526.800145][T30858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1526.853971][    T9] hid (null): report_id 41360 is invalid
[ 1526.871740][    T9] macally 0003:060B:0001.0087: unknown main item tag 0x0
[ 1526.881802][    T9] macally 0003:060B:0001.0087: unknown main item tag 0x7
[ 1526.889280][    T9] macally 0003:060B:0001.0087: report_id 41360 is invalid
[ 1526.896815][    T9] macally 0003:060B:0001.0087: item 0 2 1 8 parsing failed
[ 1526.904789][    T9] macally 0003:060B:0001.0087: probe with driver macally failed with error -22
[ 1527.058348][ T5941] usb 4-1: USB disconnect, device number 41
[ 1527.186362][   T24] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1527.347792][   T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.360666][   T24] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1527.369834][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.377900][   T24] usb 5-1: Product: syz
[ 1527.382058][   T24] usb 5-1: Manufacturer: syz
[ 1527.386693][   T24] usb 5-1: SerialNumber: syz
[ 1527.396858][   T24] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1527.586447][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1527.610480][T30891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1527.622410][T30891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1527.926061][T21916] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1527.971506][   T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1527.983465][   T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1527.993454][   T24] usb 5-1: media controller created
[ 1528.021569][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1528.066082][T21916] usb 4-1: device descriptor read/64, error -71
[ 1528.336910][T21916] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1528.475932][T21916] usb 4-1: device descriptor read/64, error -71
[ 1528.604234][T21916] usb usb4-port1: attempt power cycle
[ 1528.946844][T21916] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1528.977274][T21916] usb 4-1: device descriptor read/8, error -71
[ 1529.153896][T30909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1529.163020][T30909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1529.166830][ T5941] usb 5-1: USB disconnect, device number 109
[ 1529.215949][T21916] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1529.237075][T21916] usb 4-1: device descriptor read/8, error -71
[ 1529.357251][T21916] usb usb4-port1: unable to enumerate USB device
[ 1529.506367][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1529.631711][T30911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1529.640792][T30911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1529.762376][T30915] input: syz1 as /devices/virtual/input/input153
[ 1529.982228][T30918] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1529.992656][T30918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1530.002578][T30918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1530.179923][T30920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7013'.
[ 1530.545414][T30927] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7015'.
[ 1530.587926][T30932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1530.597642][T30932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1530.608937][T30932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1530.619342][T30932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1530.629654][T30932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1530.638443][T30932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1530.771910][T30939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1530.783206][T30939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1531.040844][T30942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1531.049648][T30942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1531.058547][T30942] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7019'.
[ 1531.071882][T30942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1531.080532][T30942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1531.096378][T14505] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[ 1531.183073][T30950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1531.192093][T30950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1531.197462][T30951] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7020'.
[ 1531.210075][T30954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1531.222613][T30954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1531.248023][T14505] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1531.256782][T14505] usb 4-1: config 9 has an invalid interface number: 236 but max is 0
[ 1531.264956][T14505] usb 4-1: config 9 has no interface number 0
[ 1531.275107][T14505] usb 4-1: config 9 interface 236 altsetting 0 endpoint 0x4 has invalid maxpacket 16, setting to 8
[ 1531.288123][T14505] usb 4-1: config 9 interface 236 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[ 1531.299081][T14505] usb 4-1: config 9 interface 236 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1
[ 1531.310826][T14505] usb 4-1: config 9 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 18441, setting to 8
[ 1531.321905][T14505] usb 4-1: config 9 interface 236 altsetting 0 endpoint 0x9 is Bulk; changing to Interrupt
[ 1531.333022][T14505] usb 4-1: config 9 interface 236 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1531.350347][T14505] usb 4-1: string descriptor 0 read error: -22
[ 1531.356743][T14505] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=55.e2
[ 1531.365782][T14505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1531.380171][T30940] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1531.387529][T30940] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1531.399283][T14505] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones
[ 1531.433897][T30957] comedi comedi0: aio_iiro_16: a I/O base address must be specified
[ 1531.472656][T30961] fuse: Unknown parameter 'Ld'
[ 1531.505517][T30964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1531.514651][T30964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1531.525476][T30964] netlink: 9 bytes leftover after parsing attributes in process `syz.8.7024'.
[ 1531.534555][T30964] 0·: renamed from hsr0 (while UP)
[ 1531.542045][T30964] 0·: entered allmulticast mode
[ 1531.547045][T30964] hsr_slave_0: entered allmulticast mode
[ 1531.552724][T30964] hsr_slave_1: entered allmulticast mode
[ 1531.559136][T30964] net_ratelimit: 76 callbacks suppressed
[ 1531.559151][T30964] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[ 1531.596600][    T9] usb 4-1: USB disconnect, device number 46
[ 1531.653294][T30967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7025'.
[ 1531.801735][T30976] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1531.956153][T14505] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1532.081772][T30987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1532.097489][T30987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1532.125093][T14505] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1532.136552][T14505] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1532.154634][T14505] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 1532.174958][T14505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1532.185013][T30991] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.7034'.
[ 1532.206804][T14505] usb 5-1: config 0 descriptor??
[ 1532.416464][T14505] usb 5-1: string descriptor 0 read error: -71
[ 1532.444860][T14505] usb 5-1: USB disconnect, device number 110
[ 1532.585933][   T24] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[ 1532.738189][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1532.748721][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1532.762874][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1532.774145][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1532.785016][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1532.800331][   T24] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1532.810889][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1532.821022][   T24] usb 4-1: Product: syz
[ 1532.825300][   T24] usb 4-1: Manufacturer: syz
[ 1532.830400][   T24] usb 4-1: SerialNumber: syz
[ 1532.868445][   T24] usb 4-1: config 0 descriptor??
[ 1533.092179][T31003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1533.145218][T31003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1533.226707][   T24] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32
[ 1533.235363][   T24] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[ 1533.293172][T31020] program syz.4.7044 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1533.352640][   T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1533.451553][T31023] overlayfs: statfs failed on './file0'
[ 1533.459838][T31027] overlayfs: statfs failed on './file0'
[ 1533.519182][    T9] usb 4-1: USB disconnect, device number 47
[ 1533.552490][T31029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1533.561357][T31029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1533.682643][T11809] Bluetooth: hci2: unexpected event 0x2c length: 7 < 17
[ 1533.754176][T31031] /dev/nullb0: Can't open blockdev
[ 1534.237516][T31054] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7053'.
[ 1534.249680][T31054] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7053'.
[ 1534.406319][ T5923] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1534.571228][ T5923] usb 5-1: config index 0 descriptor too short (expected 8028, got 92)
[ 1534.571257][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1534.571286][ T5923] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1534.573143][ T5923] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1534.610331][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1534.618626][ T5923] usb 5-1: Product: syz
[ 1534.622799][ T5923] usb 5-1: Manufacturer: syz
[ 1534.626454][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1534.628330][ T5923] usb 5-1: SerialNumber: syz
[ 1534.782960][T31083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1534.792685][T31083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1534.810700][   T24] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[ 1534.979422][   T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1534.988653][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1534.996715][   T24] usb 4-1: Product: syz
[ 1535.000924][   T24] usb 4-1: Manufacturer: syz
[ 1535.005529][   T24] usb 4-1: SerialNumber: syz
[ 1535.012489][   T24] usb 4-1: config 0 descriptor??
[ 1535.222442][   T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1535.386881][T31089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1535.395674][T31089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1535.424486][T31071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1535.433606][T31071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1535.716918][T31051] debugfs: 'ttyS3' already exists in 'caif_serial'
[ 1535.728743][T31091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1535.744567][T31091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1535.759407][T31051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1535.770402][T31051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1535.782960][ T5923] cdc_ncm 5-1:1.0: bind() failure
[ 1535.811525][ T5923] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 1535.821171][ T5923] cdc_ncm 5-1:1.1: bind() failure
[ 1535.834956][ T5923] usb 5-1: USB disconnect, device number 111
[ 1535.975040][T31099] sctp: [Deprecated]: syz.8.7065 (pid 31099) Use of int in max_burst socket option deprecated.
[ 1535.975040][T31099] Use struct sctp_assoc_value instead
[ 1536.479481][T31123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1536.489008][T31123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1536.579713][T31123] kvm: pic: non byte write
[ 1536.676017][    T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1536.791846][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7070'.
[ 1536.800960][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7070'.
[ 1536.813409][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7070'.
[ 1536.828187][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1536.835793][    T9] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[ 1536.846384][    T9] usb 5-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1536.860960][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1536.865253][T31071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1536.878380][T31071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1536.883405][T31135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1536.889043][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[ 1536.897247][T31135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1536.904167][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1536.922035][    T9] usb 5-1: Product: syz
[ 1536.927481][    T9] usb 5-1: Manufacturer: syz
[ 1536.932086][    T9] usb 5-1: SerialNumber: syz
[ 1536.948818][   T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1536.963397][   T24] usb 4-1: USB disconnect, device number 48
[ 1537.200869][T31143] netlink: 'syz.4.7068': attribute type 2 has an invalid length.
[ 1537.209400][T31143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7068'.
[ 1537.229891][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input154
[ 1537.240876][ T5218] bcm5974 5-1:1.0: could not read from device
[ 1537.249709][ T5218] bcm5974 5-1:1.0: could not read from device
[ 1537.263412][ T5218] bcm5974 5-1:1.0: could not read from device
[ 1537.263452][    T9] usb 5-1: USB disconnect, device number 112
[ 1537.276486][ T5218] bcm5974 5-1:1.0: could not read from device
[ 1537.349395][T31145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1537.358232][T31145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1537.395991][   T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1537.526740][   T24] usb 4-1: device descriptor read/64, error -71
[ 1537.543199][T31147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1537.761124][T31156] netlink: 'syz.8.7076': attribute type 1 has an invalid length.
[ 1537.769041][   T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1537.793493][T31156] netlink: 'syz.8.7076': attribute type 101 has an invalid length.
[ 1537.801632][T31156] netlink: 564 bytes leftover after parsing attributes in process `syz.8.7076'.
[ 1537.950037][   T24] usb 4-1: device descriptor read/64, error -71
[ 1537.954776][T31165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1537.972514][T31165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1538.019489][T31165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1538.040998][T31165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1538.066482][   T24] usb usb4-port1: attempt power cycle
[ 1538.416170][   T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1538.436750][   T24] usb 4-1: device descriptor read/8, error -71
[ 1538.558272][T31175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1538.570122][T31175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1538.601994][T31179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1538.610701][T31179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1538.675976][   T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1538.698038][   T24] usb 4-1: device descriptor read/8, error -71
[ 1538.807534][   T24] usb usb4-port1: unable to enumerate USB device
[ 1539.106720][ T3170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1539.201862][T31190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1539.212714][T31190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1539.256740][   T24] usb 5-1: new full-speed USB device number 113 using dummy_hcd
[ 1539.395921][   T24] usb 5-1: device descriptor read/64, error -71
[ 1539.440579][T31194] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7089'.
[ 1539.635970][   T24] usb 5-1: new full-speed USB device number 114 using dummy_hcd
[ 1539.753483][T31209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1539.757231][ T3170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1539.762598][T31209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1539.781666][   T24] usb 5-1: device descriptor read/64, error -71
[ 1539.896510][   T24] usb usb5-port1: attempt power cycle
[ 1540.188691][T31211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1540.199783][T31211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1540.216574][T31215] 9pnet_fd: Insufficient options for proto=fd
[ 1540.217810][T31214] 9pnet_fd: Insufficient options for proto=fd
[ 1540.236078][   T24] usb 5-1: new full-speed USB device number 115 using dummy_hcd
[ 1540.273616][   T24] usb 5-1: device descriptor read/8, error -71
[ 1540.497191][T31230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1540.509623][T31230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1540.526473][   T24] usb 5-1: new full-speed USB device number 116 using dummy_hcd
[ 1540.538171][T31230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1540.548066][T31230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1540.577835][   T24] usb 5-1: device descriptor read/8, error -71
[ 1540.686227][   T24] usb usb5-port1: unable to enumerate USB device
[ 1540.759747][T31230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1540.768500][T31230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1540.786624][T21487] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[ 1540.938342][T21487] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[ 1540.949690][T21487] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1540.959957][T21487] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1540.973430][T21487] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1540.980552][T21487] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[ 1540.991046][T21487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1541.005004][T31244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.005352][T21487] usb 4-1: config 0 descriptor??
[ 1541.017456][T31244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.209995][T31259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.219160][T31259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.446690][T31265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.456748][T31265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.494130][T31236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.503259][T31237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7102'.
[ 1541.513839][T31236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1541.534959][T21487] usbhid 4-1:0.0: can't add hid device: -71
[ 1541.544888][T21487] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1541.560892][T21487] usb 4-1: USB disconnect, device number 53
[ 1541.754972][T31270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1541.764604][T31270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1542.245749][T31288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1542.287784][T31288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1542.406233][T31293] Invalid ELF header len 16
[ 1542.412285][T31293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1542.421650][T31293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1542.435107][T31293] Invalid ELF header len 32
[ 1542.440290][T31294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1542.459533][T31294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1542.709210][ T5923] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1542.766053][   T24] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1542.866032][ T5923] usb 4-1: Using ep0 maxpacket: 16
[ 1542.873936][ T5923] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1542.883269][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1542.891414][ T5923] usb 4-1: Product: syz
[ 1542.895592][ T5923] usb 4-1: Manufacturer: syz
[ 1542.900378][ T5923] usb 4-1: SerialNumber: syz
[ 1542.909458][ T5923] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1542.915715][ T5923] r8152-cfgselector 4-1: config 0 descriptor??
[ 1542.924016][   T24] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 1542.934906][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.945205][   T24] usb 5-1: config 0 descriptor??
[ 1543.054309][T31310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.063397][T31310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.175259][   T24] kaweth 5-1:0.0: Firmware present in device.
[ 1543.316936][T31324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.327227][T31324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.346388][T31326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.353304][   T24] kaweth 5-1:0.0: Statistics collection: 0
[ 1543.360030][T31326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.361250][   T24] kaweth 5-1:0.0: Multicast filter limit: 0
[ 1543.374297][   T24] kaweth 5-1:0.0: MTU: 0
[ 1543.378732][   T24] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00
[ 1543.563098][T31302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.571889][T31302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.581003][T31302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.592235][T31302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.611282][   T24] kaweth 5-1:0.0: Error setting SOFS wait
[ 1543.618312][   T24] kaweth 5-1:0.0: probe with driver kaweth failed with error -5
[ 1543.650848][   T24] usb 5-1: USB disconnect, device number 117
[ 1543.863134][T31333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.871864][T31333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1544.015967][   T24] usb 5-1: new full-speed USB device number 118 using dummy_hcd
[ 1544.168400][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1544.180527][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1544.189701][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1544.197747][   T24] usb 5-1: SerialNumber: syz
[ 1544.209067][   T24] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[ 1544.415111][   T24] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[ 1544.431949][   T24] usb 5-1: USB disconnect, device number 118
[ 1544.605716][T31343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1544.614449][T31343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1544.832751][T31345] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7133'.
[ 1544.867209][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1544.990957][T31356] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7136'.
[ 1545.202380][T31371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1545.211519][T31371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1545.295950][   T24] usb 5-1: new full-speed USB device number 119 using dummy_hcd
[ 1545.355237][T31376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1545.364967][T31376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1545.416239][    T9] r8152-cfgselector 4-1: USB disconnect, device number 54
[ 1545.436077][   T24] usb 5-1: device descriptor read/64, error -71
[ 1545.516259][   T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1545.675960][   T24] usb 5-1: new full-speed USB device number 120 using dummy_hcd
[ 1545.775934][    T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1545.805948][   T24] usb 5-1: device descriptor read/64, error -71
[ 1545.898056][T31382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1545.906942][    T9] usb 4-1: device descriptor read/64, error -71
[ 1545.909041][T31382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1545.923212][   T24] usb usb5-port1: attempt power cycle
[ 1546.148504][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1546.153392][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.265919][   T24] usb 5-1: new full-speed USB device number 121 using dummy_hcd
[ 1546.286553][   T24] usb 5-1: device descriptor read/8, error -71
[ 1546.295951][    T9] usb 4-1: device descriptor read/64, error -71
[ 1546.406255][    T9] usb usb4-port1: attempt power cycle
[ 1546.526016][   T24] usb 5-1: new full-speed USB device number 122 using dummy_hcd
[ 1546.546546][   T24] usb 5-1: device descriptor read/8, error -71
[ 1546.610534][T31391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1546.620831][T31391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1546.656464][   T24] usb usb5-port1: unable to enumerate USB device
[ 1546.755966][    T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1546.776650][    T9] usb 4-1: device descriptor read/8, error -71
[ 1547.015915][    T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1547.036646][    T9] usb 4-1: device descriptor read/8, error -71
[ 1547.146703][    T9] usb usb4-port1: unable to enumerate USB device
[ 1547.166617][T31393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1547.175401][T31393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1547.761146][T31398] 
[ 1547.763516][T31398] ======================================================
[ 1547.770525][T31398] WARNING: possible circular locking dependency detected
[ 1547.777538][T31398] syzkaller #0 Not tainted
[ 1547.781930][T31398] ------------------------------------------------------
[ 1547.788927][T31398] syz.7.7148/31398 is trying to acquire lock:
[ 1547.794972][T31398] ffff88805fd48258 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: __mptcp_close_ssk+0x25f/0xfd0
[ 1547.804712][T31398] 
[ 1547.804712][T31398] but task is already holding lock:
[ 1547.812054][T31398] ffff888025179a58 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_nl_del_addr_doit+0x47c/0x1150
[ 1547.822216][T31398] 
[ 1547.822216][T31398] which lock already depends on the new lock.
[ 1547.822216][T31398] 
[ 1547.832597][T31398] 
[ 1547.832597][T31398] the existing dependency chain (in reverse order) is:
[ 1547.841596][T31398] 
[ 1547.841596][T31398] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}:
[ 1547.849224][T31398]        lock_acquire+0x120/0x360
[ 1547.854238][T31398]        lock_sock_nested+0x48/0x100
[ 1547.859514][T31398]        inet_shutdown+0x6a/0x390
[ 1547.864522][T31398]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1547.870132][T31398]        sock_shutdown+0x15e/0x260
[ 1547.875230][T31398]        nbd_config_put+0x342/0x790
[ 1547.880411][T31398]        nbd_release+0xfe/0x140
[ 1547.885238][T31398]        bdev_release+0x536/0x650
[ 1547.890243][T31398]        blkdev_release+0x15/0x20
[ 1547.895250][T31398]        __fput+0x44c/0xa70
[ 1547.899735][T31398]        task_work_run+0x1d4/0x260
[ 1547.904824][T31398]        exit_to_user_mode_loop+0xe9/0x130
[ 1547.910612][T31398]        do_syscall_64+0x2bd/0xfa0
[ 1547.915721][T31398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1547.922140][T31398] 
[ 1547.922140][T31398] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1547.929779][T31398]        lock_acquire+0x120/0x360
[ 1547.934792][T31398]        __mutex_lock+0x187/0x1350
[ 1547.939890][T31398]        nbd_queue_rq+0x257/0xf10
[ 1547.944902][T31398]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[ 1547.950953][T31398]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[ 1547.957789][T31398]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1547.964272][T31398]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1547.969884][T31398]        blk_mq_dispatch_list+0xd0c/0xe00
[ 1547.975600][T31398]        blk_mq_flush_plug_list+0x469/0x550
[ 1547.981476][T31398]        __blk_flush_plug+0x3d3/0x4b0
[ 1547.986836][T31398]        __submit_bio+0x2d3/0x5a0
[ 1547.991854][T31398]        submit_bio_noacct_nocheck+0x2fb/0xa50
[ 1547.997989][T31398]        block_read_full_folio+0x599/0x830
[ 1548.003776][T31398]        filemap_read_folio+0x117/0x380
[ 1548.009303][T31398]        do_read_cache_folio+0x350/0x590
[ 1548.014919][T31398]        read_part_sector+0xb6/0x2b0
[ 1548.020183][T31398]        adfspart_check_ICS+0xa4/0xa50
[ 1548.025623][T31398]        bdev_disk_changed+0x75f/0x14b0
[ 1548.031149][T31398]        blkdev_get_whole+0x380/0x510
[ 1548.036506][T31398]        bdev_open+0x31e/0xd30
[ 1548.041250][T31398]        blkdev_open+0x457/0x600
[ 1548.046168][T31398]        do_dentry_open+0x953/0x13f0
[ 1548.051443][T31398]        vfs_open+0x3b/0x340
[ 1548.056018][T31398]        path_openat+0x2ee5/0x3830
[ 1548.061110][T31398]        do_filp_open+0x1fa/0x410
[ 1548.066112][T31398]        do_sys_openat2+0x121/0x1c0
[ 1548.071297][T31398]        __x64_sys_openat+0x138/0x170
[ 1548.076652][T31398]        do_syscall_64+0xfa/0xfa0
[ 1548.081659][T31398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1548.088051][T31398] 
[ 1548.088051][T31398] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1548.095243][T31398]        lock_acquire+0x120/0x360
[ 1548.100250][T31398]        __mutex_lock+0x187/0x1350
[ 1548.105345][T31398]        nbd_queue_rq+0xc8/0xf10
[ 1548.110269][T31398]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[ 1548.116316][T31398]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[ 1548.123146][T31398]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1548.129632][T31398]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1548.135244][T31398]        blk_mq_dispatch_list+0xd0c/0xe00
[ 1548.140943][T31398]        blk_mq_flush_plug_list+0x469/0x550
[ 1548.146818][T31398]        __blk_flush_plug+0x3d3/0x4b0
[ 1548.152172][T31398]        __submit_bio+0x2d3/0x5a0
[ 1548.157180][T31398]        submit_bio_noacct_nocheck+0x2fb/0xa50
[ 1548.163315][T31398]        block_read_full_folio+0x599/0x830
[ 1548.169101][T31398]        filemap_read_folio+0x117/0x380
[ 1548.174628][T31398]        do_read_cache_folio+0x350/0x590
[ 1548.180238][T31398]        read_part_sector+0xb6/0x2b0
[ 1548.185506][T31398]        adfspart_check_ICS+0xa4/0xa50
[ 1548.190943][T31398]        bdev_disk_changed+0x75f/0x14b0
[ 1548.196471][T31398]        blkdev_get_whole+0x380/0x510
[ 1548.201827][T31398]        bdev_open+0x31e/0xd30
[ 1548.206573][T31398]        blkdev_open+0x457/0x600
[ 1548.211491][T31398]        do_dentry_open+0x953/0x13f0
[ 1548.216760][T31398]        vfs_open+0x3b/0x340
[ 1548.221334][T31398]        path_openat+0x2ee5/0x3830
[ 1548.226423][T31398]        do_filp_open+0x1fa/0x410
[ 1548.231425][T31398]        do_sys_openat2+0x121/0x1c0
[ 1548.236616][T31398]        __x64_sys_openat+0x138/0x170
[ 1548.241991][T31398]        do_syscall_64+0xfa/0xfa0
[ 1548.247009][T31398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1548.253413][T31398] 
[ 1548.253413][T31398] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1548.260528][T31398]        lock_sync+0xba/0x160
[ 1548.265191][T31398]        __synchronize_srcu+0x96/0x3a0
[ 1548.270635][T31398]        elevator_switch+0x12b/0x640
[ 1548.275907][T31398]        elevator_change+0x315/0x4c0
[ 1548.281176][T31398]        elevator_set_default+0x186/0x260
[ 1548.286877][T31398]        blk_register_queue+0x34e/0x3f0
[ 1548.292409][T31398]        __add_disk+0x677/0xd50
[ 1548.297246][T31398]        add_disk_fwnode+0xfc/0x480
[ 1548.302429][T31398]        nbd_dev_add+0x717/0xae0
[ 1548.307358][T31398]        nbd_init+0x168/0x1f0
[ 1548.312022][T31398]        do_one_initcall+0x236/0x820
[ 1548.317287][T31398]        do_initcall_level+0x104/0x190
[ 1548.322727][T31398]        do_initcalls+0x59/0xa0
[ 1548.327556][T31398]        kernel_init_freeable+0x334/0x4b0
[ 1548.333257][T31398]        kernel_init+0x1d/0x1d0
[ 1548.338091][T31398]        ret_from_fork+0x4bc/0x870
[ 1548.343190][T31398]        ret_from_fork_asm+0x1a/0x30
[ 1548.348456][T31398] 
[ 1548.348456][T31398] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1548.356259][T31398]        lock_acquire+0x120/0x360
[ 1548.361270][T31398]        __mutex_lock+0x187/0x1350
[ 1548.366366][T31398]        elevator_change+0x1e5/0x4c0
[ 1548.371633][T31398]        elevator_set_none+0x42/0xb0
[ 1548.376901][T31398]        blk_mq_update_nr_hw_queues+0x598/0x1ab0
[ 1548.383211][T31398]        nbd_start_device+0x17f/0xb10
[ 1548.388569][T31398]        nbd_genl_connect+0x135b/0x18f0
[ 1548.394101][T31398]        genl_family_rcv_msg_doit+0x215/0x300
[ 1548.400151][T31398]        genl_rcv_msg+0x60e/0x790
[ 1548.405158][T31398]        netlink_rcv_skb+0x208/0x470
[ 1548.410426][T31398]        genl_rcv+0x28/0x40
[ 1548.414912][T31398]        netlink_unicast+0x82f/0x9e0
[ 1548.420181][T31398]        netlink_sendmsg+0x805/0xb30
[ 1548.425449][T31398]        __sock_sendmsg+0x21c/0x270
[ 1548.430635][T31398]        ____sys_sendmsg+0x505/0x830
[ 1548.435905][T31398]        ___sys_sendmsg+0x21f/0x2a0
[ 1548.441082][T31398]        __x64_sys_sendmsg+0x19b/0x260
[ 1548.446522][T31398]        do_syscall_64+0xfa/0xfa0
[ 1548.451532][T31398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1548.457926][T31398] 
[ 1548.457926][T31398] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1548.466514][T31398]        lock_acquire+0x120/0x360
[ 1548.471521][T31398]        blk_alloc_queue+0x538/0x620
[ 1548.476786][T31398]        __blk_mq_alloc_disk+0x15c/0x340
[ 1548.482404][T31398]        nbd_dev_add+0x46c/0xae0
[ 1548.487330][T31398]        nbd_init+0x168/0x1f0
[ 1548.491991][T31398]        do_one_initcall+0x236/0x820
[ 1548.497258][T31398]        do_initcall_level+0x104/0x190
[ 1548.502697][T31398]        do_initcalls+0x59/0xa0
[ 1548.507526][T31398]        kernel_init_freeable+0x334/0x4b0
[ 1548.513224][T31398]        kernel_init+0x1d/0x1d0
[ 1548.518058][T31398]        ret_from_fork+0x4bc/0x870
[ 1548.523152][T31398]        ret_from_fork_asm+0x1a/0x30
[ 1548.528422][T31398] 
[ 1548.528422][T31398] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1548.535615][T31398]        lock_acquire+0x120/0x360
[ 1548.540621][T31398]        fs_reclaim_acquire+0x72/0x100
[ 1548.546063][T31398]        __kmalloc_cache_noprof+0x40/0x6f0
[ 1548.551857][T31398]        ref_tracker_alloc+0x133/0x460
[ 1548.557298][T31398]        sk_net_refcnt_upgrade+0x10c/0x1b0
[ 1548.563085][T31398]        mptcp_subflow_create_socket+0x31a/0x7d0
[ 1548.569394][T31398]        __mptcp_nmpc_sk+0x148/0x760
[ 1548.574672][T31398]        mptcp_bind+0xab/0x1d0
[ 1548.579415][T31398]        __sys_bind+0x2c6/0x3e0
[ 1548.584246][T31398]        __x64_sys_bind+0x7a/0x90
[ 1548.589251][T31398]        do_syscall_64+0xfa/0xfa0
[ 1548.594256][T31398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1548.600648][T31398] 
[ 1548.600648][T31398] -> #0 (k-sk_lock-AF_INET/1){+.+.}-{0:0}:
[ 1548.608632][T31398]        validate_chain+0xb9b/0x2140
[ 1548.613906][T31398]        __lock_acquire+0xab9/0xd20
[ 1548.619083][T31398]        lock_acquire+0x120/0x360
[ 1548.624088][T31398]        lock_sock_nested+0x48/0x100
[ 1548.629359][T31398]        __mptcp_close_ssk+0x25f/0xfd0
[ 1548.634805][T31398]        mptcp_pm_rm_addr_or_subflow+0x4a5/0x960
[ 1548.641121][T31398]        mptcp_pm_nl_del_addr_doit+0x4aa/0x1150
[ 1548.647342][T31398]        genl_family_rcv_msg_doit+0x215/0x300
[ 1548.653392][T31398]        genl_rcv_msg+0x60e/0x790
[ 1548.658405][T31398]        netlink_rcv_skb+0x208/0x470
[ 1548.663673][T31398]        genl_rcv+0x28/0x40
[ 1548.668157][T31398]        netlink_unicast+0x82f/0x9e0
[ 1548.673426][T31398]        netlink_sendmsg+0x805/0xb30
[ 1548.678692][T31398]        __sock_sendmsg+0x21c/0x270
[ 1548.683873][T31398]        ____sys_sendmsg+0x505/0x830
[ 1548.689137][T31398]        ___sys_sendmsg+0x21f/0x2a0
[ 1548.694315][T31398]        __x64_sys_sendmsg+0x19b/0x260
[ 1548.699754][T31398]        do_syscall_64+0xfa/0xfa0
[ 1548.704762][T31398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1548.711156][T31398] 
[ 1548.711156][T31398] other info that might help us debug this:
[ 1548.711156][T31398] 
[ 1548.721368][T31398] Chain exists of:
[ 1548.721368][T31398]   k-sk_lock-AF_INET/1 --> &nsock->tx_lock --> sk_lock-AF_INET
[ 1548.721368][T31398] 
[ 1548.734750][T31398]  Possible unsafe locking scenario:
[ 1548.734750][T31398] 
[ 1548.742178][T31398]        CPU0                    CPU1
[ 1548.747525][T31398]        ----                    ----
[ 1548.752868][T31398]   lock(sk_lock-AF_INET);
[ 1548.757268][T31398]                                lock(&nsock->tx_lock);
[ 1548.764192][T31398]                                lock(sk_lock-AF_INET);
[ 1548.771111][T31398]   lock(k-sk_lock-AF_INET/1);
[ 1548.775864][T31398] 
[ 1548.775864][T31398]  *** DEADLOCK ***
[ 1548.775864][T31398] 
[ 1548.783985][T31398] 3 locks held by syz.7.7148/31398:
[ 1548.789158][T31398]  #0: ffffffff8f9b93d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1548.797332][T31398]  #1: ffffffff8f9b91e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1548.806279][T31398]  #2: ffff888025179a58 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_nl_del_addr_doit+0x47c/0x1150
[ 1548.816876][T31398] 
[ 1548.816876][T31398] stack backtrace:
[ 1548.822746][T31398] CPU: 1 UID: 0 PID: 31398 Comm: syz.7.7148 Not tainted syzkaller #0 PREEMPT(full) 
[ 1548.822763][T31398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1548.822772][T31398] Call Trace:
[ 1548.822779][T31398]  <TASK>
[ 1548.822786][T31398]  dump_stack_lvl+0x189/0x250
[ 1548.822808][T31398]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1548.822827][T31398]  ? __pfx__printk+0x10/0x10
[ 1548.822845][T31398]  ? print_lock_name+0xde/0x100
[ 1548.822862][T31398]  print_circular_bug+0x2ee/0x310
[ 1548.822883][T31398]  check_noncircular+0x134/0x160
[ 1548.822902][T31398]  validate_chain+0xb9b/0x2140
[ 1548.822921][T31398]  ? lockdep_unlock+0x89/0x120
[ 1548.822934][T31398]  ? validate_chain+0x897/0x2140
[ 1548.822954][T31398]  __lock_acquire+0xab9/0xd20
[ 1548.822972][T31398]  ? __mptcp_close_ssk+0x25f/0xfd0
[ 1548.822990][T31398]  lock_acquire+0x120/0x360
[ 1548.823004][T31398]  ? __mptcp_close_ssk+0x25f/0xfd0
[ 1548.823027][T31398]  lock_sock_nested+0x48/0x100
[ 1548.823046][T31398]  ? __mptcp_close_ssk+0x25f/0xfd0
[ 1548.823064][T31398]  __mptcp_close_ssk+0x25f/0xfd0
[ 1548.823084][T31398]  mptcp_pm_rm_addr_or_subflow+0x4a5/0x960
[ 1548.823108][T31398]  mptcp_pm_nl_del_addr_doit+0x4aa/0x1150
[ 1548.823123][T31398]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1548.823139][T31398]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[ 1548.823162][T31398]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1548.823183][T31398]  genl_family_rcv_msg_doit+0x215/0x300
[ 1548.823203][T31398]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1548.823224][T31398]  ? bpf_lsm_capable+0x9/0x20
[ 1548.823242][T31398]  ? security_capable+0x7e/0x2e0
[ 1548.823258][T31398]  genl_rcv_msg+0x60e/0x790
[ 1548.823277][T31398]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1548.823293][T31398]  ? ref_tracker_free+0x63a/0x7d0
[ 1548.823307][T31398]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[ 1548.823320][T31398]  ? ____sys_sendmsg+0x505/0x830
[ 1548.823336][T31398]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1548.823350][T31398]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1548.823365][T31398]  ? do_syscall_64+0xfa/0xfa0
[ 1548.823379][T31398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1548.823396][T31398]  netlink_rcv_skb+0x208/0x470
[ 1548.823409][T31398]  ? __lock_acquire+0xab9/0xd20
[ 1548.823423][T31398]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1548.823440][T31398]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1548.823459][T31398]  ? down_read+0x1ad/0x2e0
[ 1548.823476][T31398]  genl_rcv+0x28/0x40
[ 1548.823491][T31398]  netlink_unicast+0x82f/0x9e0
[ 1548.823513][T31398]  ? __pfx_netlink_unicast+0x10/0x10
[ 1548.823532][T31398]  ? netlink_sendmsg+0x642/0xb30
[ 1548.823545][T31398]  ? skb_put+0x11b/0x210
[ 1548.823560][T31398]  netlink_sendmsg+0x805/0xb30
[ 1548.823577][T31398]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1548.823592][T31398]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1548.823609][T31398]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1548.823623][T31398]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1548.823638][T31398]  __sock_sendmsg+0x21c/0x270
[ 1548.823663][T31398]  ____sys_sendmsg+0x505/0x830
[ 1548.823680][T31398]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1548.823698][T31398]  ? import_iovec+0x74/0xa0
[ 1548.823716][T31398]  ___sys_sendmsg+0x21f/0x2a0
[ 1548.823731][T31398]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1548.823757][T31398]  ? __fget_files+0x2a/0x420
[ 1548.823773][T31398]  ? __fget_files+0x3a0/0x420
[ 1548.823791][T31398]  __x64_sys_sendmsg+0x19b/0x260
[ 1548.823807][T31398]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1548.823827][T31398]  ? do_syscall_64+0xbe/0xfa0
[ 1548.823842][T31398]  do_syscall_64+0xfa/0xfa0
[ 1548.823855][T31398]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1548.823870][T31398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1548.823882][T31398]  ? clear_bhb_loop+0x60/0xb0
[ 1548.823897][T31398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1548.823910][T31398] RIP: 0033:0x7f064898eec9
[ 1548.823924][T31398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1548.823937][T31398] RSP: 002b:00007f06467d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1548.823951][T31398] RAX: ffffffffffffffda RBX: 00007f0648be6270 RCX: 00007f064898eec9
[ 1548.823962][T31398] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006
[ 1548.823971][T31398] RBP: 00007f0648a11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1548.823981][T31398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1548.823989][T31398] R13: 00007f0648be6308 R14: 00007f0648be6270 R15: 00007ffc24754928
[ 1548.824005][T31398]  </TASK>
[ 1549.302237][   T24] IPVS: starting estimator thread 0...
[ 1549.311514][T31397] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1549.382858][ T5941] usb 9-1: USB disconnect, device number 118
[ 1549.395917][T31399] IPVS: using max 47 ests per chain, 112800 per kthread
[ 1549.569850][   T50] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.628438][   T50] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.678969][   T50] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.739183][   T50] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.845322][   T50] bridge_slave_1: left allmulticast mode
[ 1549.853308][   T50] bridge_slave_1: left promiscuous mode
[ 1549.859479][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1549.868424][   T50] bridge_slave_0: left allmulticast mode
[ 1549.874942][   T50] bridge_slave_0: left promiscuous mode
[ 1549.880786][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1550.003029][T22236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1550.023484][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1550.034047][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1550.045045][   T50] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 1550.054410][   T50] bond0 (unregistering): Released all slaves
[ 1550.272319][   T50] hsr_slave_0: left promiscuous mode
[ 1550.282354][   T50] hsr_slave_1: left promiscuous mode
[ 1550.291513][   T50] veth1_macvtap: left promiscuous mode
[ 1550.303359][   T50] veth0_macvtap: left promiscuous mode
[ 1550.313695][   T50] veth1_vlan: left promiscuous mode
[ 1550.319088][   T50] veth0_vlan: left promiscuous mode
[ 1550.639263][   T50] team0 (unregistering): Port device team_slave_1 removed
[ 1550.674681][   T50] team0 (unregistering): Port device team_slave_0 removed
[ 1551.266447][ T3170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1555.026227][T22236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1557.026424][T22236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration