last executing test programs:

8m10.961525245s ago: executing program 0 (id=597):
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

8m10.960500448s ago: executing program 0 (id=599):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000042000002042000000000000000000001050000000800000000000000000000030000000001000000020000000400"/83, @ANYRES64=r0], 0x0, 0x5a}, 0x28)

8m10.875481674s ago: executing program 0 (id=603):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000), 0xde779bb5b7519a6d, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x9903)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc)

8m10.82450053s ago: executing program 0 (id=605):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0)) (async)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
getsockopt$inet6_buf(r1, 0x29, 0x32, 0x0, &(0x7f0000000000)) (async)
getsockopt$inet6_buf(r1, 0x29, 0x32, 0x0, &(0x7f0000000000))
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
r2 = gettid()
r3 = syz_pidfd_open(r2, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00') (async)
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
setpgid(r4, 0x0)
setpgid(0x0, r4) (async)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000480)=ANY=[])
ftruncate(r3, 0xc80)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000072009fb302000000fbdbdf00008d046e18edab5945a1", @ANYRES32=0x0], 0x18}}, 0x3c9c36f006b37067) (async)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000072009fb302000000fbdbdf00008d046e18edab5945a1", @ANYRES32=0x0], 0x18}}, 0x3c9c36f006b37067)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl(r0, 0xfffff000, &(0x7f0000000500)="c25bfdf78980245ecf2f5d3cb3df20f59efe6180664ad8c52469ece35d9ded55cd70aff60abcb1e4d447387d9828eea7ea8209c38b90263bcf1eac4597121552bd46dad69c284a8df8834fad85a4130c11e43e06328cd1da87ad26b7f2dda249cbbcaed6af2e2c535453e06383ef3b72ebd893c1a92244dce3580314c317a9c90f1a64af105cba5c2289c9869456fa546b2fde03bacc6fa15bce31a3190273340c16")
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) (async)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
waitid$P_PIDFD(0x3, r6, &(0x7f0000000240), 0x1, 0x0) (async)
waitid$P_PIDFD(0x3, r6, &(0x7f0000000240), 0x1, 0x0)

8m10.615848988s ago: executing program 0 (id=608):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000001040))
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r2, 0x0, 0x21, 0x0, &(0x7f0000001a40))
write$rfkill(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000009, 0x110, r1, 0xf42df000)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4008af10, &(0x7f00000001c0))
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x40025b0c, &(0x7f0000000040))

8m10.315036263s ago: executing program 0 (id=609):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x800, <r3=>0x0}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xcc, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6)
syz_open_dev$rtc(&(0x7f0000000180), 0x3, 0x82000)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)
syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=[0x5], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x0)

8m9.914123948s ago: executing program 32 (id=609):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x800, <r3=>0x0}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xcc, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6)
syz_open_dev$rtc(&(0x7f0000000180), 0x3, 0x82000)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)
syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=[0x5], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x0)

2m31.334872866s ago: executing program 2 (id=2168):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0xf2ffffff)

2m30.742571364s ago: executing program 2 (id=2171):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000093}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0xd0}, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x9, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x608b, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x8})
connect$unix(r4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
pivot_root(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000040)=<r7=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="010004"], 0x10)
io_uring_enter(r6, 0x3516, 0x483, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRES16=r3], 0x84}, 0x1, 0x0, 0x0, 0x24048011}, 0x24040884)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r9, 0x3b86, &(0x7f0000000340)={0x18, r10, 0xffffffffffffffff, 0x7})

2m30.674881855s ago: executing program 2 (id=2172):
r0 = socket(0x10, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4)
r4 = dup(r1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x2c93a000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x6d, 0xd396, 0xb]}, &(0x7f0000000140)=0x44)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPTLCK(r8, 0x80045439, &(0x7f0000000080))
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180030000000800000020000a8005000800000000000e00070000000000000000000000000000000001"], 0x68}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, <r9=>0x0})
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0})
r12 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r13=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r13, <r14=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r10, 0xc01c64ad, &(0x7f0000000040)={r14})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000240)={r9, r14, 0x9, 0x5c7b, 0x800})
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x93e)

2m29.944653638s ago: executing program 2 (id=2173):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async)
r2 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async)
recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) (async)
syz_mount_image$hpfs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB='timeshift=+0000000000000\x00\x00\x00\x0003,check=none,help,help,\x00', @ANYRES32, @ANYRESDEC], 0x0, 0x9e03, &(0x7f0000009e80)="$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")

2m29.883521822s ago: executing program 2 (id=2174):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000002040000000000000400000001050000000800000000000000000000030000000001000000020000000400"/83, @ANYRES64=r0], 0x0, 0x5a}, 0x28)

2m29.880481042s ago: executing program 2 (id=2175):
r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x80041) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x4]}, 0x8)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) (async)
r3 = syz_open_pts(r2, 0x101)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100))
r5 = dup3(r3, r2, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async)
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
write$UHID_INPUT(r5, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c)
syz_emit_ethernet(0x4e, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x20000000}, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000200)=0xff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r10, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x7c}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x797}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x575}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x419}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9122}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x363}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) (async)
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010180000000000008002b00000008000300", @ANYRES32=r11, @ANYRES32=r11], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x48800)

2m14.233934237s ago: executing program 33 (id=2175):
r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x80041) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x4]}, 0x8)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) (async)
r3 = syz_open_pts(r2, 0x101)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100))
r5 = dup3(r3, r2, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async)
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
write$UHID_INPUT(r5, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c)
syz_emit_ethernet(0x4e, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x20000000}, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000200)=0xff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r10, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x7c}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x797}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x575}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x419}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9122}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x363}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) (async)
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010180000000000008002b00000008000300", @ANYRES32=r11, @ANYRES32=r11], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x48800)

38.773275082s ago: executing program 3 (id=2769):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50)
close(0x3)
close(0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r3, &(0x7f0000000540)="3d422a2047adf19de706c5ac8126254788bdff06396cbbeff3b8c522108beddbbc65c484038039eacfa63fa8f4e3f3d740fea50d7f9fb68b79657887fded49c718740c99a7f3b0e58ea271af804459dca7abae9cc2bd8f88b9a4e43328444b0e3b60d71f7ab9eea4222219d17768ebe1af9c5b3df30b49ed8e0fb5e99e6769cd768dc8b316efb018121f9d92f6cb4fdac0c332822bdb41b686a356af087d000000000000", &(0x7f00000001c0)=""/171}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911003000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

38.703752692s ago: executing program 3 (id=2770):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x290a055, 0x0, 0xfd, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='mm_collapse_huge_page\x00', r2, 0x0, 0x9}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYRESOCT=r1, @ANYBLOB="4486fc", @ANYRESHEX, @ANYRES32=r1], 0x53) (async)
write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYRESOCT=r1, @ANYBLOB="4486fc", @ANYRESHEX, @ANYRES32=r1], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77020007003d", @ANYRESHEX=r1, @ANYBLOB=',k'])

38.680921406s ago: executing program 3 (id=2771):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000c0ffffff0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010100f8ffffffb702000008000301b70300000000000085000000b10000009500000000000000"], &(0x7f00000005c0)='GPL\x00'}, 0x94)

38.624424577s ago: executing program 3 (id=2772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000900000000050000000900010073797a30000000000900030073797a300000000008000a40000000020000000000000040000000120800014000000000140003006e657464657673696d30000000000000140000001100010000000000000008000000000a"], 0xa4}}, 0x0)

38.624177222s ago: executing program 3 (id=2773):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0)

38.544250048s ago: executing program 3 (id=2774):
unshare(0x22020600)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c2402080001030000fffe000924060506020100000924030001030005490c240206"], 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x96}, {0x8, 0x15, 0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048000}, 0x5)
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery')
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {<r4=>0xffffffffffffffff}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=none,noxattr,msize=0x0000000000000008,directio,privport,posixacl,cache=readahead,access=client,nodevmap,msize=0x00000000000000af,fowner>', @ANYRESDEC=r2, @ANYBLOB="2c7375626a5f747970653d2f6465762f766964656f23002c7569643e044ae0aba09f805970a56800000000f86f8bf8aca8", @ANYRESDEC=r3, @ANYBLOB=',euid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid<', @ANYRESDEC=r4, @ANYBLOB=',dont_measure,rootcontext=staff_u,\x00'])
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
pread64(r5, &(0x7f0000000180)=""/81, 0x51, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000100)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xf801}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x8004)
unshare(0x22020600) (async)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c2402080001030000fffe000924060506020100000924030001030005490c240206"], 0x0) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x96}, {0x8, 0x15, 0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048000}, 0x5) (async)
fstat(r0, &(0x7f0000000240)) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x800) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) (async)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=none,noxattr,msize=0x0000000000000008,directio,privport,posixacl,cache=readahead,access=client,nodevmap,msize=0x00000000000000af,fowner>', @ANYRESDEC=r2, @ANYBLOB="2c7375626a5f747970653d2f6465762f766964656f23002c7569643e044ae0aba09f805970a56800000000f86f8bf8aca8", @ANYRESDEC=r3, @ANYBLOB=',euid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid<', @ANYRESDEC=r4, @ANYBLOB=',dont_measure,rootcontext=staff_u,\x00']) (async)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async)
pread64(r5, &(0x7f0000000180)=""/81, 0x51, 0x300) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000100)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xf801}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x8004) (async)

22.74304111s ago: executing program 34 (id=2774):
unshare(0x22020600)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c2402080001030000fffe000924060506020100000924030001030005490c240206"], 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x96}, {0x8, 0x15, 0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048000}, 0x5)
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery')
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {<r4=>0xffffffffffffffff}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=none,noxattr,msize=0x0000000000000008,directio,privport,posixacl,cache=readahead,access=client,nodevmap,msize=0x00000000000000af,fowner>', @ANYRESDEC=r2, @ANYBLOB="2c7375626a5f747970653d2f6465762f766964656f23002c7569643e044ae0aba09f805970a56800000000f86f8bf8aca8", @ANYRESDEC=r3, @ANYBLOB=',euid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid<', @ANYRESDEC=r4, @ANYBLOB=',dont_measure,rootcontext=staff_u,\x00'])
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
pread64(r5, &(0x7f0000000180)=""/81, 0x51, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000100)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xf801}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x8004)
unshare(0x22020600) (async)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c2402080001030000fffe000924060506020100000924030001030005490c240206"], 0x0) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x96}, {0x8, 0x15, 0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048000}, 0x5) (async)
fstat(r0, &(0x7f0000000240)) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x800) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) (async)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=none,noxattr,msize=0x0000000000000008,directio,privport,posixacl,cache=readahead,access=client,nodevmap,msize=0x00000000000000af,fowner>', @ANYRESDEC=r2, @ANYBLOB="2c7375626a5f747970653d2f6465762f766964656f23002c7569643e044ae0aba09f805970a56800000000f86f8bf8aca8", @ANYRESDEC=r3, @ANYBLOB=',euid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid<', @ANYRESDEC=r4, @ANYBLOB=',dont_measure,rootcontext=staff_u,\x00']) (async)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async)
pread64(r5, &(0x7f0000000180)=""/81, 0x51, 0x300) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000100)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xf801}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x8004) (async)

17.321832287s ago: executing program 5 (id=2864):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
write$P9_RREADDIR(r3, 0x0, 0x0)
writev(r3, &(0x7f0000000c00)=[{&(0x7f0000001f40)="11f8", 0x2}], 0x1)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x-^{', 0x3a, './file0'}, 0x2e)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$FBIOBLANK(r5, 0x4611, 0x1)

17.131946624s ago: executing program 5 (id=2866):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0)
pwritev2(r2, &(0x7f0000000280)=[{&(0x7f0000000540)="8af3d6024af9f498e316f6f4", 0xc}], 0x1, 0x540f, 0x725, 0x8)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r6=>0x0})
sendto$packet(r3, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r6, 0x8, 0x1, 0x14000000, 0x7, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x62, 0x3, 0x1, [{@broadcast, 0x7}, {@local, 0x1000}, {@multicast1, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xa00}, {@multicast1, 0x7}]}, @noop, @ssrr={0x89, 0x7, 0xbe, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0xfc, [@local, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x8, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010101, 0xee7e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x80000000}, {@empty, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x8, [{@empty, 0x1e31}, {@broadcast, 0xa20a}]}]}}}}})
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02)

16.768908834s ago: executing program 5 (id=2867):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x30, 0x7}, @typedef={0x10}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @restrict={0xf, 0x0, 0x0, 0xb, 0x2}, @fwd={0x5}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x9}, @enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x9, 0x80000001, 0x6}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1ff, [{0x6, 0x0, 0x7}]}, @enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0xe, [{0x4, 0x4, 0x3}]}]}, {0x0, [0x2e]}}, &(0x7f0000000400)=""/112, 0xb3, 0x70, 0x1, 0x4, 0x10000}, 0x28)
r1 = dup2(r0, r0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg2\x00', <r2=>0x0}) (rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x33e0, 0xda8, 0x0, 0x40, r1, 0xffff, '\x00', r2, r0, 0x5, 0x5, 0x5, 0x6}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000340), 0x0}, 0x20) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
unshare(0x28000600)
r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
fcntl$lock(r5, 0x5, 0x0) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r6)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) (async)
sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x1) (async)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) (async)
writev(r8, &(0x7f0000000100)=[{&(0x7f00000002c0)="946069ec569272486ac78844c8eeac36eda8524c4681e9f5b2c1a671cffc3e0cf35c326b837c990ca057afc4938c99cfdf59a615026e2e6df63ee81e0c7b48babe408d6a14171c538181d65c8cae2ebe89b6d583e639a9d80d256561fef9f242da9504050e395170b7a2d5f7ff59450f6f568b", 0x73}], 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0\x00', <r9=>0x0}) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r10, 0x0, 0x11, &(0x7f0000000000)="d18950ac66a207a8e8dded94775de2762d86a728d034a132e014f88858232b1f83465adec0a6a2840cd81b000b9539e5f9ab52662f9bb3d14e4401c5fb87ed64dbe3f40314d296195fdd5d8851ce7303a99c57999f38b9be7ec5225a2cefbbb9169e6d5e3a2dfedd529f69052dfb1c1f412f6a1bdf99b29018a9e63015eb3b50f272781dff5877a5e374fd010857ce8a715e4231da4629e95732cd8294dd2ba6d1551daccf7526d8d2dab32c1228504cd76e500fab773f1749c07d0d909d8b14ca1cef0b47e2aeab25003b2360764ace1a088a3bcda118886a22ad7017", 0xdd)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000015001d042dbd7000fbdbdf25020020c854c691213cc527b53bdb481407c68b8914e109a8a590e72c85efe68b49a39c375dddb14cbbe38cc7ecc1fa5d588fb8b4c7acb83eb68e5ad2f3c9125151056a9af753099794fd642b417d104711cd8f03215e6460badf34", @ANYRES32=r9, @ANYBLOB="14000340766c616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)

16.649939139s ago: executing program 5 (id=2868):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000024000080bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadcb74220e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807909727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d658eec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3d1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cb471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7ff40007ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e64dcb0d0d57d5aeae626d2700608bb283800000000008a4c26b16213f0d9d7c3c57413b1e5895c9c12259519274ca8fd3bce804c8176a297f28add10956f3aaa3db687abcc17d326fd3674b7680206e875332b82c1de5ff793f6971d98c787c6daef28f66b542f08eeb6c82fbe03a3dc625bddf98d2a200c94065db5d5414361a785ff39392d9b1c870d8a2287af0ee98231100efa30652f2dd84da00970b5d209c623b26770258fcf63690f17cce7a78aeba7f6cbc4c143f48b1d0a10afdc93eaaff72e6622fd4da72ca7b30cd30b568599a6b44a2dee51985d802ed8088391a6717c4d97"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x3)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xda18, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x0, 0x0, 0x3, {[@mptcp=@syn={0x1e, 0xc, 0xf, 0x1, 0x9, 0x6, 0x7f}, @exp_smc, @mss={0x2, 0x4}, @sack={0x5, 0x2}, @exp_fastopen={0xfe, 0x13, 0xf989, "e2ac840ffb8dff845cd9d0ec1d7385"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x6, [0x4]}, @exp_fastopen={0xfe, 0xfe6d}]}}}}}}}, 0x0)
sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff0060031200000088fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904"], 0x0)

15.38198317s ago: executing program 5 (id=2874):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x8)
openat$cgroup_pressure(r4, &(0x7f0000000200)='io.pressure\x00', 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x2c, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @tail_call, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x4d, &(0x7f0000000140)=""/77, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x134, 0x3dbf}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x4, 0x1, 0x0, 0x5}, {0x4, 0x1, 0xd, 0x2}, {0x2, 0x3, 0x4, 0x9}, {0x4, 0x3, 0xb, 0x7}, {0x5, 0x2, 0xb, 0x6}], 0x10, 0xffffff27}, 0x94)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@setlink={0x80, 0x13, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x2010, 0x60e12}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_MTU={0x8, 0x4, 0xff}, @IFLA_ADDRESS={0xa}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8}]}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x80}}, 0x0)

15.381564669s ago: executing program 5 (id=2875):
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

3.730815618s ago: executing program 1 (id=2936):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000048000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.729079057s ago: executing program 1 (id=2937):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002185000000850a62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede0b47e356248835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c42a9fd97b34d82c413c60118ad8a7b46323d1f26161c2585465e3c686fd889c2e4d36a95cd81", @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x4a, 0xaf, 0x36, 0x20, 0x572, 0x58a5, 0x270a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x9, 0x1, 0xa3, 0x7d, 0x7e, 0x3, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x4, 0x1, [@generic={0x8, 0xb, "906db7cfad36"}]}}]}}]}}]}}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x98, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x67}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffe}]}]}]}, 0x98}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20050800)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r5=>0x0], &(0x7f0000000340)=[<r6=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) (async, rerun: 64)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000240)={0x0, 0x0, 0x0}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000180), 0xfefc) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r8, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2015bc0300000054"], 0x0, 0x0, 0x0, 0x0}) (rerun: 64)

687.990714ms ago: executing program 1 (id=2949):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000002042000000000000000000001050000000800000000001000000000030000000001000000020000000400"/83, @ANYRES64=r0], 0x0, 0x5a}, 0x28)

639.308265ms ago: executing program 1 (id=2951):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1b, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x7, 0x0, 0xa, 0x2, 0x2, 0x80, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x25, 0x17, &(0x7f0000000240)=""/23, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x4, 0x1d}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r0, r0, r0], &(0x7f0000000440)=[{0x3, 0x1, 0x10, 0x9}, {0x4, 0x5, 0x1, 0x8}, {0x3, 0x3, 0x8, 0x2}], 0x10, 0x4}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1b, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x7, 0x0, 0xa, 0x2, 0x2, 0x80, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x25, 0x17, &(0x7f0000000240)=""/23, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x4, 0x1d}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r0, r0, r0], &(0x7f0000000440)=[{0x3, 0x1, 0x10, 0x9}, {0x4, 0x5, 0x1, 0x8}, {0x3, 0x3, 0x8, 0x2}], 0x10, 0x4}, 0x94) (async)

564.10305ms ago: executing program 1 (id=2953):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

450.404122ms ago: executing program 1 (id=2954):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x33ebda})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x4, 0x382fbf})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r8})
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x62302)
r9 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r12, 0xc0405668, &(0x7f0000000100)={0x0, 0x2, 0x8})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r9, 0x26c8, 0x0, 0x1, 0x0, 0x10)
ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r8})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r7, 0x3b70, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x3bb835, 0x1f0b6e})

359.749266ms ago: executing program 35 (id=2875):
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

210.898326ms ago: executing program 4 (id=2959):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000ff9000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

210.589652ms ago: executing program 4 (id=2960):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x5, 0x4)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ftruncate(r3, 0x80000000)

150.355645ms ago: executing program 4 (id=2961):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

148.141231ms ago: executing program 4 (id=2962):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

71.201859ms ago: executing program 4 (id=2963):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000fffff030000000001000000020000000400"/83, @ANYRES64=r1], 0x0, 0x5a}, 0x28)

0s ago: executing program 4 (id=2964):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
listen(r0, 0x3)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./bus\x00', 0x2000040, &(0x7f0000000140)={[{@atgc}, {@test_dummy_encryption}, {@test_dummy_encryption}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0xc}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x0, 0x105ab, &(0x7f000003f380)="$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")

kernel console output (not intermixed with test programs):

th error -2
[  595.648641][T12959] netlink: 'syz.3.2443': attribute type 9 has an invalid length.
[  595.655932][ T5909] usb 4-1: USB disconnect, device number 39
[  595.766933][ T5987] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  595.787478][ T5987] usb 2-1: device descriptor read/8, error -71
[  595.940534][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.033487][ T5987] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  596.057799][ T5987] usb 2-1: device descriptor read/8, error -71
[  596.172633][ T5987] usb usb2-port1: unable to enumerate USB device
[  596.516965][ T5987] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  596.578550][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.586994][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.679330][ T5987] usb 4-1: Using ep0 maxpacket: 32
[  596.688623][ T5987] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  596.692378][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.701910][ T5987] usb 4-1: config 0 descriptor??
[  596.716931][ T5987] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  597.536996][ T5914] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  597.689930][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.693761][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  597.698630][ T5914] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  597.702098][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.707184][ T5914] usb 5-1: config 0 descriptor??
[  597.857793][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.986898][ T5909] usb 2-1: new full-speed USB device number 93 using dummy_hcd
[  598.140445][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short
[  598.143813][ T5909] usb 2-1: not running at top speed; connect to a high speed hub
[  598.151197][ T5909] usb 2-1: config 1 interface 0 has no altsetting 0
[  598.155877][ T5909] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40
[  598.159068][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.161489][ T5909] usb 2-1: Product: syz
[  598.162819][ T5909] usb 2-1: Manufacturer: syz
[  598.164501][ T5909] usb 2-1: SerialNumber: syz
[  598.380130][ T5909] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input28
[  598.387186][ T5281] bcm5974 2-1:1.0: could not read from device
[  598.391011][ T5281] bcm5974 2-1:1.0: could not read from device
[  598.394139][ T5909] usb 2-1: USB disconnect, device number 93
[  598.500574][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.547915][ T5987] gspca_vc032x: reg_r err -71
[  598.552383][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.554411][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.556138][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.558605][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.561000][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.562953][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.564641][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.566827][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.568849][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.573432][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.575488][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.578363][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.580523][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.582406][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.584467][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.586316][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.588663][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.590637][ T5987] gspca_vc032x: I2c Bus Busy Wait 00
[  598.592378][ T5987] gspca_vc032x: Unknown sensor...
[  598.594010][ T5987] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  598.599840][ T5987] usb 4-1: USB disconnect, device number 40
[  598.614025][ T5914] uclogic 0003:256C:006D.003D: failed retrieving Huion firmware version: -71
[  598.619075][ T5914] uclogic 0003:256C:006D.003D: failed probing parameters: -71
[  598.621910][ T5914] uclogic 0003:256C:006D.003D: probe with driver uclogic failed with error -71
[  598.629350][ T5914] usb 5-1: USB disconnect, device number 17
[  598.933159][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.936447][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.939578][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.942616][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.946778][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.950404][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.953793][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.957368][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.960715][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.963969][T12977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'.
[  598.977779][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.094287][T12981] netlink: 'syz.3.2450': attribute type 5 has an invalid length.
[  599.112965][T12981] netlink: 'syz.3.2450': attribute type 10 has an invalid length.
[  599.122978][T12981] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  599.141478][T12981] bond0: entered promiscuous mode
[  599.143770][T12981] bond_slave_0: entered promiscuous mode
[  599.151089][T12981] bond_slave_1: entered promiscuous mode
[  599.406881][ T5914] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  599.446891][ T5909] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  599.559838][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  599.562888][ T5914] usb 5-1: config 0 has no interface number 0
[  599.568538][ T5914] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  599.571651][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.574814][ T5914] usb 5-1: Product: syz
[  599.576349][ T5914] usb 5-1: Manufacturer: syz
[  599.579194][ T5914] usb 5-1: SerialNumber: syz
[  599.583057][ T5914] usb 5-1: config 0 descriptor??
[  599.606941][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  599.611614][ T5909] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  599.614735][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.618718][ T5909] usb 4-1: config 0 has no interface number 0
[  599.621238][ T5909] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  599.626306][ T5909] usb 4-1: config 0 interface 184 has no altsetting 0
[  599.632967][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  599.636590][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.639735][ T5909] usb 4-1: Product: syz
[  599.641583][ T5909] usb 4-1: Manufacturer: syz
[  599.643477][ T5909] usb 4-1: SerialNumber: syz
[  599.648135][ T5909] usb 4-1: config 0 descriptor??
[  599.653624][ T5909] smsc75xx v1.0.0
[  599.655283][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  599.661287][ T5909] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22
[  599.789894][ T5914] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  599.795620][ T5914] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  599.800025][ T5914] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  599.860274][ T5987] usb 4-1: USB disconnect, device number 41
[  599.994680][   T33] kauditd_printk_skb: 274 callbacks suppressed
[  599.994694][   T33] audit: type=1326 audit(1758006054.224:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.004594][   T33] audit: type=1326 audit(1758006054.234:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.013427][   T33] audit: type=1326 audit(1758006054.234:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.022286][   T33] audit: type=1326 audit(1758006054.234:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.029924][   T33] audit: type=1326 audit(1758006054.234:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.039480][   T33] audit: type=1326 audit(1758006054.254:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.048266][   T33] audit: type=1326 audit(1758006054.254:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.055332][   T33] audit: type=1326 audit(1758006054.254:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.062509][   T33] audit: type=1326 audit(1758006054.254:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.070436][   T33] audit: type=1326 audit(1758006054.254:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7ffc0000
[  600.445619][T12992] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.449442][T12992] FAT-fs (loop3): unable to read boot sector
[  600.856959][ T5909] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  601.006706][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  601.041156][ T5909] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  601.045363][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.057524][ T5909] usb 4-1: config 0 descriptor??
[  601.059017][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.061864][ T5909] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  601.710946][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.337638][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.341942][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.539729][T13029] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  602.544100][T13029] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  602.548768][T13029] Mount JFS Failure: -5
[  602.550260][T13029] jfs_mount failed w/return code = -5
[  602.822939][T13045] bridge6: entered promiscuous mode
[  602.828380][T13045] netlink: 'syz.1.2473': attribute type 11 has an invalid length.
[  602.896948][T13003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.902940][T13003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.908276][ T5909] gspca_vc032x: reg_r err -71
[  602.909985][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.918237][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.920303][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.922030][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.923707][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.925373][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.926069][T13052] netlink: 'syz.1.2475': attribute type 29 has an invalid length.
[  602.927691][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.932542][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.933551][T13052] netlink: 'syz.1.2475': attribute type 29 has an invalid length.
[  602.934213][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.934222][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.943963][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.946152][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.948512][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.950373][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.952491][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.955293][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.958980][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.961249][ T5909] gspca_vc032x: I2c Bus Busy Wait 00
[  602.963074][ T5909] gspca_vc032x: Unknown sensor...
[  602.964876][ T5909] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  602.969680][ T5909] usb 4-1: USB disconnect, device number 42
[  602.979309][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.268521][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.721118][T13072] XFS (loop3): sunit and swidth must be specified together
[  605.426880][T13095] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  605.429538][T13095] macsec4: entered promiscuous mode
[  605.434689][T13095] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  605.590519][T13104] __nla_validate_parse: 68 callbacks suppressed
[  605.590532][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2495'.
[  605.595696][T13104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2495'.
[  605.814245][T13123] dummy0: entered promiscuous mode
[  605.818908][T13123] dummy0: entered allmulticast mode
[  605.857994][T13123] IPVS: Scheduler module ip_vs_sip not found
[  605.888699][ T5909] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  606.058647][ T5909] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  606.061273][ T5909] usb 4-1: config 1 has no interface number 0
[  606.063264][ T5909] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 80, setting to 64
[  606.066867][ T5909] usb 4-1: config 1 interface 105 has no altsetting 0
[  606.070963][ T5909] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  606.074233][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.077085][ T5909] usb 4-1: Product: syz
[  606.078471][ T5909] usb 4-1: Manufacturer: syz
[  606.079946][ T5909] usb 4-1: SerialNumber: syz
[  606.084396][T13109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  606.107767][   T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  606.188743][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.270478][   T24] usb 2-1: Using ep0 maxpacket: 16
[  606.275526][   T24] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  606.278874][   T24] usb 2-1: config 0 has no interface number 0
[  606.281470][   T24] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  606.285915][   T24] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  606.292842][T13110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  606.298122][   T24] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  606.301294][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.303860][   T24] usb 2-1: Product: syz
[  606.305130][   T24] usb 2-1: Manufacturer: syz
[  606.306807][   T24] usb 2-1: SerialNumber: syz
[  606.310467][   T24] usb 2-1: config 0 descriptor??
[  606.318489][   T24] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  606.498747][ T5909] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  606.500152][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.508076][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.512367][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.516261][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.532482][   T24] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[  606.541193][ T5909] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  606.551311][   T24] usb 2-1: USB disconnect, device number 94
[  606.572666][ T5909] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ca:14:d8:cd:45:40
[  606.579199][   T24] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  606.583630][   T24] cypress_m8 2-1:0.35: device disconnected
[  606.594474][T13132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2504'.
[  606.600222][ T5909] usb 4-1: USB disconnect, device number 43
[  606.609605][ T5909] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  606.648663][ T5909] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  606.654591][ T5909] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  606.658950][ T5909] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  606.817793][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.822663][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.386968][ T5909] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[  607.458108][  T261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.549377][ T5909] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  607.552365][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  607.566356][ T5909] usb 2-1: config 0 has no interface number 0
[  607.568667][ T5909] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 25204, setting to 64
[  607.572541][ T5909] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  607.577337][ T5909] usb 2-1: config 0 interface 52 has no altsetting 0
[  607.583975][ T5909] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  607.588372][ T5909] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  607.590977][ T5909] usb 2-1: Product: syz
[  607.592749][ T5909] usb 2-1: Manufacturer: syz
[  607.594690][ T5909] usb 2-1: SerialNumber: syz
[  607.598312][ T5909] usb 2-1: config 0 descriptor??
[  607.652663][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2511'.
[  607.878876][ T5909] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input29
[  608.020139][T13155] netlink: 'syz.3.2513': attribute type 63 has an invalid length.
[  608.098474][  T261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.364537][T13170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2518'.
[  608.518191][ T5987] usb 2-1: USB disconnect, device number 95
[  608.518237][    C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  608.566058][T13177] netlink: 'syz.1.2521': attribute type 63 has an invalid length.
[  608.737895][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.181010][T13193] netlink: 'syz.1.2528': attribute type 63 has an invalid length.
[  609.297419][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.340773][T13199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2530'.
[  609.377665][  T215] block nbd3: Possible stuck request ffff8880217a8000: control (read@0,1024B). Runtime 60 seconds
[  609.382154][  T215] block nbd3: Possible stuck request ffff8880217a8200: control (read@1024,1024B). Runtime 60 seconds
[  609.387391][  T215] block nbd3: Possible stuck request ffff8880217a8400: control (read@2048,1024B). Runtime 60 seconds
[  609.391858][  T215] block nbd3: Possible stuck request ffff8880217a8600: control (read@3072,1024B). Runtime 60 seconds
[  609.427364][T13201] xt_HMARK: spi-set and port-set can't be combined
[  609.433775][T13201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  609.436821][T13201] IPv6: NLM_F_CREATE should be set when creating new route
[  609.457012][ T5987] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  609.563683][T13197] f2fs: Unknown parameter 'noliscard'
[  609.617119][ T5987] usb 2-1: Using ep0 maxpacket: 8
[  609.621421][ T5987] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  609.624815][ T5987] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  609.628296][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  609.632009][ T5987] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  609.636410][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB
[  609.641708][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 239, changing to 11
[  609.646169][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 34725, setting to 1024
[  609.651590][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  609.660260][ T5987] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  609.663927][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.667297][ T5987] usb 2-1: Product: syz
[  609.669009][ T5987] usb 2-1: Manufacturer: syz
[  609.670899][ T5987] usb 2-1: SerialNumber: syz
[  609.675360][ T5987] usb 2-1: config 0 descriptor??
[  609.678687][T13195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  609.683193][ T5987] hub 2-1:0.0: bad descriptor, ignoring hub
[  609.685784][ T5987] hub 2-1:0.0: probe with driver hub failed with error -5
[  609.766759][    T9] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  609.921023][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  609.924279][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.927180][    T9] usb 4-1: Product: syz
[  609.928550][    T9] usb 4-1: Manufacturer: syz
[  609.930005][    T9] usb 4-1: SerialNumber: syz
[  609.933277][    T9] usb 4-1: config 0 descriptor??
[  609.987043][   T47] usb 2-1: USB disconnect, device number 96
[  610.140115][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  610.519169][T13218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2538'.
[  610.826444][T13228] netlink: 'syz.1.2543': attribute type 63 has an invalid length.
[  611.405169][T13245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2549'.
[  611.411619][T13245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2549'.
[  611.697091][ T5909] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[  611.752119][    T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  611.759605][    T9] usb 4-1: USB disconnect, device number 44
[  611.848853][ T5909] usb 2-1: config 5 has an invalid interface number: 179 but max is 0
[  611.852213][ T5909] usb 2-1: config 5 has no interface number 0
[  611.858076][ T5909] usb 2-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice= e.8c
[  611.862004][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.865517][ T5909] usb 2-1: Product: syz
[  611.868370][ T5909] usb 2-1: Manufacturer: syz
[  611.870351][ T5909] usb 2-1: SerialNumber: syz
[  611.947611][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.083491][ T5909] usb 2-1: bad CDC descriptors
[  612.088757][ T5909] usb 2-1: USB disconnect, device number 97
[  612.292183][T13250] netlink: 'syz.3.2551': attribute type 63 has an invalid length.
[  612.579659][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.583269][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.856900][ T5909] usb 2-1: new full-speed USB device number 98 using dummy_hcd
[  613.010246][ T5909] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  613.014299][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0
[  613.016472][ T5909] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  613.019875][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.024180][ T5909] usb 2-1: config 0 descriptor??
[  613.147122][    T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  613.217283][   T54] block nbd2: Possible stuck request ffff888021778000: control (read@0,1024B). Runtime 120 seconds
[  613.217859][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.220999][   T54] block nbd2: Possible stuck request ffff888021778200: control (read@1024,1024B). Runtime 120 seconds
[  613.228208][   T54] block nbd2: Possible stuck request ffff888021778400: control (read@2048,1024B). Runtime 120 seconds
[  613.232402][   T54] block nbd2: Possible stuck request ffff888021778600: control (read@3072,1024B). Runtime 120 seconds
[  613.296895][    T9] usb 4-1: Using ep0 maxpacket: 32
[  613.302828][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.309569][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  613.313543][    T9] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00
[  613.318650][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.326019][    T9] usb 4-1: config 0 descriptor??
[  613.444271][ T5909] usbhid 2-1:0.0: can't add hid device: -71
[  613.447331][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  613.454379][ T5909] usb 2-1: USB disconnect, device number 98
[  613.859563][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.884954][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.888649][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.903806][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  613.906113][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  613.920777][    T9] usb 4-1: USB disconnect, device number 45
[  614.256773][ T5876] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  614.471580][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  614.478574][ T5876] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[  614.482038][ T5876] usb 2-1: config 0 has no interface number 0
[  614.484523][ T5876] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  614.493620][ T5876] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  614.500528][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.506179][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.508491][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.509630][ T5876] usb 2-1: Product: syz
[  614.514810][ T5876] usb 2-1: Manufacturer: syz
[  614.517159][ T5876] usb 2-1: SerialNumber: syz
[  614.520960][ T5876] usb 2-1: config 0 descriptor??
[  614.538481][ T5876] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  614.737033][T13270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.749715][T13270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.754045][   T12] usb 2-1: Failed to submit usb control message: -71
[  614.758527][ T5876] usb 2-1: USB disconnect, device number 99
[  614.770827][   T12] usb 2-1: unable to send the bmi data to the device: -71
[  614.774022][   T12] usb 2-1: unable to get target info from device
[  614.779796][   T12] usb 2-1: could not get target info (-71)
[  614.782227][   T12] usb 2-1: could not probe fw (-71)
[  614.849970][T13272] XFS (loop3): sunit and swidth must be specified together
[  614.894014][T13277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2562'.
[  614.902626][T13277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.905949][T13277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.912519][T13277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.915481][T13277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.137388][   T54] block nbd4: Possible stuck request ffff888021810000: control (read@0,1024B). Runtime 30 seconds
[  615.141790][   T54] block nbd4: Possible stuck request ffff888021810200: control (read@1024,1024B). Runtime 30 seconds
[  615.146008][   T54] block nbd4: Possible stuck request ffff888021810400: control (read@2048,1024B). Runtime 30 seconds
[  615.152127][   T54] block nbd4: Possible stuck request ffff888021810600: control (read@3072,1024B). Runtime 30 seconds
[  615.360808][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'.
[  615.890271][T13302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2570'.
[  616.340682][T13308] netlink: 'syz.4.2573': attribute type 29 has an invalid length.
[  616.354547][T13308] netlink: 'syz.4.2573': attribute type 29 has an invalid length.
[  616.360109][T13308] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2573'.
[  616.566381][T13317] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2578'.
[  616.573115][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2578'.
[  616.576889][T13318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2577'.
[  616.644933][T13325] netlink: 'syz.1.2581': attribute type 1 has an invalid length.
[  616.649827][T13325] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2581'.
[  616.697404][T13329] netlink: 'syz.3.2582': attribute type 29 has an invalid length.
[  616.701633][T13329] netlink: 'syz.3.2582': attribute type 29 has an invalid length.
[  616.706300][T13329] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2582'.
[  616.716388][T13331] 9pnet_fd: Insufficient options for proto=fd
[  616.783465][T13335] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  616.791462][T13335] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8)
[  616.793510][T13335] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  616.807963][T13335] vhci_hcd vhci_hcd.0: Device attached
[  616.811667][T13335] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10)
[  616.813776][T13335] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  616.820891][T13335] vhci_hcd vhci_hcd.0: Device attached
[  616.825617][T13335] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12)
[  616.825677][T13343] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[  616.828011][T13335] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  616.836100][T13335] vhci_hcd vhci_hcd.0: Device attached
[  616.841374][T13335] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  616.919413][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2589'.
[  616.986689][   T47] vhci_hcd: vhci_device speed not set
[  617.047298][   T47] usb 41-2: new full-speed USB device number 2 using vhci_hcd
[  617.236480][T13360] XFS (loop3): sunit and swidth must be specified together
[  617.242280][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'.
[  617.265599][T13365] netlink: 'syz.3.2595': attribute type 29 has an invalid length.
[  617.269585][T13365] netlink: 'syz.3.2595': attribute type 29 has an invalid length.
[  617.274085][T13365] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2595'.
[  617.461796][T13378] netlink: 'syz.3.2601': attribute type 63 has an invalid length.
[  617.676748][ T5876] usb 2-1: new full-speed USB device number 100 using dummy_hcd
[  617.698378][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.830961][ T5876] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  617.834116][ T5876] usb 2-1: config 0 has an invalid interface number: 4 but max is 2
[  617.837070][ T5876] usb 2-1: config 0 has no interface number 0
[  617.839376][ T5876] usb 2-1: config 0 has no interface number 1
[  617.841837][ T5876] usb 2-1: too many endpoints for config 0 interface 4 altsetting 255: 255, using maximum allowed: 30
[  617.850489][ T5876] usb 2-1: config 0 interface 4 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  617.855767][ T5876] usb 2-1: config 0 interface 4 has no altsetting 0
[  617.862482][ T5876] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  617.865556][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.877637][ T5876] usb 2-1: config 0 descriptor??
[  617.966722][   T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  618.108660][ T5876] usb 2-1: Could not set interface, error -71
[  618.114735][ T5876] usb 2-1: selecting invalid altsetting 0
[  618.126660][ T5876] usb 2-1: Could not set interface, error -22
[  618.126792][   T24] usb 4-1: Using ep0 maxpacket: 16
[  618.131826][ T5876] usb 2-1: USB disconnect, device number 100
[  618.139176][   T24] usb 4-1: config 192 has no interfaces?
[  618.141634][   T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  618.145139][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.339489][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.339812][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.700755][T13389] netlink: 'syz.1.2604': attribute type 29 has an invalid length.
[  618.706981][T13389] netlink: 'syz.1.2604': attribute type 29 has an invalid length.
[  618.710857][T13389] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2604'.
[  618.989121][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.619391][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.822846][T13345] vhci_hcd: connection closed
[  619.825944][T13336] vhci_hcd: connection reset by peer
[  619.829379][T13338] vhci_hcd: connection closed
[  619.832482][T10247] vhci_hcd: stop threads
[  619.838460][T10247] vhci_hcd: release socket
[  619.851708][T10247] vhci_hcd: disconnect device
[  619.855694][T10247] vhci_hcd: stop threads
[  619.872148][T10247] vhci_hcd: release socket
[  619.875188][T10247] vhci_hcd: disconnect device
[  619.877189][T10247] vhci_hcd: stop threads
[  619.878509][T10247] vhci_hcd: release socket
[  619.879985][T10247] vhci_hcd: disconnect device
[  619.944488][T13408] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2612'.
[  620.258575][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.264294][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.536255][   T24] usb 4-1: string descriptor 0 read error: -71
[  620.559522][   T24] usb 4-1: USB disconnect, device number 46
[  621.046720][   T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  621.204685][   T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  621.208732][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.212187][   T24] usb 4-1: Product: syz
[  621.214053][   T24] usb 4-1: Manufacturer: syz
[  621.216000][   T24] usb 4-1: SerialNumber: syz
[  621.907394][T13416] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  621.909629][T13416] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  621.917467][T13416] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  621.921011][T13416] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  621.925094][T13416] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  622.015721][T13421] validate_nla: 2 callbacks suppressed
[  622.015749][T13421] netlink: 'syz.1.2618': attribute type 63 has an invalid length.
[  622.126729][T13423] nbd6: detected capacity change from 0 to 127
[  622.167213][   T47] vhci_hcd: vhci_device speed not set
[  622.181592][   T54] block nbd5: Possible stuck request ffff888021848000: control (read@0,1024B). Runtime 30 seconds
[  622.185743][   T54] block nbd5: Possible stuck request ffff888021848200: control (read@1024,1024B). Runtime 30 seconds
[  622.190105][   T54] block nbd5: Possible stuck request ffff888021848400: control (read@2048,1024B). Runtime 30 seconds
[  622.193708][   T54] block nbd5: Possible stuck request ffff888021848600: control (read@3072,1024B). Runtime 30 seconds
[  622.652213][   T58] block nbd6: Receive control failed (result -104)
[  623.136830][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout
[  623.251279][T13412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.261498][T13412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.457793][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.462391][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.678410][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO
[  623.683201][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  623.687478][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  623.691874][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  623.697590][   T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  623.706053][   T24] usb 4-1: USB disconnect, device number 47
[  623.936691][ T5237] Bluetooth: hci3: command 0x0c1a tx timeout
[  624.100116][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  624.102578][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  624.105770][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.266091][T13455] use of bytesused == 0 is deprecated and will be removed in the future,
[  624.272694][T13455] use the actual size instead.
[  624.321033][T13461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2631'.
[  624.737787][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.743247][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.820168][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.823120][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.216812][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout
[  625.331265][T13485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2639'.
[  625.377975][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.017273][ T5237] Bluetooth: hci3: command 0x0c1a tx timeout
[  626.017539][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.095718][T13512] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  626.780096][T13525] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  626.783082][T13525] XFS (loop4): SB validate failed with error -5.
[  626.946941][   T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  627.088559][T13544] netlink: 'syz.3.2659': attribute type 63 has an invalid length.
[  627.120282][T13546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2660'.
[  627.122711][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  627.125908][   T24] usb 2-1: can't read configurations, error -61
[  627.267674][   T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  627.438841][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  627.441886][   T24] usb 2-1: can't read configurations, error -61
[  627.444826][   T24] usb usb2-port1: attempt power cycle
[  627.796770][   T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  627.821824][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  627.824652][   T24] usb 2-1: can't read configurations, error -61
[  627.957701][   T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  627.989191][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  627.992188][   T24] usb 2-1: can't read configurations, error -61
[  627.995282][   T24] usb usb2-port1: unable to enumerate USB device
[  628.097478][ T5237] Bluetooth: hci3: command 0x0c1a tx timeout
[  628.486926][   T24] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  628.617225][   T24] usb 4-1: device descriptor read/64, error -71
[  628.856778][   T24] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  628.986818][   T24] usb 4-1: device descriptor read/64, error -71
[  629.107365][   T24] usb usb4-port1: attempt power cycle
[  629.229202][  T261] net_ratelimit: 1 callbacks suppressed
[  629.229221][  T261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.229794][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.466939][   T24] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  629.490002][   T24] usb 4-1: device descriptor read/8, error -71
[  629.520665][T13561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  629.526350][T13561] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8)
[  629.528864][T13561] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  629.536197][T13561] vhci_hcd vhci_hcd.0: Device attached
[  629.544298][T13561] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10)
[  629.546792][T13561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  629.550769][T13561] vhci_hcd vhci_hcd.0: Device attached
[  629.553546][T13561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  629.564440][ T5237] Bluetooth: hci3: unexpected event for opcode 0x200a
[  629.571760][T13564] vhci_hcd: connection closed
[  629.572054][T13562] vhci_hcd: connection closed
[  629.574285][T10247] vhci_hcd: stop threads
[  629.578071][T10247] vhci_hcd: release socket
[  629.579952][T10247] vhci_hcd: disconnect device
[  629.582177][T10247] vhci_hcd: stop threads
[  629.583893][T10247] vhci_hcd: release socket
[  629.585574][T10247] vhci_hcd: disconnect device
[  629.746655][   T24] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  629.767457][   T24] usb 4-1: device descriptor read/8, error -71
[  629.857975][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.861939][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.867344][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.886946][   T24] usb usb4-port1: unable to enumerate USB device
[  630.105038][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'.
[  630.986873][ T5876] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  631.138673][  T261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.140947][ T5876] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  631.145451][ T5876] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  631.150159][ T5876] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  631.153066][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.163417][T13587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  631.170719][ T5876] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  631.400556][   T47] usb 2-1: USB disconnect, device number 105
[  631.656855][ T5876] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  631.778081][  T261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.808979][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  631.812258][ T5876] usb 4-1: not running at top speed; connect to a high speed hub
[  631.815289][ T5876] usb 4-1: too many configurations: 167, using maximum allowed: 8
[  631.820740][ T5876] usb 4-1: unable to read config index 0 descriptor/start: -61
[  631.823909][ T5876] usb 4-1: can't read configurations, error -61
[  631.956719][ T5876] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  632.119160][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  632.122119][ T5876] usb 4-1: not running at top speed; connect to a high speed hub
[  632.124716][ T5876] usb 4-1: too many configurations: 167, using maximum allowed: 8
[  632.129266][T13596] Invalid ELF header type: 3 != 1
[  632.129901][ T5876] usb 4-1: unable to read config index 0 descriptor/start: -61
[  632.134612][ T5876] usb 4-1: can't read configurations, error -61
[  632.138159][ T5876] usb usb4-port1: attempt power cycle
[  632.141396][T13596] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  632.254869][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  632.254881][   T33] audit: type=1800 audit(1758006086.484:545): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2678" name="file1" dev="tmpfs" ino=4927 res=0 errno=0
[  632.329448][T13600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2678'.
[  632.486693][ T5876] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  632.520141][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  632.523996][ T5876] usb 4-1: not running at top speed; connect to a high speed hub
[  632.527283][ T5876] usb 4-1: too many configurations: 167, using maximum allowed: 8
[  632.532519][ T5876] usb 4-1: unable to read config index 0 descriptor/start: -61
[  632.535963][ T5876] usb 4-1: can't read configurations, error -61
[  632.666687][ T5876] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  632.689536][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  632.693502][ T5876] usb 4-1: not running at top speed; connect to a high speed hub
[  632.697930][ T5876] usb 4-1: too many configurations: 167, using maximum allowed: 8
[  632.703785][ T5876] usb 4-1: unable to read config index 0 descriptor/start: -61
[  632.706964][ T5876] usb 4-1: can't read configurations, error -61
[  632.709801][ T5876] usb usb4-port1: unable to enumerate USB device
[  632.889762][T13602] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2679'.
[  633.147581][ T5876] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  633.322575][ T5876] usb 2-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[  633.334722][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.343316][ T5876] usb 2-1: config 0 descriptor??
[  633.348516][ T5876] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[  633.560277][ T5876] gspca_sn9c20x: Write register 1000 failed -71
[  633.562341][ T5876] gspca_sn9c20x: Device initialization failed
[  633.564713][ T5876] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  633.568837][ T5876] usb 2-1: USB disconnect, device number 106
[  634.317078][T13614] nbd7: detected capacity change from 0 to 127
[  634.349984][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.897395][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.964117][   T58] block nbd7: Receive control failed (result -32)
[  634.976915][ T5876] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  634.981432][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.985488][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.989805][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.119325][ T5876] usb 4-1: device descriptor read/64, error -71
[  635.356852][ T5876] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  635.486987][ T5876] usb 4-1: device descriptor read/64, error -71
[  635.496730][   T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  635.599442][ T5876] usb usb4-port1: attempt power cycle
[  635.657096][   T24] usb 2-1: Using ep0 maxpacket: 8
[  635.660784][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  635.664223][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  635.668625][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  635.672027][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  635.675010][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  635.678117][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  635.681226][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  635.684277][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  635.689293][   T24] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  635.692260][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.694740][   T24] usb 2-1: Product: syz
[  635.696048][   T24] usb 2-1: Manufacturer: syz
[  635.697735][   T24] usb 2-1: SerialNumber: syz
[  635.700562][   T24] usb 2-1: config 0 descriptor??
[  635.703366][T13658] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  635.707829][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  635.726946][   T24] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12
[  635.936833][ T5876] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  635.959709][ T5876] usb 4-1: device descriptor read/8, error -71
[  636.196748][ T5876] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  636.218557][ T5876] usb 4-1: device descriptor read/8, error -71
[  636.327654][ T5876] usb usb4-port1: unable to enumerate USB device
[  636.904717][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.262265][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2694'.
[  637.537625][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.724147][T13691] smc: adding net device syzkaller0 with user defined pnetid SYZ1
[  638.234272][   T24] usb 2-1: USB disconnect, device number 107
[  638.414973][T13701] gtp0: entered promiscuous mode
[  638.419963][T13701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2702'.
[  638.553558][T13690] smc: removing net device syzkaller0 with user defined pnetid SYZ1
[  638.986739][ T5876] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  639.126761][ T5876] usb 4-1: device descriptor read/64, error -71
[  639.337693][T13715] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  639.366787][ T5876] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  639.462083][  T215] block nbd3: Possible stuck request ffff8880217a8000: control (read@0,1024B). Runtime 90 seconds
[  639.465436][  T215] block nbd3: Possible stuck request ffff8880217a8200: control (read@1024,1024B). Runtime 90 seconds
[  639.469796][  T215] block nbd3: Possible stuck request ffff8880217a8400: control (read@2048,1024B). Runtime 90 seconds
[  639.474155][  T215] block nbd3: Possible stuck request ffff8880217a8600: control (read@3072,1024B). Runtime 90 seconds
[  639.496680][ T5876] usb 4-1: device descriptor read/64, error -71
[  639.576736][ T5987] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  639.607057][ T5876] usb usb4-port1: attempt power cycle
[  639.730120][ T5987] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023
[  639.734495][ T5987] usb 2-1: config 1 interface 0 has no altsetting 0
[  639.740420][ T5987] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  639.744207][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.747722][ T5987] usb 2-1: Product: syz
[  639.749681][ T5987] usb 2-1: Manufacturer: syz
[  639.751682][ T5987] usb 2-1: SerialNumber: syz
[  639.756972][T13715] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  639.938305][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.956653][ T5876] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  639.963885][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.968744][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.987112][ T5876] usb 4-1: device descriptor read/8, error -71
[  640.098019][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.108624][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.112339][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.229524][ T5987] usb 2-1: USB disconnect, device number 108
[  640.256853][ T5876] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  640.277533][ T5876] usb 4-1: device descriptor read/8, error -71
[  640.397244][ T5876] usb usb4-port1: unable to enumerate USB device
[  641.003516][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.534312][T13754] netlink: 'syz.1.2723': attribute type 29 has an invalid length.
[  641.538357][T13754] netlink: 'syz.1.2723': attribute type 29 has an invalid length.
[  641.542211][T13754] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2723'.
[  641.807380][   T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  641.957099][   T24] usb 2-1: Using ep0 maxpacket: 32
[  641.969040][   T24] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  641.976998][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.980167][   T24] usb 2-1: Product: syz
[  641.981851][   T24] usb 2-1: Manufacturer: syz
[  641.986756][   T24] usb 2-1: SerialNumber: syz
[  641.996394][   T24] usb 2-1: config 0 descriptor??
[  642.002774][   T24] gspca_main: sunplus-2.14.0 probing 055f:c230
[  642.148492][T13771] XFS (loop3): sunit and swidth must be specified together
[  642.456912][   T47] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  642.597525][   T47] usb 4-1: device descriptor read/64, error -71
[  642.657266][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.836750][   T47] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  642.986660][   T47] usb 4-1: device descriptor read/64, error -71
[  643.107291][   T47] usb usb4-port1: attempt power cycle
[  643.297457][   T54] block nbd2: Possible stuck request ffff888021778000: control (read@0,1024B). Runtime 150 seconds
[  643.297915][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.301590][   T54] block nbd2: Possible stuck request ffff888021778200: control (read@1024,1024B). Runtime 150 seconds
[  643.309346][   T54] block nbd2: Possible stuck request ffff888021778400: control (read@2048,1024B). Runtime 150 seconds
[  643.313500][   T54] block nbd2: Possible stuck request ffff888021778600: control (read@3072,1024B). Runtime 150 seconds
[  643.456712][   T47] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  643.487215][   T47] usb 4-1: device descriptor read/8, error -71
[  643.736742][   T47] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  643.757467][   T47] usb 4-1: device descriptor read/8, error -71
[  643.866879][   T47] usb usb4-port1: unable to enumerate USB device
[  643.984905][   T24] gspca_sunplus: reg_r err -71
[  643.987392][   T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  643.991632][   T24] usb 2-1: USB disconnect, device number 109
[  644.362816][T13788] netlink: 'syz.1.2736': attribute type 29 has an invalid length.
[  644.369080][T13788] netlink: 'syz.1.2736': attribute type 29 has an invalid length.
[  644.372681][T13788] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2736'.
[  644.706742][   T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  644.836799][   T24] usb 2-1: device descriptor read/64, error -71
[  645.049818][T13793] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  645.077260][   T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  645.136455][T13800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2740'.
[  645.220133][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.221549][   T54] block nbd4: Possible stuck request ffff888021810000: control (read@0,1024B). Runtime 60 seconds
[  645.228067][   T54] block nbd4: Possible stuck request ffff888021810200: control (read@1024,1024B). Runtime 60 seconds
[  645.228114][   T24] usb 2-1: device descriptor read/64, error -71
[  645.232254][   T54] block nbd4: Possible stuck request ffff888021810400: control (read@2048,1024B). Runtime 60 seconds
[  645.239533][   T54] block nbd4: Possible stuck request ffff888021810600: control (read@3072,1024B). Runtime 60 seconds
[  645.380720][T13807] netlink: 'syz.3.2743': attribute type 10 has an invalid length.
[  645.381735][   T24] usb usb2-port1: attempt power cycle
[  645.385052][T13807] batman_adv: batadv0: Adding interface: wlan0
[  645.390440][T13807] batman_adv: batadv0: Interface activated: wlan0
[  645.473389][T13809] netlink: 'syz.4.2744': attribute type 29 has an invalid length.
[  645.492085][T13809] netlink: 'syz.4.2744': attribute type 29 has an invalid length.
[  645.509622][T13809] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2744'.
[  645.716980][   T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  645.739005][   T24] usb 2-1: device descriptor read/8, error -71
[  645.867016][   T47] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  645.871047][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.874381][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.875859][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.976767][   T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  645.997716][   T24] usb 2-1: device descriptor read/8, error -71
[  646.046700][   T47] usb 4-1: Using ep0 maxpacket: 32
[  646.050592][   T47] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  646.054248][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.059464][   T47] usb 4-1: config 0 descriptor??
[  646.064803][   T47] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  646.097344][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.116927][   T24] usb usb2-port1: unable to enumerate USB device
[  646.432219][   T33] audit: type=1326 audit(1758006100.664:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.441370][   T33] audit: type=1326 audit(1758006100.664:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.451552][   T33] audit: type=1326 audit(1758006100.664:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.461984][   T33] audit: type=1326 audit(1758006100.664:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.472824][   T33] audit: type=1326 audit(1758006100.664:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.481803][   T33] audit: type=1326 audit(1758006100.664:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.491109][   T33] audit: type=1326 audit(1758006100.664:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.502891][   T33] audit: type=1326 audit(1758006100.664:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.512289][   T33] audit: type=1326 audit(1758006100.664:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  646.521644][   T33] audit: type=1326 audit(1758006100.664:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  647.035485][T13818] geneve2: entered promiscuous mode
[  647.697962][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.848456][   T24] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  647.915966][   T47] gspca_vc032x: reg_r err -71
[  647.921143][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.923306][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.925399][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.929114][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.931140][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.933426][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.935465][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.939963][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.942513][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.944551][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.947541][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.949750][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.951812][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.954033][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.956149][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.961041][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.963194][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.965523][   T47] gspca_vc032x: I2c Bus Busy Wait 00
[  647.968410][   T47] gspca_vc032x: Unknown sensor...
[  647.970668][   T47] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  647.975363][   T47] usb 4-1: USB disconnect, device number 68
[  648.009733][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  648.014159][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  648.020667][   T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c23, bcdDevice= 0.00
[  648.024131][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.036152][   T24] usb 2-1: config 0 descriptor??
[  648.039567][T13843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  648.239399][T13839] f2fs: Unknown parameter 'mask'
[  648.242881][T13839] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2752'.
[  648.418753][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.450973][   T24] corsair-psu 0003:1B1C:1C23.003E: unbalanced collection at end of report description
[  648.455001][   T24] corsair-psu 0003:1B1C:1C23.003E: probe with driver corsair-psu failed with error -22
[  648.650153][T13853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.655645][T13853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.668112][ T5987] usb 2-1: USB disconnect, device number 114
[  648.846783][ T5876] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  648.998352][ T5876] usb 4-1: config index 0 descriptor too short (expected 30768, got 18)
[  649.001453][ T5876] usb 4-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  649.004626][ T5876] usb 4-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[  649.010271][ T5876] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  649.014279][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  649.018238][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.247082][ T5876] usb 4-1: string descriptor 0 read error: -71
[  649.258167][ T5876] usb 4-1: USB disconnect, device number 69
[  649.365391][T13872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.368770][T13872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.339153][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.147635][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.618198][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.622842][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.629069][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.692298][T13890] 9pnet_fd: Insufficient options for proto=fd
[  651.768577][T13895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2772'.
[  651.811157][T13897] netlink: 'syz.3.2773': attribute type 63 has an invalid length.
[  652.086729][ T5876] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  652.241900][ T5876] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  652.245850][ T5876] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  652.251984][ T5876] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  652.270716][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.274148][ T5876] usb 4-1: Product: syz
[  652.275882][ T5876] usb 4-1: Manufacturer: syz
[  652.278079][  T215] block nbd6: Possible stuck request ffff888021868000: control (read@0,1024B). Runtime 30 seconds
[  652.278089][   T54] block nbd5: Possible stuck request ffff888021848000: control (read@0,1024B). Runtime 60 seconds
[  652.281821][  T215] block nbd6: Possible stuck request ffff888021868200: control (read@1024,1024B). Runtime 30 seconds
[  652.281850][  T215] block nbd6: Possible stuck request ffff888021868400: control (read@2048,1024B). Runtime 30 seconds
[  652.281870][  T215] block nbd6: Possible stuck request ffff888021868600: control (read@3072,1024B). Runtime 30 seconds
[  652.286082][   T54] block nbd5: Possible stuck request ffff888021848200: control (read@1024,1024B). Runtime 60 seconds
[  652.286109][   T54] block nbd5: Possible stuck request ffff888021848400: control (read@2048,1024B). Runtime 60 seconds
[  652.307115][   T54] block nbd5: Possible stuck request ffff888021848600: control (read@3072,1024B). Runtime 60 seconds
[  652.309314][ T5876] usb 4-1: SerialNumber: syz
[  652.522259][T13899] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  652.912903][T13918] netlink: 'syz.1.2781': attribute type 63 has an invalid length.
[  652.943586][T13920] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  652.945535][T13920] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  652.950293][T13920] vhci_hcd vhci_hcd.0: Device attached
[  652.956171][T13920] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[  652.958534][T13920] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  652.961570][T13920] vhci_hcd vhci_hcd.0: Device attached
[  652.965810][T13920] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[  652.968610][T13920] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  652.971990][T13920] vhci_hcd vhci_hcd.0: Device attached
[  652.975339][T13920] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  653.126666][ T5987] vhci_hcd: vhci_device speed not set
[  653.186676][ T5987] usb 35-1: new full-speed USB device number 5 using vhci_hcd
[  653.226722][   T24] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[  653.377541][   T24] usb 2-1: too many configurations: 255, using maximum allowed: 8
[  653.382869][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  653.385975][   T24] usb 2-1: can't read configurations, error -61
[  653.516711][   T24] usb 2-1: new full-speed USB device number 116 using dummy_hcd
[  653.537680][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.670885][   T24] usb 2-1: too many configurations: 255, using maximum allowed: 8
[  653.676233][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  653.679344][   T24] usb 2-1: can't read configurations, error -61
[  653.682299][   T24] usb usb2-port1: attempt power cycle
[  654.017559][   T24] usb 2-1: new full-speed USB device number 117 using dummy_hcd
[  654.038313][   T24] usb 2-1: too many configurations: 255, using maximum allowed: 8
[  654.043036][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  654.045448][   T24] usb 2-1: can't read configurations, error -61
[  654.176662][   T24] usb 2-1: new full-speed USB device number 118 using dummy_hcd
[  654.177931][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.198400][   T24] usb 2-1: too many configurations: 255, using maximum allowed: 8
[  654.203694][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  654.210089][   T24] usb 2-1: can't read configurations, error -61
[  654.213249][   T24] usb usb2-port1: unable to enumerate USB device
[  655.476073][T13935] nfs: Unknown parameter 'Ni'
[  655.478365][T13936] nfs: Unknown parameter 'Ni'
[  655.511601][T13938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2786'.
[  655.962467][T13923] vhci_hcd: connection closed
[  655.962892][T13925] vhci_hcd: connection closed
[  655.963002][T13921] vhci_hcd: connection reset by peer
[  655.967073][   T12] vhci_hcd: stop threads
[  655.967094][   T12] vhci_hcd: release socket
[  655.967138][   T12] vhci_hcd: disconnect device
[  655.968620][   T12] vhci_hcd: stop threads
[  655.980183][   T12] vhci_hcd: release socket
[  655.982157][   T12] vhci_hcd: disconnect device
[  655.984419][   T12] vhci_hcd: stop threads
[  655.986224][   T12] vhci_hcd: release socket
[  655.988443][   T12] vhci_hcd: disconnect device
[  656.006422][T13945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2789'.
[  656.099283][  T261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.107959][   T24] IPVS: starting estimator thread 0...
[  656.111042][T13947] IPVS: sh: UDP 172.20.20.187:0 - no destination available
[  656.159057][T13952] netlink: 'syz.1.2791': attribute type 63 has an invalid length.
[  656.196783][T13949] IPVS: using max 41 ests per chain, 98400 per kthread
[  656.755139][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.757703][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.391258][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.395858][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.402176][ T5876] usb 4-1: 0:2 : does not exist
[  657.439739][ T5876] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  657.702675][T13964] netlink: 'syz.1.2794': attribute type 29 has an invalid length.
[  657.707211][T13964] netlink: 'syz.1.2794': attribute type 29 has an invalid length.
[  657.711121][T13964] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2794'.
[  658.337013][ T5987] vhci_hcd: vhci_device speed not set
[  658.703791][T13971] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  658.715042][T13971] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8)
[  658.717999][T13971] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  658.724006][T13971] vhci_hcd vhci_hcd.0: Device attached
[  658.729463][T13971] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10)
[  658.732238][T13971] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  658.735745][T13971] vhci_hcd vhci_hcd.0: Device attached
[  658.751982][T13971] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12)
[  658.754666][T13971] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  658.766724][T13971] vhci_hcd vhci_hcd.0: Device attached
[  658.770605][T13971] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  658.835558][T13971] fuse: Bad value for 'fd'
[  658.917685][    T9] vhci_hcd: vhci_device speed not set
[  659.119193][    T9] usb 41-2: new full-speed USB device number 3 using vhci_hcd
[  659.374195][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.938008][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.943272][ T5914] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  659.949600][ T5914] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  659.955181][ T5914] usb 5-1: USB disconnect, device number 18
[  659.958475][T10113] udevd[10113]: failed to send result of seq 21315 to main daemon: Connection refused
[  660.139235][   T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  660.276697][ T5914] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  660.301642][   T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  660.304581][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.307492][   T24] usb 2-1: Product: syz
[  660.309119][   T24] usb 2-1: Manufacturer: syz
[  660.310968][   T24] usb 2-1: SerialNumber: syz
[  660.459522][ T5914] usb 5-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  660.464375][ T5914] usb 5-1: config 1 interface 0 has no altsetting 0
[  660.469261][ T5914] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  660.472324][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.474968][ T5914] usb 5-1: Product: syz
[  660.476414][ T5914] usb 5-1: Manufacturer: syz
[  660.478121][ T5914] usb 5-1: SerialNumber: syz
[  660.695311][T13971] overlayfs: workdir and upperdir must reside under the same mount
[  660.699634][T13838] Bluetooth: hci3: unexpected event for opcode 0x200a
[  660.705962][T13974] vhci_hcd: connection closed
[  660.706208][T13972] vhci_hcd: connection reset by peer
[  660.706604][T13976] vhci_hcd: connection closed
[  660.710794][   T12] vhci_hcd: stop threads
[  660.714439][   T12] vhci_hcd: release socket
[  660.716330][ T5914] usb 5-1: USB disconnect, device number 19
[  660.716804][   T12] vhci_hcd: disconnect device
[  660.720802][   T12] vhci_hcd: stop threads
[  660.722540][   T12] vhci_hcd: release socket
[  660.724663][   T12] vhci_hcd: disconnect device
[  660.728082][   T12] vhci_hcd: stop threads
[  660.729879][   T12] vhci_hcd: release socket
[  660.731644][   T12] vhci_hcd: disconnect device
[  661.907389][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.914004][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.498248][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.552710][T13987] No control pipe specified
[  662.770642][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO
[  662.774672][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  662.778156][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  662.781834][   T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  662.786092][   T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  662.792823][   T24] usb 2-1: USB disconnect, device number 119
[  663.138886][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.142615][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.193190][   T33] kauditd_printk_skb: 2488 callbacks suppressed
[  663.193208][   T33] audit: type=1326 audit(1758006117.424:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13997 comm="syz.4.2803" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a98eba9 code=0x7fc00000
[  663.228431][T14001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2804'.
[  663.288792][T14005] hsr0: entered promiscuous mode
[  663.290557][T14005] macsec1: entered promiscuous mode
[  663.292636][T14005] macsec1: entered allmulticast mode
[  663.294520][T14005] hsr0: entered allmulticast mode
[  663.296110][T14005] hsr_slave_0: entered allmulticast mode
[  663.298311][T14005] hsr_slave_1: entered allmulticast mode
[  663.303210][T14005] hsr0: left allmulticast mode
[  663.305155][T14005] hsr_slave_0: left allmulticast mode
[  663.308875][T14005] hsr_slave_1: left allmulticast mode
[  663.319146][T14007] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  663.324480][T14007] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[  663.326869][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  663.331511][T14007] vhci_hcd vhci_hcd.0: Device attached
[  663.339940][T14007] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[  663.342088][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  663.344612][T14007] vhci_hcd vhci_hcd.0: Device attached
[  663.348600][T14007] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12)
[  663.350999][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  663.354300][T14007] vhci_hcd vhci_hcd.0: Device attached
[  663.356816][T14007] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  663.443356][T14019] netlink: 'syz.4.2809': attribute type 63 has an invalid length.
[  663.527040][   T24] vhci_hcd: vhci_device speed not set
[  663.587322][   T24] usb 35-2: new full-speed USB device number 6 using vhci_hcd
[  663.617032][ T5914] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  663.726674][   T47] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  663.771308][ T5914] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=af.57
[  663.774382][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.778118][ T5914] usb 2-1: Product: syz
[  663.779855][ T5914] usb 2-1: Manufacturer: syz
[  663.781764][ T5914] usb 2-1: SerialNumber: syz
[  663.785845][ T5914] usb 2-1: config 0 descriptor??
[  663.879232][   T47] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  663.882843][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.890916][   T47] usb 5-1: config 0 descriptor??
[  663.992010][T14007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.995576][T14007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.001290][T14007] overlayfs: workdir and upperdir must reside under the same mount
[  664.007745][ T5987] usb 2-1: USB disconnect, device number 120
[  664.012122][T14013] vhci_hcd: connection closed
[  664.013953][T14008] vhci_hcd: connection reset by peer
[  664.014269][T14011] vhci_hcd: connection closed
[  664.015986][   T12] vhci_hcd: stop threads
[  664.022627][   T12] vhci_hcd: release socket
[  664.024608][   T12] vhci_hcd: disconnect device
[  664.027119][   T12] vhci_hcd: stop threads
[  664.028930][   T12] vhci_hcd: release socket
[  664.032965][   T12] vhci_hcd: disconnect device
[  664.035038][   T12] vhci_hcd: stop threads
[  664.037261][   T12] vhci_hcd: release socket
[  664.039208][   T12] vhci_hcd: disconnect device
[  664.247677][    T9] vhci_hcd: vhci_device speed not set
[  664.593481][T14025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2812'.
[  664.736153][T14028] netlink: 'syz.1.2813': attribute type 27 has an invalid length.
[  665.060843][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.301496][T14021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  665.305437][T14021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  665.510871][   T47] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  665.514122][   T47] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  665.517980][   T47] asix 5-1:0.0: probe with driver asix failed with error -71
[  665.522053][   T47] usb 5-1: USB disconnect, device number 20
[  665.698436][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.048202][T14031] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2814'.
[  666.876957][   T47] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  667.029105][   T47] usb 5-1: config 0 has no interfaces?
[  667.032907][   T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  667.036675][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  667.041021][   T47] usb 5-1: SerialNumber: syz
[  667.046770][   T47] usb 5-1: config 0 descriptor??
[  667.250968][T14035] IPVS: length: 24 != 3277873272
[  667.253946][   T47] usb 5-1: USB disconnect, device number 21
[  667.627894][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.631103][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.794967][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'.
[  667.917542][T14049] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  667.924690][T14049] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  667.931625][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  667.936261][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  667.940757][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  667.944723][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  667.948144][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  668.199023][T14050] chnl_net:caif_netlink_parms(): no params data found
[  668.257620][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.269339][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.286239][T14050] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.291085][T14050] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.293878][T14050] bridge_slave_0: entered allmulticast mode
[  668.297019][T14050] bridge_slave_0: entered promiscuous mode
[  668.301114][T14050] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.303802][T14050] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.306206][T14050] bridge_slave_1: entered allmulticast mode
[  668.311173][T14050] bridge_slave_1: entered promiscuous mode
[  668.342257][T14050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.350893][T14050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.381692][T14050] team0: Port device team_slave_0 added
[  668.385768][T14050] team0: Port device team_slave_1 added
[  668.402831][T14056] netlink: 'syz.1.2823': attribute type 10 has an invalid length.
[  668.411317][T14050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.414162][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.434422][T14050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.441826][T14050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.444206][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.453358][T14050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.505009][T14050] hsr_slave_0: entered promiscuous mode
[  668.511112][T14050] hsr_slave_1: entered promiscuous mode
[  668.513701][T14050] debugfs: 'hsr0' already exists in 'hsr'
[  668.515393][T14050] Cannot create hsr debugfs directory
[  668.652996][T14050] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  668.659772][T14050] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  668.664880][T14050] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  668.670658][T14050] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  668.699805][T14050] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.702274][T14050] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.705267][T14050] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.708178][T14050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.729464][   T24] vhci_hcd: vhci_device speed not set
[  668.782203][T14050] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.794854][T12466] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.801875][T12466] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.827753][T14050] 8021q: adding VLAN 0 to HW filter on device team0
[  668.850198][T12466] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.853192][T12466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.877130][T12466] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.880124][T12466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.985342][T14079] netlink: 'syz.4.2828': attribute type 29 has an invalid length.
[  668.992862][T14079] netlink: 'syz.4.2828': attribute type 29 has an invalid length.
[  668.996949][T14079] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2828'.
[  669.061626][T14050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.167020][ T5987] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  669.210060][T14089] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  669.288100][T14050] veth0_vlan: entered promiscuous mode
[  669.296934][T14050] veth1_vlan: entered promiscuous mode
[  669.319971][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.324950][ T5987] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  669.328140][T14050] veth0_macvtap: entered promiscuous mode
[  669.331020][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.335334][T14050] veth1_macvtap: entered promiscuous mode
[  669.339211][ T5987] usb 2-1: config 0 descriptor??
[  669.350092][T14050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.363757][T14050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.374043][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.378733][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.382821][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  669.388649][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.451976][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.460710][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.485807][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.489137][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.538862][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.557824][  T215] block nbd3: Possible stuck request ffff8880217a8000: control (read@0,1024B). Runtime 120 seconds
[  669.562398][  T215] block nbd3: Possible stuck request ffff8880217a8200: control (read@1024,1024B). Runtime 120 seconds
[  669.567226][  T215] block nbd3: Possible stuck request ffff8880217a8400: control (read@2048,1024B). Runtime 120 seconds
[  669.567254][  T215] block nbd3: Possible stuck request ffff8880217a8600: control (read@3072,1024B). Runtime 120 seconds
[  669.589200][T14093] netlink: 'syz.5.2817': attribute type 1 has an invalid length.
[  669.593102][T14093] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2817'.
[  669.757087][ T5987] lg-g15 0003:046D:C222.003F: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0
[  669.938146][ T5876] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  669.962019][ T5987] usb 2-1: USB disconnect, device number 121
[  670.017034][ T5857] Bluetooth: hci4: command tx timeout
[  670.091063][ T5876] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  670.093978][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.099849][ T5876] usb 6-1: config 0 descriptor??
[  670.178905][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.437304][T14100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2832'.
[  670.541581][ T5914] usb 6-1: USB disconnect, device number 2
[  670.611202][T14113] netlink: 'syz.4.2837': attribute type 29 has an invalid length.
[  670.614499][T14113] netlink: 'syz.4.2837': attribute type 29 has an invalid length.
[  670.615818][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'.
[  670.621657][T14113] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2837'.
[  670.625878][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'.
[  670.722948][T14119] dlm: no locking on control device
[  670.786397][T14127] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  670.798456][T14127] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9)
[  670.800641][T14127] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  670.804397][T14127] vhci_hcd vhci_hcd.0: Device attached
[  670.807364][T14127] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11)
[  670.810264][T14127] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  670.813495][T14127] vhci_hcd vhci_hcd.0: Device attached
[  670.877500][T14137] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  670.900994][T14137] overlayfs: workdir and upperdir must reside under the same mount
[  670.921237][T14127] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13)
[  670.923408][T14127] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  670.936268][T14127] vhci_hcd vhci_hcd.0: Device attached
[  670.948407][T14131] vhci_hcd: connection closed
[  670.948838][   T12] vhci_hcd: stop threads
[  670.951589][T14135] vhci_hcd: connection closed
[  670.952134][T14128] vhci_hcd: connection closed
[  670.958624][   T12] vhci_hcd: release socket
[  670.963224][   T12] vhci_hcd: disconnect device
[  670.965074][   T12] vhci_hcd: stop threads
[  670.967299][   T12] vhci_hcd: release socket
[  670.970309][   T12] vhci_hcd: disconnect device
[  670.970883][T14141] netlink: 'syz.4.2845': attribute type 29 has an invalid length.
[  670.975374][   T12] vhci_hcd: stop threads
[  670.977772][ T5876] vhci_hcd: vhci_device speed not set
[  670.979885][   T12] vhci_hcd: release socket
[  670.981784][   T12] vhci_hcd: disconnect device
[  670.982955][T14141] netlink: 'syz.4.2845': attribute type 29 has an invalid length.
[  670.984127][T14143] trusted_key: encrypted_key: master key parameter 'C' is invalid
[  670.994510][T14141] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2845'.
[  671.005034][T14143] syzkaller1: entered promiscuous mode
[  671.007741][T14143] syzkaller1: entered allmulticast mode
[  671.046664][ T5876] usb 35-2: new full-speed USB device number 7 using vhci_hcd
[  671.050377][ T5876] usb 35-2: enqueue for inactive port 1
[  671.116872][ T5876] vhci_hcd: vhci_device speed not set
[  671.446766][   T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  671.457882][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.525641][T14153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2851'.
[  671.532318][T14153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2851'.
[  671.579996][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'.
[  671.611558][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  671.615059][   T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  671.622611][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.626728][   T24] usb 5-1: config 0 descriptor??
[  671.630412][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  671.657951][T14159] syz.1.2854: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  671.662919][T14159] CPU: 0 UID: 0 PID: 14159 Comm: syz.1.2854 Not tainted syzkaller #0 PREEMPT(full) 
[  671.662933][T14159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  671.662939][T14159] Call Trace:
[  671.662944][T14159]  <TASK>
[  671.662950][T14159]  dump_stack_lvl+0x189/0x250
[  671.662980][T14159]  ? __pfx_dump_stack_lvl+0x10/0x10
[  671.662995][T14159]  ? __pfx__printk+0x10/0x10
[  671.663006][T14159]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  671.663016][T14159]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  671.663025][T14159]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  671.663034][T14159]  warn_alloc+0x214/0x310
[  671.663042][T14159]  ? stack_depot_save_flags+0x40/0x860
[  671.663054][T14159]  ? __pfx_warn_alloc+0x10/0x10
[  671.663062][T14159]  ? kasan_save_track+0x3e/0x80
[  671.663073][T14159]  ? __kasan_kmalloc+0x93/0xb0
[  671.663080][T14159]  ? xsk_setsockopt+0x4dc/0x8d0
[  671.663090][T14159]  ? do_sock_setsockopt+0x17c/0x1b0
[  671.663102][T14159]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  671.663108][T14159]  ? do_syscall_64+0xfa/0xfa0
[  671.663159][T14159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.663172][T14159]  __vmalloc_node_range_noprof+0x125/0x12f0
[  671.663198][T14159]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  671.663211][T14159]  ? __kasan_kmalloc+0x93/0xb0
[  671.663220][T14159]  vmalloc_user_noprof+0xad/0xf0
[  671.663232][T14159]  ? xskq_create+0xbf/0x170
[  671.663243][T14159]  xskq_create+0xbf/0x170
[  671.663260][T14159]  xsk_init_queue+0xb0/0x110
[  671.663276][T14159]  xsk_setsockopt+0x4dc/0x8d0
[  671.663290][T14159]  ? __pfx_xsk_setsockopt+0x10/0x10
[  671.663305][T14159]  ? __pfx_aa_sk_perm+0x10/0x10
[  671.663317][T14159]  ? aa_sock_opt_perm+0xff/0x1b0
[  671.663332][T14159]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  671.663343][T14159]  ? __pfx_xsk_setsockopt+0x10/0x10
[  671.663354][T14159]  do_sock_setsockopt+0x17c/0x1b0
[  671.663374][T14159]  __x64_sys_setsockopt+0x13f/0x1b0
[  671.663387][T14159]  do_syscall_64+0xfa/0xfa0
[  671.663398][T14159]  ? lockdep_hardirqs_on+0x9c/0x150
[  671.663409][T14159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.663416][T14159]  ? exc_page_fault+0xab/0x100
[  671.663427][T14159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.663435][T14159] RIP: 0033:0x7ff1bf38eba9
[  671.663445][T14159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  671.663452][T14159] RSP: 002b:00007ff1c0206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  671.663461][T14159] RAX: ffffffffffffffda RBX: 00007ff1bf5d5fa0 RCX: 00007ff1bf38eba9
[  671.663467][T14159] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  671.663472][T14159] RBP: 00007ff1bf411e19 R08: 0000000000000004 R09: 0000000000000000
[  671.663477][T14159] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  671.663481][T14159] R13: 00007ff1bf5d6038 R14: 00007ff1bf5d5fa0 R15: 00007ffe8debd7e8
[  671.663495][T14159]  </TASK>
[  671.663499][T14159] Mem-Info:
[  671.766257][T14159] active_anon:6666 inactive_anon:25 isolated_anon:0
[  671.766257][T14159]  active_file:3709 inactive_file:47305 isolated_file:0
[  671.766257][T14159]  unevictable:1768 dirty:66 writeback:0
[  671.766257][T14159]  slab_reclaimable:7905 slab_unreclaimable:63167
[  671.766257][T14159]  mapped:30129 shmem:2445 pagetables:1202
[  671.766257][T14159]  sec_pagetables:0 bounce:0
[  671.766257][T14159]  kernel_misc_reclaimable:0
[  671.766257][T14159]  free:236522 free_pcp:20924 free_cma:0
[  671.781017][T14159] Node 0 active_anon:14128kB inactive_anon:36kB active_file:6056kB inactive_file:136164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46088kB dirty:136kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7728kB pagetables:2712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  671.791579][T14159] Node 1 active_anon:12536kB inactive_anon:64kB active_file:8780kB inactive_file:53056kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:74428kB dirty:128kB writeback:0kB shmem:4776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5184kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  671.801593][T14159] Node 0 DMA free:15268kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:64kB free_cma:0kB
[  671.811101][T14159] lowmem_reserve[]: 0 810 810 810 810
[  671.812997][T14159] Node 0 DMA32 free:180240kB boost:0kB min:33600kB low:42000kB high:50400kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14128kB inactive_anon:36kB active_file:6056kB inactive_file:136164kB unevictable:3536kB writepending:136kB zspages:0kB present:1556484kB managed:830088kB mlocked:0kB bounce:0kB free_pcp:42356kB local_pcp:25244kB free_cma:0kB
[  671.824400][T14159] lowmem_reserve[]: 0 0 0 0 0
[  671.825970][T14159] Node 1 DMA32 free:458244kB boost:0kB min:19212kB low:24012kB high:28812kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:120kB free_cma:0kB
[  671.836915][T14159] lowmem_reserve[]: 0 0 854 854 854
[  671.839506][T14159] Node 1 Normal free:292336kB boost:0kB min:36652kB low:45812kB high:54972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12672kB inactive_anon:64kB active_file:8780kB inactive_file:53056kB unevictable:3536kB writepending:128kB zspages:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40640kB local_pcp:22356kB free_cma:0kB
[  671.851165][T14159] lowmem_reserve[]: 0 0 0 0 0
[  671.852687][T14159] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (U) = 15268kB
[  671.857471][T14159] Node 0 DMA32: 606*4kB (UM) 337*8kB (UME) 233*16kB (UME) 68*32kB (UM) 90*64kB (UME) 65*128kB (M) 32*256kB (UME) 81*512kB (UM) 67*1024kB (UME) 18*2048kB (UM) 0*4096kB = 180240kB
[  671.862902][T14159] Node 1 DMA32: 3*4kB (UM) 3*8kB (UM) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (UM) = 458244kB
[  671.868288][T14159] Node 1 Normal: 2*4kB (UM) 21*8kB (ME) 388*16kB (UM) 203*32kB (ME) 136*64kB (UME) 79*128kB (UME) 10*256kB (UME) 4*512kB (ME) 2*1024kB (UM) 6*2048kB (UM) 59*4096kB (UM) = 292304kB
[  671.875009][T14159] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  671.878408][T14159] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  671.881336][T14159] 53455 total pagecache pages
[  671.882785][T14159] 0 pages in swap cache
[  671.884003][T14159] Free swap  = 124996kB
[  671.885239][T14159] Total swap = 124996kB
[  671.886720][T14159] 786301 pages RAM
[  671.888016][T14159] 0 pages HighMem/MovableOnly
[  671.889618][T14159] 241547 pages reserved
[  671.891252][T14159] 0 pages cma reserved
[  672.098113][ T5857] Bluetooth: hci4: command tx timeout
[  672.132533][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  672.140516][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  672.143627][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  672.150563][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  672.153454][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  672.156038][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  672.159556][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  672.162284][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  672.165288][T14149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.172080][T14149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.175246][   T24] pwc: recv_control_msg error -32 req 04 val 1500
[  672.178130][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[  672.185732][   T24] pwc: recv_control_msg error -32 req 02 val 2400
[  672.190877][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  672.193429][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  672.195746][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  672.198402][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  672.200657][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  672.205549][   T24] pwc: Registered as video103.
[  672.210349][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30
[  672.215779][   T24] usb 5-1: USB disconnect, device number 22
[  672.761875][T14177] No control pipe specified
[  672.998115][T14183] netlink: 'syz.1.2861': attribute type 29 has an invalid length.
[  673.001241][T14183] netlink: 'syz.1.2861': attribute type 29 has an invalid length.
[  673.385221][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.395946][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.396746][   T54] block nbd2: Possible stuck request ffff888021778000: control (read@0,1024B). Runtime 180 seconds
[  673.402547][   T54] block nbd2: Possible stuck request ffff888021778200: control (read@1024,1024B). Runtime 180 seconds
[  673.408766][   T54] block nbd2: Possible stuck request ffff888021778400: control (read@2048,1024B). Runtime 180 seconds
[  673.412592][   T54] block nbd2: Possible stuck request ffff888021778600: control (read@3072,1024B). Runtime 180 seconds
[  673.793807][T14218] netlink: 'syz.5.2868': attribute type 21 has an invalid length.
[  673.796840][T14218] IPv6: NLM_F_CREATE should be specified when creating new route
[  673.800123][T14218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  673.802456][T14218] IPv6: NLM_F_CREATE should be set when creating new route
[  673.805119][T14218] IPv6: NLM_F_CREATE should be set when creating new route
[  673.807411][T14218] IPv6: NLM_F_CREATE should be set when creating new route
[  673.823781][T14218] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  673.826785][T14218] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  674.018461][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.024843][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.076785][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  674.177352][ T5857] Bluetooth: hci4: command tx timeout
[  674.236778][   T47] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  674.239985][   T24] usb 6-1: Using ep0 maxpacket: 16
[  674.246112][   T24] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  674.253571][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  674.257456][   T24] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  674.260749][   T24] usb 6-1: Product: syz
[  674.262747][   T24] usb 6-1: Manufacturer: syz
[  674.264738][   T24] usb 6-1: SerialNumber: syz
[  674.273060][   T24] usbtest 6-1:254.0: couldn't get endpoints, -22
[  674.275773][   T24] usbtest 6-1:254.0: probe with driver usbtest failed with error -22
[  674.326764][ T3145] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  674.422324][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  674.426394][   T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  674.431112][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  674.437281][   T47] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  674.441017][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.444304][   T47] usb 5-1: Product: syz
[  674.445982][   T47] usb 5-1: Manufacturer: syz
[  674.450809][   T47] usb 5-1: SerialNumber: syz
[  674.455242][   T47] usb 5-1: config 0 descriptor??
[  674.460500][   T47] radioshark2 5-1:0.0: Invalid radioSHARK2 device
[  674.463141][   T47] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22
[  674.467107][   T47] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  674.473848][   T24] usb 6-1: USB disconnect, device number 3
[  674.476716][ T3145] usb 2-1: Using ep0 maxpacket: 8
[  674.482364][ T3145] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.488653][ T3145] usb 2-1: config 0 interface 0 has no altsetting 0
[  674.491562][ T3145] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  674.495153][ T3145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.502945][ T3145] usb 2-1: config 0 descriptor??
[  674.661993][T14228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  674.667600][T14228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  674.672557][   T24] usb 5-1: USB disconnect, device number 23
[  674.912460][ T3145] uclogic 0003:28BD:0078.0041: interface is invalid, ignoring
[  675.101355][T14237] nbd: nbd5 already in use
[  675.309070][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.311830][   T54] block nbd4: Possible stuck request ffff888021810000: control (read@0,1024B). Runtime 90 seconds
[  675.315573][   T54] block nbd4: Possible stuck request ffff888021810200: control (read@1024,1024B). Runtime 90 seconds
[  675.319107][   T54] block nbd4: Possible stuck request ffff888021810400: control (read@2048,1024B). Runtime 90 seconds
[  675.322948][   T54] block nbd4: Possible stuck request ffff888021810600: control (read@3072,1024B). Runtime 90 seconds
[  675.468199][ T3145] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  675.627245][ T3145] usb 5-1: Using ep0 maxpacket: 16
[  675.631097][ T3145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  675.637089][ T3145] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  675.640281][ T3145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.643079][ T3145] usb 5-1: Product: syz
[  675.644684][ T3145] usb 5-1: Manufacturer: syz
[  675.646436][ T3145] usb 5-1: SerialNumber: syz
[  675.649968][ T3145] usb 5-1: config 0 descriptor??
[  675.657143][ T3145] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  675.660079][ T3145] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  675.938883][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.257654][ T5857] Bluetooth: hci4: command tx timeout
[  676.263061][ T3145] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  676.672582][ T3145] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  676.673555][T14241] netlink: 'syz.4.2877': attribute type 21 has an invalid length.
[  676.675284][ T3145] em28xx 5-1:0.0: board has no eeprom
[  676.679647][T14241] __nla_validate_parse: 2 callbacks suppressed
[  676.679655][T14241] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2877'.
[  676.684819][T14241] netlink: 'syz.4.2877': attribute type 4 has an invalid length.
[  676.689117][T14241] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2877'.
[  676.968358][ T3145] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  676.970996][ T3145] em28xx 5-1:0.0: dvb set to bulk mode.
[  676.972868][ T5876] em28xx 5-1:0.0: Binding DVB extension
[  677.117197][   T47] usb 2-1: USB disconnect, device number 122
[  677.219123][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.040664][ T5876] em28xx 5-1:0.0: Registering input extension
[  678.248022][   T47] usb 5-1: USB disconnect, device number 24
[  678.250751][   T47] em28xx 5-1:0.0: Disconnecting em28xx
[  678.252760][   T47] em28xx 5-1:0.0: Closing input extension
[  678.256829][    T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  678.270804][   T47] em28xx 5-1:0.0: Freeing device
[  678.408313][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.412127][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.415843][    T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  678.436967][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.441673][    T9] usb 2-1: config 0 descriptor??
[  678.789204][T14275] XFS (loop4): sunit and swidth must be specified together
[  678.817899][T14277] netlink: 'syz.4.2889': attribute type 29 has an invalid length.
[  678.820795][T14277] netlink: 'syz.4.2889': attribute type 29 has an invalid length.
[  678.823629][T14277] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2889'.
[  679.000276][T14286] netlink: 'syz.4.2893': attribute type 63 has an invalid length.
[  679.138657][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.141778][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.306839][   T47] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  679.456656][   T47] usb 5-1: Using ep0 maxpacket: 8
[  679.462072][   T47] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  679.465333][   T47] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  679.469524][   T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  679.478227][   T47] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  679.481666][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.484801][   T47] usb 5-1: Product: Л
[  679.486406][   T47] usb 5-1: Manufacturer: ᰉ
[  679.488383][   T47] usb 5-1: SerialNumber: Л
[  679.659113][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0042/input/input32
[  679.720426][    T9] uclogic 0003:256C:006D.0042: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  679.781673][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.784412][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.970999][ T5876] usb 2-1: USB disconnect, device number 123
[  680.878266][   T47] usb 5-1: 0:2 : does not exist
[  680.886205][   T47] usb 5-1: USB disconnect, device number 25
[  681.058521][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.465466][T14305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2900'.
[  681.707976][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.717173][    T9] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[  681.745184][T14317] netlink: 'syz.4.2904': attribute type 63 has an invalid length.
[  681.846756][    T9] usb 2-1: device descriptor read/64, error -71
[  682.086752][    T9] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[  682.118059][T14319] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2905'.
[  682.121731][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'.
[  682.190206][T14323] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  682.216917][    T9] usb 2-1: device descriptor read/64, error -71
[  682.326989][    T9] usb usb2-port1: attempt power cycle
[  682.340036][   T54] block nbd5: Possible stuck request ffff888021848000: control (read@0,1024B). Runtime 90 seconds
[  682.344347][   T54] block nbd5: Possible stuck request ffff888021848200: control (read@1024,1024B). Runtime 90 seconds
[  682.348837][   T54] block nbd5: Possible stuck request ffff888021848400: control (read@2048,1024B). Runtime 90 seconds
[  682.353279][   T54] block nbd5: Possible stuck request ffff888021848600: control (read@3072,1024B). Runtime 90 seconds
[  682.358189][  T215] block nbd6: Possible stuck request ffff888021868000: control (read@0,1024B). Runtime 60 seconds
[  682.362504][  T215] block nbd6: Possible stuck request ffff888021868200: control (read@1024,1024B). Runtime 60 seconds
[  682.367948][  T215] block nbd6: Possible stuck request ffff888021868400: control (read@2048,1024B). Runtime 60 seconds
[  682.372196][  T215] block nbd6: Possible stuck request ffff888021868600: control (read@3072,1024B). Runtime 60 seconds
[  682.563241][T14327] XFS (loop4): sunit and swidth must be specified together
[  682.678546][    T9] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[  682.697311][    T9] usb 2-1: device descriptor read/8, error -71
[  682.936777][    T9] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[  682.960463][    T9] usb 2-1: device descriptor read/8, error -71
[  682.978615][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.067451][    T9] usb usb2-port1: unable to enumerate USB device
[  684.257440][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.521111][T14356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2920'.
[  684.764382][T14358] XFS (loop4): sunit and swidth must be specified together
[  684.856973][   T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  684.897798][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.019255][   T24] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  685.022594][   T24] usb 2-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config
[  685.026843][   T24] usb 2-1: config 0 has no interface number 0
[  685.026851][ T5876] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  685.029353][   T24] usb 2-1: config 0 interface 196 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  685.037315][   T24] usb 2-1: config 0 interface 196 has no altsetting 0
[  685.040105][   T24] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  685.043697][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.051697][   T24] usb 2-1: config 0 descriptor??
[  685.192492][ T5876] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  685.195309][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  685.199632][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  685.204811][ T5876] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  685.209801][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.213190][ T5876] usb 5-1: Product: Л
[  685.214925][ T5876] usb 5-1: Manufacturer: ц
[  685.218959][ T5876] usb 5-1: SerialNumber: 뗄춘⇭쌏偷ὰ㠈奌裒씚ꝙ᫆󨒌巃㥂㶕殉
[  685.332738][   T24] usb 2-1: string descriptor 0 read error: -71
[  685.342444][   T24] usb 2-1: USB disconnect, device number 2
[  685.363595][T14367] netlink: 'syz.1.2924': attribute type 29 has an invalid length.
[  685.368599][T14367] netlink: 'syz.1.2924': attribute type 29 has an invalid length.
[  685.372970][T14367] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2924'.
[  685.431039][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.434395][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.441749][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.445562][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.452836][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.459535][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.518827][T14373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.522970][T14373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.540714][ T1099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.543917][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  685.545059][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.546279][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  685.796741][   T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  685.951161][   T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  685.954481][   T24] usb 2-1: config 0 has no interface number 0
[  685.957128][   T24] usb 2-1: config 0 interface 41 has no altsetting 0
[  685.962270][   T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  685.965891][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.972303][   T24] usb 2-1: Product: syz
[  685.974083][   T24] usb 2-1: Manufacturer: syz
[  685.975924][   T24] usb 2-1: SerialNumber: syz
[  685.980158][   T24] usb 2-1: config 0 descriptor??
[  686.207060][   T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  686.211930][   T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  686.216352][   T24] usb 2-1: USB disconnect, device number 3
[  686.298873][T14385] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  686.402835][T14389] netlink: 'syz.1.2931': attribute type 29 has an invalid length.
[  686.407364][T14389] netlink: 'syz.1.2931': attribute type 29 has an invalid length.
[  686.411194][T14389] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2931'.
[  686.621415][T14399] netlink: 'syz.1.2935': attribute type 9 has an invalid length.
[  686.818855][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.822258][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.926785][   T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  687.079153][   T24] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  687.082462][   T24] usb 2-1: config 0 has no interface number 0
[  687.087838][   T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  687.091833][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.095145][   T24] usb 2-1: Product: syz
[  687.097175][   T24] usb 2-1: Manufacturer: syz
[  687.098942][   T24] usb 2-1: SerialNumber: syz
[  687.101802][   T24] usb 2-1: config 0 descriptor??
[  687.307404][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.311190][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.322570][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.326311][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.330725][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.334491][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.340649][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.344042][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.347724][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.350654][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.809890][ T5876] usb 5-1: 0:2 : does not exist
[  687.817080][ T5876] usb 5-1: USB disconnect, device number 26
[  688.156799][ T5876] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  688.306803][ T5876] usb 5-1: Using ep0 maxpacket: 32
[  688.310087][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  688.313553][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  688.317700][ T5876] usb 5-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00
[  688.320999][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.325980][ T5876] usb 5-1: config 0 descriptor??
[  688.338951][   T24] usb 2-1: Firmware version (0.0) predates our first public release.
[  688.341738][   T24] usb 2-1: Please update to version 0.2 or newer
[  688.533481][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.539134][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.544852][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.548754][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.737815][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.766791][ T5876] usbhid 5-1:0.0: can't add hid device: -71
[  688.769240][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  688.773532][ T5876] usb 5-1: USB disconnect, device number 27
[  689.307686][T14411] netlink: 'syz.4.2939': attribute type 29 has an invalid length.
[  689.312069][T14411] netlink: 'syz.4.2939': attribute type 29 has an invalid length.
[  689.316019][T14411] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2939'.
[  689.379041][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.437816][T14415] ext4: Unknown parameter 'fsname'
[  689.445674][T14415] Invalid option length (1047378) for dns_resolver key
[  689.484963][T14418] usb usb8: usbfs: process 14418 (syz.4.2942) did not claim interface 0 before use
[  689.592128][T14424] netlink: 'syz.4.2945': attribute type 63 has an invalid length.
[  689.724317][ T5909] usb 2-1: USB disconnect, device number 4
[  689.839417][T14445] hsr0: left promiscuous mode
[  689.855521][T14445] vlan2: entered allmulticast mode
[  689.858458][T14445] hsr0: entered allmulticast mode
[  689.860587][T14445] hsr_slave_0: entered allmulticast mode
[  689.863705][T14445] hsr_slave_1: entered allmulticast mode
[  689.890127][T14447] netlink: 'syz.1.2953': attribute type 29 has an invalid length.
[  689.894532][T14447] netlink: 'syz.1.2953': attribute type 29 has an invalid length.
[  689.898790][T14447] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2953'.
[  690.017214][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.141616][T14459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2958'.
[  690.145622][T14459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2958'.
[  690.221459][T13838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  690.228678][T13838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  690.231724][T13838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  690.234307][T14467] netlink: 'syz.4.2961': attribute type 29 has an invalid length.
[  690.235530][T13838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  690.241088][T13838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  690.241138][T14467] netlink: 'syz.4.2961': attribute type 29 has an invalid length.
[  690.246688][T14467] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2961'.
[  690.297018][ T5909] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  690.391587][ T5857] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  690.413556][T14464] chnl_net:caif_netlink_parms(): no params data found
[  690.450329][ T5909] usb 2-1: Using ep0 maxpacket: 8
[  690.453597][ T5909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  690.462498][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  690.465592][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  690.475718][ T5909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  690.484492][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  690.490792][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.518006][T14464] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.521020][T14464] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.524244][T14464] bridge_slave_0: entered allmulticast mode
[  690.528565][T14464] bridge_slave_0: entered promiscuous mode
[  690.533331][T14464] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.536256][T14464] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.539572][T14464] bridge_slave_1: entered allmulticast mode
[  690.543565][T14464] bridge_slave_1: entered promiscuous mode
[  690.580843][T14464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  690.587637][T14464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  690.635665][T14464] team0: Port device team_slave_0 added
[  690.640917][T14464] team0: Port device team_slave_1 added
[  690.661856][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.665597][   T34] INFO: task syz.2.2175:12146 blocked for more than 143 seconds.
[  690.680805][   T34]       Not tainted syzkaller #0
[  690.682913][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  690.686368][   T34] task:syz.2.2175      state:D stack:28296 pid:12146 tgid:12145 ppid:5846   task_flags:0x400040 flags:0x00004004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  690.709690][ T5909] usb 2-1: GET_CAPABILITIES returned 0
[  690.711975][ T5909] usbtmc 2-1:16.0: can't read capabilities
[  690.716157][   T34] Call Trace:
[  690.724562][   T34]  <TASK>
[  690.725799][   T34]  __schedule+0x1798/0x4cc0
[  690.736940][   T34]  ? do_filp_open+0x1fa/0x410
[  690.739021][   T34]  ? __lock_acquire+0xab9/0xd20
[  690.741037][   T34]  ? __lock_acquire+0xab9/0xd20
[  690.743045][   T34]  ? __pfx___schedule+0x10/0x10
[  690.745132][   T34]  ? schedule+0x91/0x360
[  690.766098][   T34]  schedule+0x165/0x360
[  690.776714][   T34]  schedule_preempt_disabled+0x13/0x30
[  690.778947][   T34]  __mutex_lock+0x7e6/0x1350
[  690.780803][   T34]  ? __mutex_lock+0x5bb/0x1350
[  690.783781][   T34]  ? bdev_open+0xe0/0xd30
[  690.785545][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  690.796699][   T34]  ? wait_on_inode+0xc0/0x230
[  690.798757][   T34]  ? disk_block_events+0xab/0x120
[  690.800789][   T34]  ? bdev_open+0xaf/0xd30
[  690.802589][   T34]  bdev_open+0xe0/0xd30
[  690.804305][   T34]  blkdev_open+0x457/0x600
[  690.806178][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  690.819882][ T5909] usb 2-1: USB disconnect, device number 5
[  690.836277][   T34]  do_dentry_open+0x953/0x13f0
[  690.847712][   T34]  vfs_open+0x3b/0x340
[  690.849742][   T34]  ? path_openat+0x2ecd/0x3830
[  690.851716][   T34]  path_openat+0x2ee5/0x3830
[  690.853618][   T34]  ? __pfx_path_openat+0x10/0x10
[  690.855643][   T34]  do_filp_open+0x1fa/0x410
[  690.866726][   T34]  ? __lock_acquire+0xab9/0xd20
[  690.868794][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  690.868836][   T34]  ? _raw_spin_unlock+0x28/0x50
[  690.868853][   T34]  ? alloc_fd+0x64c/0x6c0
[  690.868872][   T34]  do_sys_openat2+0x121/0x1c0
[  690.868889][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  690.868907][   T34]  ? exc_page_fault+0x82/0x100
[  690.868929][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  690.868948][   T34]  __x64_sys_openat+0x138/0x170
[  690.868969][   T34]  do_syscall_64+0xfa/0xfa0
[  690.868987][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  690.869006][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.869020][   T34]  ? exc_page_fault+0xab/0x100
[  690.869039][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.869052][   T34] RIP: 0033:0x7f44a278d510
[  690.869065][   T34] RSP: 002b:00007f44a3669b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  690.869083][   T34] RAX: ffffffffffffffda RBX: 0000000000080041 RCX: 00007f44a278d510
[  690.869094][   T34] RDX: 0000000000080041 RSI: 00007f44a3669c10 RDI: 00000000ffffff9c
[  690.869103][   T34] RBP: 00007f44a3669c10 R08: 0000000000000000 R09: 0000000000000000
[  690.869111][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  690.869119][   T34] R13: 00007f44a29d6038 R14: 00007f44a29d5fa0 R15: 00007fff4bdc8368
[  690.869146][   T34]  </TASK>
[  690.869261][   T34] 
[  690.869261][   T34] Showing all locks held in the system:
[  690.869272][   T34] 3 locks held by rcu_exp_gp_kthr/18:
[  690.869328][   T34]  #0: ffff88813663a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  690.869403][   T34]  #1: ffff888136624048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  690.869438][   T34]  #2: ffff88801cef8a68 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x12b0
[  690.869477][   T34] 1 lock held by khungtaskd/34:
[  690.869487][   T34]  #0: ffffffff8e33d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  690.869551][   T34] 2 locks held by getty/5673:
[  690.869560][   T34]  #0: ffff8881084550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  690.869600][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  690.942719][   T34] 3 locks held by kworker/1:4/5909:
[  690.944591][   T34]  #0: ffff88801b75a948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  690.948538][   T34]  #1: ffffc9000395fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  690.952669][   T34]  #2: ffff888022f3a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  690.955810][   T34] 1 lock held by udevd/8837:
[  690.957443][   T34]  #0: ffff888021727358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  690.960428][   T34] 1 lock held by udevd/8847:
[  690.961918][   T34]  #0: ffff8880217d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  690.965230][   T34] 1 lock held by udevd/10001:
[  690.966793][   T34]  #0: ffff8880216ff358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  690.969644][   T34] 1 lock held by udevd/10109:
[  690.971090][   T34]  #0: ffff8880216fb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  690.973941][   T34] 1 lock held by udevd/10112:
[  690.975405][   T34]  #0: ffff888021723358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  690.978380][   T34] 1 lock held by syz.1.2000/11671:
[  690.980067][   T34]  #0: ffffffff8e3430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  690.983975][   T34] 1 lock held by syz.2.2175/12146:
[  690.985742][   T34]  #0: ffff8880216fb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  690.989042][   T34] 2 locks held by syz.3.2774/13899:
[  690.990706][   T34]  #0: ffffffff8e8ea688 (uuid_mutex){+.+.}-{4:4}, at: btrfs_get_tree+0x40d/0x1830
[  690.993565][   T34]  #1: ffff8880216ff358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  690.996441][   T34] 3 locks held by syz.1.2812/14026:
[  690.998158][   T34]  #0: ffff88802b642008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  691.001750][   T34]  #1: ffffffff8f7a8e90 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  691.005201][   T34]  #2: ffff88810b723cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640
[  691.008546][   T34] 1 lock held by syz.5.2875/14236:
[  691.010393][   T34]  #0: ffff888021727358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  691.013345][   T34] 2 locks held by syz-executor/14464:
[  691.015467][   T34]  #0: ffffffff8eeb1600 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  691.018663][   T34]  #1: ffffffff8f7452c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  691.021784][   T34] 
[  691.022841][   T34] =============================================
[  691.022841][   T34] 
[  691.025853][   T34] NMI backtrace for cpu 0
[  691.025865][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  691.025875][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  691.025880][   T34] Call Trace:
[  691.025885][   T34]  <TASK>
[  691.025889][   T34]  dump_stack_lvl+0x189/0x250
[  691.025912][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  691.025922][   T34]  ? __pfx__printk+0x10/0x10
[  691.025937][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  691.025949][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  691.025959][   T34]  ? __pfx__printk+0x10/0x10
[  691.025971][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  691.025983][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  691.025993][   T34]  watchdog+0xf60/0xfa0
[  691.026005][   T34]  ? watchdog+0x1e2/0xfa0
[  691.026017][   T34]  kthread+0x711/0x8a0
[  691.026027][   T34]  ? __pfx_watchdog+0x10/0x10
[  691.026036][   T34]  ? __pfx_kthread+0x10/0x10
[  691.026045][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  691.026056][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.026066][   T34]  ? __pfx_kthread+0x10/0x10
[  691.026074][   T34]  ret_from_fork+0x4bc/0x870
[  691.026086][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  691.026100][   T34]  ? __switch_to_asm+0x39/0x70
[  691.026108][   T34]  ? __switch_to_asm+0x33/0x70
[  691.026117][   T34]  ? __pfx_kthread+0x10/0x10
[  691.026125][   T34]  ret_from_fork_asm+0x1a/0x30
[  691.026142][   T34]  </TASK>
[  691.026145][   T34] Sending NMI from CPU 0 to CPUs 1:
[  691.074127][    C1] NMI backtrace for cpu 1
[  691.074147][    C1] CPU: 1 UID: 0 PID: 11671 Comm: syz.1.2000 Not tainted syzkaller #0 PREEMPT(full) 
[  691.074162][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  691.074172][    C1] RIP: 0010:debug_check_no_obj_freed+0x205/0x470
[  691.074195][    C1] Code: 00 ff c3 48 8b 44 24 18 49 89 c7 48 85 c0 0f 84 45 02 00 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 <74> 08 4c 89 ff e8 41 01 4f fd 49 8b 07 48 89 44 24 18 4d 8d 67 18
[  691.074207][    C1] RSP: 0018:ffffc90009b577f8 EFLAGS: 00000046
[  691.074219][    C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff33ee079
[  691.074228][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90009b576e0
[  691.074237][    C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  691.074244][    C1] R10: dffffc0000000000 R11: fffff5200136aedc R12: ffff88811817b000
[  691.074253][    C1] R13: ffff88811817c000 R14: 1ffff11004e30807 R15: ffff888027184038
[  691.074262][    C1] FS:  00007ff1c02066c0(0000) GS:ffff8881a39e0000(0000) knlGS:0000000000000000
[  691.074273][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  691.074281][    C1] CR2: 000055c09608de68 CR3: 000000000e138000 CR4: 00000000000006f0
[  691.074313][    C1] Call Trace:
[  691.074321][    C1]  <TASK>
[  691.074328][    C1]  ? __page_table_check_zero+0xba/0x530
[  691.074348][    C1]  ? __page_table_check_zero+0xba/0x530
[  691.074405][    C1]  __free_frozen_pages+0x4dd/0xd30
[  691.074427][    C1]  vfree+0x25a/0x400
[  691.074444][    C1]  ? __pfx_kcov_close+0x10/0x10
[  691.074458][    C1]  kcov_close+0x28/0x50
[  691.074472][    C1]  __fput+0x44c/0xa70
[  691.074490][    C1]  task_work_run+0x1d4/0x260
[  691.074506][    C1]  ? __pfx_task_work_run+0x10/0x10
[  691.074521][    C1]  ? do_exit+0x6b0/0x2300
[  691.074534][    C1]  ? kmem_cache_free+0x19d/0x690
[  691.074556][    C1]  do_exit+0x6b5/0x2300
[  691.074571][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  691.074585][    C1]  ? do_raw_spin_lock+0x121/0x290
[  691.074599][    C1]  ? __pfx_do_exit+0x10/0x10
[  691.074619][    C1]  do_group_exit+0x21c/0x2d0
[  691.074633][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.074651][    C1]  get_signal+0x1286/0x1340
[  691.074676][    C1]  arch_do_signal_or_restart+0xa0/0x790
[  691.074693][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  691.074709][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  691.074731][    C1]  ? exit_to_user_mode_loop+0x40/0x130
[  691.074750][    C1]  exit_to_user_mode_loop+0x75/0x130
[  691.074766][    C1]  do_syscall_64+0x2bd/0xfa0
[  691.074783][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.074800][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.074813][    C1]  ? exc_page_fault+0xab/0x100
[  691.074829][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.074858][    C1] RIP: 0033:0x7ff1bf3c1465
[  691.074869][    C1] Code: Unable to access opcode bytes at 0x7ff1bf3c143b.
[  691.074876][    C1] RSP: 002b:00007ff1c0205f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  691.074891][    C1] RAX: fffffffffffffdfc RBX: 00007ff1bf5d5fa0 RCX: 00007ff1bf3c1465
[  691.074912][    C1] RDX: 00007ff1c0205fc0 RSI: 0000000000000000 RDI: 0000000000000000
[  691.074920][    C1] RBP: 00007ff1bf411e19 R08: 0000000000000000 R09: 0000000000000000
[  691.074929][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  691.074936][    C1] R13: 00007ff1bf5d6038 R14: 00007ff1bf5d5fa0 R15: 00007ffe8debd7e8
[  691.074952][    C1]  </TASK>
[  691.203877][    C1] vkms_vblank_simulate: vblank timer overrun
[  691.209097][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  691.211928][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  691.215421][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  691.219459][   T34] Call Trace:
[  691.220817][   T34]  <TASK>
[  691.222025][   T34]  dump_stack_lvl+0x99/0x250
[  691.223908][   T34]  ? __asan_memcpy+0x40/0x70
[  691.225811][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  691.227959][   T34]  ? __pfx__printk+0x10/0x10
[  691.229854][   T34]  vpanic+0x237/0x6d0
[  691.231482][   T34]  ? __pfx_vpanic+0x10/0x10
[  691.233325][   T34]  ? preempt_schedule_common+0x83/0xd0
[  691.235543][   T34]  panic+0xb9/0xc0
[  691.237090][   T34]  ? __pfx_panic+0x10/0x10
[  691.238932][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  691.241087][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  691.243310][   T34]  watchdog+0xf9f/0xfa0
[  691.245068][   T34]  ? watchdog+0x1e2/0xfa0
[  691.246923][   T34]  kthread+0x711/0x8a0
[  691.248606][   T34]  ? __pfx_watchdog+0x10/0x10
[  691.250571][   T34]  ? __pfx_kthread+0x10/0x10
[  691.252476][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  691.254552][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  691.256734][   T34]  ? __pfx_kthread+0x10/0x10
[  691.258645][   T34]  ret_from_fork+0x4bc/0x870
[  691.260531][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  691.262582][   T34]  ? __switch_to_asm+0x39/0x70
[  691.264525][   T34]  ? __switch_to_asm+0x33/0x70
[  691.266462][   T34]  ? __pfx_kthread+0x10/0x10
[  691.268268][   T34]  ret_from_fork_asm+0x1a/0x30
[  691.270093][   T34]  </TASK>
[  691.271701][   T34] Kernel Offset: disabled
[  691.273131][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:58:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000003662ab8 RBX=00007f301b884540 RCX=00000000000000f2 RDX=0000000000000000
RSI=0000000000000001 RDI=00007f301b8845e0 RBP=0000000000000102 RSP=00007f301b8844a0
R8 =00007f3010600000 R9 =0000000000000000 R10=0000000000000000 R11=00007f301b884550
R12=0000000000000001 R13=00007f301aa2da20 R14=0000000000000000 R15=00007f301b8845e0
RIP=00007f301a850c60 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f301b8856c0 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3013c62000 CR3=0000000116a3d000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f301b8845a0 00007f301b884580
XMM02=00007f301b8846e0 00007f301b884560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f301b8845a0 XMM05=0000000000000000 00007f301b8846e0
XMM06=00007f301b8846e0 00007f301b884560 XMM07=00007f301b8845a0 00007f301b884580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f301aa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000003223e RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000003223e RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81ae0dbe R10=0000000000000003 R11=ffffffff81710550
R12=00000000100078cb R13=dffffc0000000000 R14=000000000003223e R15=0000000000000020
RIP=ffffffff81723459 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f348cea4800 ffffffff 00c00000
GS =0000 ffff8881a39e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c096128000 CR3=0000000025c2a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
