last executing test programs:

13m18.915269634s ago: executing program 3 (id=38):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
creat(0x0, 0x2a)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

13m16.730292866s ago: executing program 3 (id=41):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d", 0x9a}], 0x4, 0x0, 0x0, 0x40880}], 0x1, 0x4814)
recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0)

13m15.153850649s ago: executing program 3 (id=45):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0)

13m7.043189996s ago: executing program 3 (id=55):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48)
r3 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

12m55.745372389s ago: executing program 3 (id=83):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0134010100bf"})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$FBIOBLANK(r1, 0xc0684608, 0x2)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000180)={0x2, 0x262, 0x0, &(0x7f0000000100)})
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
epoll_create1(0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/bnep\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff9}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2058)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, 0x0, {0x403, 0x4, 0x80003ff, 0xffe}}, 0x20)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xfffffffffffffffd, 0x4, 0x3, 0x19, 0x2, 0x0, 0x800, 0x4000000, 0x0, 0x4000, 0xbca4, 0x0, 0x0, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r5, 0x0, 0x0)

12m55.6643038s ago: executing program 3 (id=84):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1})

12m40.585714548s ago: executing program 32 (id=84):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1})

3m39.224366631s ago: executing program 0 (id=1405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000703000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84f1a9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff79eff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154b810a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbefc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000140)=0x7ff)
ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f00000000c0)={@any, 0x4bde})

3m38.185563047s ago: executing program 0 (id=1406):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604dc58c00200600fe80000000000000000000000000001afe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffdfe060000000000065b67"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r3, 0x7fff)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000540)=0x11)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x1, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0xfffffffffffffff8, 0x3, 0xffffff7ffffeffff, 0xffffffffffff0001, 0x4, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000008e0000008e000000060000000000000003000085ffffffff070000000500000091"], 0x0, 0xae, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=<r4=>0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r5, &(0x7f0000000000)="fa", 0x1, 0x800, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES16=r6, @ANYRES16=r4, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000013"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)})

3m35.511380756s ago: executing program 0 (id=1411):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
syz_open_procfs$userns(r5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
syz_io_uring_setup(0x113, &(0x7f0000000380)={0x0, 0x5885, 0x1, 0x1, 0xffeffc03}, &(0x7f0000000340), &(0x7f0000000280))

3m34.55185344s ago: executing program 0 (id=1414):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)

3m34.232054294s ago: executing program 0 (id=1416):
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
pipe(&(0x7f0000000380))
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0)

3m30.123948695s ago: executing program 0 (id=1424):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

3m13.037611305s ago: executing program 33 (id=1424):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

15.823344539s ago: executing program 4 (id=1883):
socket$kcm(0x2, 0x5, 0x84)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r0, 0x2)

15.196105198s ago: executing program 6 (id=1885):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
brk(0xfffffffe)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x7)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f00000003c0)={0x4, "040671f5923a0e02dba33ebaa5c86e9cdd0400000000000000da0f459055ac64c23c5edc4f954a6584cbe20800", {0x6142}})

14.38321876s ago: executing program 4 (id=1889):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
prlimit64(0x0, 0xf, &(0x7f0000000180)={0x80000001, 0x1}, &(0x7f00000001c0))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x14}}}}, 0x7)
read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0xa7a, &(0x7f0000000980)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJPl1j8/X5H/D+wOyy8r/r8Z/3e0fTXFVb+HPP5v3h6bfaYnuqYbfb7bzbqvgVH13qrd/+t6Ym4D3EcRxieUtrnbDq1Wq9abfO4w1qvu77/u84S6y6/7+68Sx/+Nx/Bx/N+YHsf/jelx/N+Y3r6u+OHSoL3x+4rj/8b0OP5vTL8nlBvHB95Tkf7JivS9Fen3VqTfV5H+qYr0/RXp91ekP1CRfndF+oMV6Z8Jf/GY/tmKzz9Ukf7IR6fP/6ji85tdbo8yrusP4yy2z/P7h/GR7/8M+v3vqkgHRtfP3jjw5DO/+3Zzsf3/dOd6SL6PdyRNN9K5czxfitdPJlPaW2n67yF9o1/vgHES+8+I/98frkgHRld+zsvvG8ZQ2b/HnmH7rRp0nM9o+VyKP5/iL6T40RTPpHg2xQdSPLdO9WNtPPnbPxx+tVw6398R0od9njy2B4r9RM0PWZ94fWC5z7PHfvyWa6Xl32ZzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNpMtF8PHtxTFsXlNy8dffr46dmFOY93cjTbr1NdU43O54risRRPpviX6c2N91852R3fTHFZzBVlUXbmF9+83inpzqIozhf7iitFs9h7+eprb889dfzCsYv733n98LW1+wYAAABg8/t/AAAA//9N2hwq")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086e81, &(0x7f0000000080)={@id={0x2, 0x0, @auto="44becd8e0e7b3efbffffffffffffff08"}})

12.908838392s ago: executing program 4 (id=1891):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}})

11.864958397s ago: executing program 4 (id=1893):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0)

11.497260772s ago: executing program 4 (id=1895):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket(0x10, 0x803, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x52)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SLAVE(r4, 0x703, 0x1c4)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f00000000c0)={0x41, 0x800000, 0x8, 0xb, 0x4000000, 0x8100})
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)

10.193295121s ago: executing program 6 (id=1900):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
ioprio_set$pid(0x1, r0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}})
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
socket$netlink(0x10, 0x3, 0x0)

10.042819774s ago: executing program 5 (id=1901):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x1)

9.521022181s ago: executing program 5 (id=1902):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0)

9.000468499s ago: executing program 2 (id=1903):
socket$unix(0x1, 0x5, 0x0)
pipe(&(0x7f0000000600))
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x100ec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3, 0x0, 0x0, 0x0)

8.824043351s ago: executing program 5 (id=1904):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x2581)
fcntl$dupfd(r7, 0x0, r7)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20)
close(r8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

8.782810902s ago: executing program 2 (id=1905):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0)

7.777013047s ago: executing program 5 (id=1906):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004f00)=""/209, 0xd1}, {&(0x7f0000000600)=""/261, 0x105}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f0000000000)=""/244, 0xf4}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x5, 0x20, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r4, 0x7fff)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000540)=0x11)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x1, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0xfffffffffffffff8, 0x3, 0xffffff7ffffeffff, 0xffffffffffff0001, 0x4, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000008e0000008e000000060000000000000003000085ffffffff070000000500000091"], 0x0, 0xae, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=<r5=>0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r6, &(0x7f0000000000)="fa", 0x1, 0x800, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES16=r7, @ANYRES16=r5, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000013"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)})

7.5520582s ago: executing program 6 (id=1907):
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0xc00)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1a43)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x2000000, 0x3}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0x2, 0x0, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='trylock '], 0xf)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x2, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
shutdown(0xffffffffffffffff, 0x2)

7.185970086s ago: executing program 1 (id=1908):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x800, 0x70bd26, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000004a80)=0xffff8000, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_io_uring_setup(0x49f, 0x0, &(0x7f0000000340), &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000280))
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

7.033215158s ago: executing program 2 (id=1909):
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xee7, &(0x7f00000042c0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)

4.426474736s ago: executing program 6 (id=1910):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x30c, 0x30, 0x100, 0x71bd2a, 0x25dfdbfc, {}, [{0x2f8, 0x1, [@m_gact={0x16c, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x5, 0xb, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xaeb, 0x20000000}}]}, {0xdd, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xf4, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, ':.\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb5, 0x6, "2821ae14a42e68fac5bd12352472a03b2609adef017021f06c01ab3040b4dfc7924d9e9890b15aebf3d2fccf0beabb5a342265ffa51fabc12f6c0186c65f22a17faedebe552ed8a519a8ae400e98f85bfb2e6a900ea17ce4ea16be6fed5c3a0ed327c2fac04aefe23331aeaf57e13c42b20d27891d0a590a4469bb825015c5e08d26963df469dcbf60b453f634ef090567d705d70b23fe8b075ecb416ff6649d55038921398f7cc86dd112283f5f274667"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x94, 0x2, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_DATA={0x9, 0x3, '.#,+\x00'}]}, {0x21, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7e0a9dc5e0e1b03f719e15080"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

4.287216878s ago: executing program 5 (id=1911):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000180)={[], [{@permit_directio}, {@subj_user={'subj_user', 0x3d, '('}}]}, 0x3, 0x4e6, &(0x7f0000001240)="$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")
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xa8a, &(0x7f0000001880)="$eJzs3U2MG1cBAOBn73qTTVLilIQuSWgTftry091ms4SfCJqquRA1FbdKFZcoTUtEGhCpBK0qkeTUG62qcIUiTkWiAoTUXlDUE5dKNBKXngoHDkRBqsQBShNX633PO35rd+zdzdpef5/09vnNG/u9mZ0Zj2fmvReAsVVt/l1YmKmEcOXNV47/695/Ti9Oeag1R735d7KQqoUQKjE9mX3eexNL8c33XzjdKa6E+ebflA6P3Wi9d3sI4WI4EK6Geth75drLb88/evLSicsH33nt6PXbs/QAADBevnv16MKev/91364PXr/7WNjSmp7Oz+sxvSOe9x+LJ/7p/L8a2tOVQiiayuabjKGazTfRYb5iObVsvsku5U9ln1tr5e9rm29LSfkThWmdlhtGWdqO66FSnW1LV6uzs0u/yUPzd/1UZfb82XNPXRhQRYF19597QggHhH5Do9H4WXMFDkFdBGG1obFz0EcggCX5/cIVLuZXFtam9WmTvZV/4+Fq5/fDOtjo7V/5o1X+by454rB+NuvWlJYr7Uc7Yjq/j5A/v9Tv/p8+L78fUeuxnt3uI4zK/YVu9ZzY4HqsVrf659vFZvWtGKf18O0sv7j/5P/TUfkfA539d6Ou/786PfBrnYvhwBDUYVOH2hDUQeg5NAZ9AAKG1vJzc0saUcrPn+vL87eU5G8tyZ8uyd9Wkr+9JB/G2R+f/Xl4qbL8Oz//Td/v9bB0ne2OGH+iz/rk1yP7LT9/7rdfay0/f54Yhtkbpx4/8/Unn7i29Px/pbX934rb+4GYrsd962qcIV0vzK+rt579r7eXU+0y351Zfe5YMX9jqcTd7fNVdi9/TigcZ1bUY6b9fTu7zbe/fb56Nt90DFuz+ubnJ9uy96Xzj3RcTetrMlveWrYcU1k90nFlV4zzesBqpO2x2/P/afucCbXKU2fPnXkwptN2+peJ2pbF6YeKH/rbjak7sDa9tv+ZCe3tf3a0pteqxePCzuXpleJxoZ5Nn19Ktm6Tp+mHYzp9z31/Yro5ffb0D889ud4LD2PuwnPP/+DUuXNnfuxFejE9EqslHTmHpT69vPiwMRTV8KKXF2VHjs365CCMj7lnn/nR3IXnnn/g7DOnnj7z9Jnzh48cOTw/f+Qbhxfmmuf1c8Wze2AzWf7SH3RNAAAAAAAAAAAAgF795MTxa39762vvLrX/X27/l9r/pyd/U/v/F7P2/3k7+dQqILUD3NUhvznu3hvt9ZjK5qvF8MmsvruzcvZk7/tUjFvj+MX2/6m9fd6va6rPXdn0vP/eNF/WncCK/lKmsj5IWuMFxgb7n43pyzH+dYABqkx3nhzjj+3f+ncvtuZP/VPol2I0pf9b2hpSPyap/Xe3fp3S8X/XBtSR9bcRzQkHvYxAZ/8e+vE/C2fiA6/Lx4ZGY/B1WHsY/vUsrGNoNIziAQyHQY//ma57pvj8n7+zdTGk2W483H68zPsvhbUY9vEnlb+5xv9sjX/X0/GvQ+/qbf089z66wv9+ef3dQrFhb6/H33z5Uz/Qu8vLLPoglp+W/77QW/mNV7Py8xtCPfp/Vv62Hstfsfz7V1f+h7H8tNru/1yv5S/VuFJtr0d+3Tjd/8uvGyc3s+VPfXv2vfyrHKjxViwfxln3cWZ7HcF2OHUa/3dyCMf/7SZ/DuOrMZ0OhOk5h/wbud/6p+cr0vfAnuzzKyXfb6MyTnE34z7+7zdjXLY/pPF/0/ZY75CuFtK1Dut21LcV2GzeG/r7fyMWLg5BHYQhDcMxBnYxNBqNgXbkrRfxwRr0+h/03edBlz/o9V8mH/83P4fPx/+tZj8g8vF/8/fn4//m+fn4enl+Pv5vvj7z8X/z/Luyz82vYM+U5H+6JH9vSf6+5fzpTvn7S97/mZL8gyX5d5fk31OSf2dJ/kRJ/udL8r9Qkn9vSf79JflfLMnf7JrtUQo71bgtP4yzvH2e/R/GR7r/023/312SD4yuX7x+6JEn/vC9+lL7/6nW77V0H+9YTNfib+efxnR+3zsU0ot5b8X0P7L8Yb/eAeMk7z8j/36/ryQfGF3pOS/7N4yhSucee/L7bd36rep2ns9o+VKMvxzjr8T4gRjPxnguxodiPL9B9eP2eOT3fzr6UmX59/7OLL/X58nz9kB5P1GHe6xPfn2g3+fZ8378+rXW8lfZHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBgqs2/CwszlRCuvPnK8cdPnp1bnPJQa4568+9kIVVrvS+EB2M8EeNfxRc333/hdDG+FeNKmA+VUGlND4/daJW0PYRwMRwIV0M97L1y7eW35x89eenE5YPvvHb0+u1bAwAAALD5fRQAAP//ZcAZ4Q==")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc4042, 0xa6)
sendfile(r0, r0, 0x0, 0xfffe80)

4.286290958s ago: executing program 1 (id=1912):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x1)

4.219992089s ago: executing program 1 (id=1913):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc9", 0x46}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b8", 0x6a}, {&(0x7f0000000300)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf", 0x15}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="300c9fd7cbdc2b2f231d94cd6d13c6ea067c8650bb37ea7854a57cf0f7a972cb67dcc77042c0374d9deb15f82653bcca9269038593831548e731cd83a8b279", 0x3f}, {&(0x7f0000000b00)="06cedc4940a621666d04c16c7bc82365a6c30f93012a61487c83f039ffe6e1f06f7b3e966de5ebb9c5f7619c3550cb59fb7880b62e", 0x35}, {&(0x7f0000000a40)="36cd2e8754949675ce859217975c2835106d2f69c86875be005c950118164e68030330d559da3adbe0fedc3176867f5e9030073470053f9a58842d9ac8f5fef38d", 0x41}, {&(0x7f0000000b40)="2832aa4a799d914bb0c812b8607c4f13e0a3a35ecd963e4398c74287656789cd8c42917f9afc2913c92fdfa9ea2d8f763283e6ec3fed640a37331a6f44be3cc676e96515e9d4799798b0e13c9a8d31e4fd7559d0b3d2f9449b7e684e921e80ec2f8731da940ca4272ee2b340b05aadec0c2283f30a74db12db400132b230542c7ca08e5c78e79cabd00dbaa0f2f1c15eec91", 0x92}], 0x4}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001000)="f61354896ddadd6dd551692941291945d2caf0abafead8cd7fd2f025a147883d47465e3249627f2b6d2b4369a2e4f351921ca1dc677d15439a9af8bfb6584ae738859237c725eca9fa90786a134c5eca039ee267ff15c8fa6256f89db34ac656eafeb770bb08cc8e70f3897c2be3cd0290b8ea22af63b5e42d3c548043b6aad2b85a18a853cfe5c0699a25f1d9fe71b4165504c43dbed4b9c5c2881197f1b385578aeb7c9e4766440192efba210730005f2f04c53d003b7f284691fec94044f0eb95deacb0d8751c47f2dc56f8339fff38a2fcdf2e17c75d1df832dce55851549eb665e6047eebd45e1b8a96d16d1f089ffec032500d5e4e29e5dae7c7e8d9b2f9a3584630d7ba795726f09718bbae7d839902b2c67309792df9d04e97491fc44f16653723b9279d1999165000a145020413a699e737d609763f0a42428d5e17ddd8f462962bc9b0c05f3d4beba1aad4766630ad210fc2aa7aa0a0206dbc2d238bdbe67c7301c6950e0927aa3cac744779a1d65d3db585add31e0c03bcc34128f07ceec2b35a30104c3b411beabb37673ab5a90b413355a6de2f15295cfbbda7c37c2266088095ef7bdee7810e1bca5e1b48938d78d89f2b1f92962887b87062af3934f118345aa8b868b140dacbbe81aa04af7b6e694571bd162e3167c4b63ac6c82ff63e648d8b9953e14263124d9a16abd055afa3550215a3856678dac16d8958f86b9c28cf51d0bf972f5120119a52344ff58d43a9542c67985b10ac37a631fdbbe9b2224c8259a2451d8334c38bb84093266fb57c9064a2b59e50793524ade1e1068f2f71ca6607538a569a67c1c0411b9d358f528f27076c489be681a1e7cbef9e88fe7c97fbe3ca", 0x26b}], 0x1}}], 0x3, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.18250936s ago: executing program 2 (id=1914):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000d71b"], 0x20000600}}, 0x0)
dup3(r1, r0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0)

4.16845223s ago: executing program 6 (id=1915):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf250200"], 0x24}}, 0x40)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000080601020000000000fff4000000000005000100070000"], 0x1c}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioperm(0x0, 0x8000, 0x2)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff0000727c000000000000004949410007010000f8ffffffb702000008e990cbd30efa000000b703000015000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0x6e, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f008007357c3d45863d83e8b53d6ac737496df76df3e984d5fee2bd16b19fa0884c1d41c5e19019de81f33d205fb9195464a2bfbb7fc1b6679782c2a7f9be4ba60aee27c11fc8b63ac25cb2375778a584f23d2627565b6ba210c90582fac21b0eb92bc", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000140)=0x1)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3dd4beda8827735c1f103526cf58d946d77bbb52f5a08346c9d72f241fe84b8144bde7b2e9c08d", @ANYRESHEX])
recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000540)}], 0x5}, 0x1)
syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120110010928fc10ac0591122543010223010902"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.10407825s ago: executing program 1 (id=1916):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x2581)
fcntl$dupfd(r7, 0x0, r7)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20)
close(r8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

4.088405831s ago: executing program 2 (id=1917):
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts_2292={{0x58, 0x29, 0xb, {0x0, 0x7, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}}}], 0x58}, 0x0)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
writev(r3, &(0x7f0000000200), 0x0)

1.775769604s ago: executing program 1 (id=1918):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
ioprio_set$pid(0x1, r0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}})
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
socket$netlink(0x10, 0x3, 0x0)

1.722758185s ago: executing program 2 (id=1919):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x10001, &(0x7f0000000240)=ANY=[], 0x9, 0x21c, &(0x7f0000000480)="$eJzsVU9rE0EU/73dSTbRHArixavB9qJttiCevVjwqB/AkK61uPFPN6IJhcZTLwri1Q9Q8OgX0IPgB/AgInjRg4IeKp4qEnkzb7aTbKibgvYyP1jeb968f7vvzc6N7G4WAfi9u9nBHDQIDXwgggIwT0a3VzXyh8iR4Isy65bon4v8LDLrD94+MnRws52myUbWP5hEIOAvNuOkqLr48vGJ8v4OOamKtRLKuJOqGFeUzfUMh6nQJb3QZCxuPRnTRMbmxZiN+GIycuvKoev536ReKN6Snw0EcFr59YA4l2ebtj73Oa1gqg3RTLM+hXAATZxB+tUotmmSvH9qMk+1CcW9DmCmeqqT87x1JO0O+V+kNcFM7hmkH9mlhwG+E1DBu93NDmuvyV+Mt1fNY4+E9uLFa8fmlAKGAIUY6aAcZ7Rl7OcBLPa6dxaz/uDsere9lqwlt+J4+fzSm+NyRNl0PU2WSJdh3PWIKuTgc1p39nnSPu7vD+GAnNLA72UeckPan/PCadTscUAd+mhYXyeGxH2V549MSbiXdXEVZ1ADcH/I27F8oCY4msJ1frUVEEJZtJRTJ7CHADW9ca5zO13dBoGs2w5UHqP1CZV8EcuCEyXLF/LX3xbZFLkicmc/n+mKcHsnKR3hm6wWhkAVD9q93oa+vAxjXTX/1loXz+WZA8lqb0ObrBmhJI6VNfTw8PDw8PDw+Ef4EwAA//9/4zRH")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x105)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0))
pwrite64(r0, &(0x7f0000000f80)='\v', 0x1, 0x659)

181.987688ms ago: executing program 6 (id=1920):
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0xc00)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1a43)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x2000000, 0x3}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0x2, 0x0, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$vga_arbiter(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='trylock '], 0xf)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x2, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
shutdown(0xffffffffffffffff, 0x2)

107.966769ms ago: executing program 5 (id=1921):
syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604dc58c00200600fe80000000000000000000000000001afe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffdfe060000000000065b67"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004f00)=""/209, 0xd1}, {&(0x7f0000000600)=""/261, 0x105}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f0000000000)=""/244, 0xf4}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x5, 0x20, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r3, 0x7fff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000540)=0x11)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x1, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0xfffffffffffffff8, 0x3, 0xffffff7ffffeffff, 0xffffffffffff0001, 0x4, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000008e0000008e000000060000000000000003000085ffffffff070000000500000091"], 0x0, 0xae, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=<r4=>0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r5, &(0x7f0000000000)="fa", 0x1, 0x800, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES16=r6, @ANYRES16=r4, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000013"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)})

91.806439ms ago: executing program 1 (id=1922):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5, 0x81}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
get_mempolicy(0x0, &(0x7f00000004c0), 0x7f, &(0x7f000023e000/0x2000)=nil, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x67)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='devlink_health_report\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5594, &(0x7f0000006a80)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80200, 0x0)
mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r5, r4, 0x0, 0xffffffff)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)

0s ago: executing program 4 (id=1923):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x1)

kernel console output (not intermixed with test programs):

135][ T4220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.888546][ T4220] usb 1-1: config 0 descriptor??
[  114.518770][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'.
[  114.749097][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'.
[  114.758011][ T4574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.70'.
[  115.347179][ T4220] usb 1-1: can't set config #0, error -71
[  115.528006][ T4220] usb 1-1: USB disconnect, device number 4
[  115.828865][ T4579] ax25_connect(): syz.2.73 uses autobind, please contact jreuter@yaina.de
[  116.092525][ T4579] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.588663][ T4579] bond0: (slave rose0): Enslaving as an active interface with an up link
[  116.806923][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  117.205735][ T4615] netlink: 248 bytes leftover after parsing attributes in process `syz.1.78'.
[  117.763449][ T4625] fuse: Bad value for 'fd'
[  117.845589][ T4630] xt_hashlimit: size too large, truncated to 1048576
[  118.150482][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'.
[  118.159744][ T4638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.82'.
[  119.182194][ T4649] fuse: Unknown parameter 'fd00000000000000000000'
[  121.721325][ T4677] orangefs_mount: mount request failed with -4
[  125.355136][ T4737] fuse: Unknown parameter 'fd00000000000000000000'
[  125.765090][ T1325] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  126.867173][ T1325] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  126.886712][ T1325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.086922][ T1325] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.345185][ T4754] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.546948][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.567417][ T1325] usb 1-1: Product: syz
[  127.571627][ T1325] usb 1-1: Manufacturer: syz
[  127.576251][ T1325] usb 1-1: SerialNumber: syz
[  130.016964][ T1325] usb 1-1: 0:2 : does not exist
[  130.096375][ T1325] usb 1-1: USB disconnect, device number 5
[  131.475456][ T4776] fuse: Bad value for 'fd'
[  132.641705][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.747410][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  132.753828][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  132.957496][ T4796] fuse: Unknown parameter 'fd00000000000000000000'
[  133.216727][ T4802] xt_CT: You must specify a L4 protocol and not use inversions on it
[  135.564615][ T4811] loop0: detected capacity change from 0 to 40427
[  135.650281][ T4811] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  135.676838][ T4811] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  135.840678][ T4811] F2FS-fs (loop0): Found nat_bits in checkpoint
[  136.079059][ T4811] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  136.086399][ T4811] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  136.132173][ T4814] chnl_net:caif_netlink_parms(): no params data found
[  136.286893][   T26] audit: type=1804 audit(1749240733.250:2): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.119" name="/newroot/syzcgroup/unified/syz0/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  136.448974][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.794527][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.073311][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.089429][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.266872][ T4173] Bluetooth: hci5: command 0x0409 tx timeout
[  137.548406][ T4814] device bridge_slave_0 entered promiscuous mode
[  137.917356][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.071605][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.119060][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.145153][ T4814] device bridge_slave_1 entered promiscuous mode
[  138.238343][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.391349][ T4814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.605413][ T4814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.667632][ T4220] Bluetooth: hci5: command 0x041b tx timeout
[  139.689956][ T4814] team0: Port device team_slave_0 added
[  139.797796][ T4814] team0: Port device team_slave_1 added
[  139.838682][ T4871] fuse: Unknown parameter 'fd00000000000000000000'
[  140.444309][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.463075][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.077874][ T4814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.113303][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.147966][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.318231][ T4814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.747058][ T4220] Bluetooth: hci5: command 0x040f tx timeout
[  142.070563][ T4814] device hsr_slave_0 entered promiscuous mode
[  142.103620][ T4814] device hsr_slave_1 entered promiscuous mode
[  142.140811][ T4814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.191304][ T4814] Cannot create hsr debugfs directory
[  142.822787][ T4814] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  143.009536][ T4814] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  143.799785][ T4885] loop1: detected capacity change from 0 to 40427
[  143.837071][ T2307] Bluetooth: hci5: command 0x0419 tx timeout
[  143.979337][ T4814] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  143.997104][ T4885] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  144.004881][ T4885] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  144.083794][ T4814] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  144.108552][ T4885] F2FS-fs (loop1): Found nat_bits in checkpoint
[  144.761101][ T4814] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.916465][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  144.940612][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  144.983682][ T4814] 8021q: adding VLAN 0 to HW filter on device team0
[  145.044518][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.064439][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.105722][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.112901][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.147778][ T4928] fuse: Unknown parameter 'fd00000000000000000000'
[  145.168426][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  145.203447][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.228416][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.235575][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.299332][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.443878][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  146.643366][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.722091][  T144] device hsr_slave_0 left promiscuous mode
[  146.741710][  T144] device hsr_slave_1 left promiscuous mode
[  146.768758][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.780532][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.841731][ T4950] netlink: 248 bytes leftover after parsing attributes in process `syz.1.143'.
[  146.993516][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.092516][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.273652][  T144] device bridge_slave_1 left promiscuous mode
[  147.402713][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.614147][  T144] device bridge_slave_0 left promiscuous mode
[  147.631217][ T4955] autofs4:pid:4955:autofs_fill_super: called with bogus options
[  147.662620][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.759142][  T144] device veth1_macvtap left promiscuous mode
[  147.775659][  T144] device veth0_macvtap left promiscuous mode
[  147.807491][  T144] device veth1_vlan left promiscuous mode
[  147.813496][  T144] device veth0_vlan left promiscuous mode
[  148.793833][ T4967] orangefs_mount: mount request failed with -4
[  151.349201][  T144] team0 (unregistering): Port device team_slave_1 removed
[  151.396942][  T144] team0 (unregistering): Port device team_slave_0 removed
[  151.460236][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.511132][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.900596][  T144] bond0 (unregistering): Released all slaves
[  152.047271][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  152.085266][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  152.192823][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  152.310239][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  152.587384][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.024038][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.077764][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.102804][ T4968] device batadv_slave_0 entered promiscuous mode
[  153.151190][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  153.178178][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  153.199098][ T4981] fuse: Unknown parameter 'fd00000000000000000000'
[  153.203139][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.393198][ T4814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.746980][ T4989] netlink: 248 bytes leftover after parsing attributes in process `syz.1.155'.
[  154.527349][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  154.558529][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  154.606050][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.394746][ T5014] netlink: 'syz.1.162': attribute type 1 has an invalid length.
[  155.489130][ T5018] device bond1 entered promiscuous mode
[  155.528947][ T5018] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.638671][ T5014] device ip6gretap1 entered promiscuous mode
[  155.645298][ T5014] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  155.701627][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.709528][  T154] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  155.930662][ T5022] orangefs_mount: mount request failed with -4
[  156.040832][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.103577][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  156.287138][  T154] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  156.351238][ T4814] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.952595][ T5046] netlink: 248 bytes leftover after parsing attributes in process `syz.1.167'.
[  159.117931][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.175981][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.354080][ T4814] device veth0_vlan entered promiscuous mode
[  159.388340][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.407866][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.441248][ T4814] device veth1_vlan entered promiscuous mode
[  159.460019][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.479476][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.500108][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  159.597396][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  159.621739][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  159.762019][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  159.809821][ T4814] device veth0_macvtap entered promiscuous mode
[  159.843022][ T4814] device veth1_macvtap entered promiscuous mode
[  160.630284][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  160.735736][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  160.811542][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.876587][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.927670][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.016567][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  162.067545][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  162.096399][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.204405][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.452277][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.520171][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.884569][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.236896][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.259002][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.295847][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.131344][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.277758][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'.
[  164.295001][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  164.317538][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  164.370241][ T4814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.397021][ T4814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.461396][ T4814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.596790][ T4814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.510311][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.625293][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.492089][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.614039][ T5138] netlink: 248 bytes leftover after parsing attributes in process `syz.2.190'.
[  166.852223][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.948492][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.254445][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.783052][ T5162] hub 8-0:1.0: USB hub found
[  168.789507][ T5162] hub 8-0:1.0: 1 port detected
[  169.532237][ T5169] orangefs_mount: mount request failed with -4
[  169.743470][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'.
[  171.794569][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  175.152904][ T5222] orangefs_mount: mount request failed with -4
[  176.742209][   T26] audit: type=1107 audit(1749240773.490:3): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  176.764553][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'.
[  178.826763][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  179.065997][ T5283] hub 8-0:1.0: USB hub found
[  179.073003][ T5283] hub 8-0:1.0: 1 port detected
[  179.552679][ T5285] orangefs_mount: mount request failed with -4
[  180.616895][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.676926][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.716845][ T1325] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  180.745770][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.952087][ T1325] usb 5-1: config 0 descriptor??
[  181.871673][ T1325] usb 5-1: can't set config #0, error -71
[  181.901264][ T1325] usb 5-1: USB disconnect, device number 3
[  182.008507][ T5303] futex_wake_op: syz.2.224 tries to shift op by -1; fix this program
[  183.287593][ T5315] netlink: 'syz.0.228': attribute type 1 has an invalid length.
[  185.599051][ T5341] mmap: syz.0.229 (5341) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  188.392145][ T5369] netlink: 'syz.0.239': attribute type 1 has an invalid length.
[  190.008107][ T5371] device bond1 entered promiscuous mode
[  190.172849][ T5371] 8021q: adding VLAN 0 to HW filter on device bond1
[  190.756024][ T5401] netlink: 'syz.5.245': attribute type 12 has an invalid length.
[  190.781049][ T5401] netlink: 'syz.5.245': attribute type 29 has an invalid length.
[  190.815806][ T5401] netlink: 148 bytes leftover after parsing attributes in process `syz.5.245'.
[  190.855738][ T5401] netlink: 'syz.5.245': attribute type 1 has an invalid length.
[  190.892459][ T5401] netlink: 'syz.5.245': attribute type 2 has an invalid length.
[  190.916774][ T5401] netlink: 39 bytes leftover after parsing attributes in process `syz.5.245'.
[  192.306549][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.249'.
[  194.150156][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  194.156993][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  194.923088][ T5445] netlink: 'syz.1.254': attribute type 1 has an invalid length.
[  195.113867][ T5451] device bond2 entered promiscuous mode
[  195.151871][ T5451] 8021q: adding VLAN 0 to HW filter on device bond2
[  195.998420][ T5458] orangefs_mount: mount request failed with -4
[  196.249653][ T4173] Bluetooth: hci2: command 0x0406 tx timeout
[  196.326389][ T5466] binder: 5465:5466 ioctl c0306201 0 returned -14
[  196.397870][ T4173] Bluetooth: hci1: command 0x0406 tx timeout
[  196.404688][ T4173] Bluetooth: hci0: command 0x0406 tx timeout
[  196.411015][ T4173] Bluetooth: hci4: command 0x0406 tx timeout
[  197.622264][ T4160] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  198.336711][ T4160] usb 2-1: Using ep0 maxpacket: 16
[  198.467178][ T4160] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  198.542525][ T4160] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  199.467726][ T4160] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  199.546214][ T4160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.688404][ T4160] usb 2-1: Product: syz
[  199.768166][ T4160] usb 2-1: Manufacturer: syz
[  199.867348][ T4160] usb 2-1: SerialNumber: syz
[  201.059146][ T5521] orangefs_mount: mount request failed with -4
[  201.179627][ T5524] ieee802154 phy0 wpan0: encryption failed: -22
[  201.187107][ T4160] usb 2-1: 0:2 : does not exist
[  201.487259][ T4160] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5)
[  201.543563][ T5528] netlink: 'syz.4.272': attribute type 10 has an invalid length.
[  201.944135][ T5528] team0: Device hsr_slave_0 failed to register rx_handler
[  202.396818][ T4160] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  202.689792][ T4160] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  203.017836][ T4270] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  203.110435][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.121485][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.131573][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.143816][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.447869][ T4270] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  203.631484][ T4270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.673144][ T4270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.711926][ T4270] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  203.829458][ T4270] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  203.863056][ T4270] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  203.881901][ T4270] usb 6-1: Manufacturer: syz
[  203.887047][ T4160] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  203.923681][ T4270] usb 6-1: config 0 descriptor??
[  203.932667][ T5558] x_tables: ip6_tables: mh match: only valid for protocol 135
[  204.790758][ T4160] usb 2-1: USB disconnect, device number 2
[  206.218278][ T5570] orangefs_mount: mount request failed with -4
[  206.606864][ T4270] usbhid 6-1:0.0: can't add hid device: -71
[  206.613220][ T4270] usbhid: probe of 6-1:0.0 failed with error -71
[  206.680665][ T4270] usb 6-1: USB disconnect, device number 2
[  206.789478][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.479310][ T5612] x_tables: ip6_tables: mh match: only valid for protocol 135
[  209.362871][ T5618] ax25_connect(): syz.5.294 uses autobind, please contact jreuter@yaina.de
[  210.231350][ T5626] netlink: 248 bytes leftover after parsing attributes in process `syz.5.296'.
[  211.227248][ T5630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.298'.
[  211.267756][ T5630] netlink: 32 bytes leftover after parsing attributes in process `syz.5.298'.
[  212.036941][ T5640] IPVS: Error connecting to the multicast addr
[  214.575035][ T5666] x_tables: ip6_tables: mh match: only valid for protocol 135
[  217.554158][ T4222] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  217.850177][ T5693] fuse: Unknown parameter '00000000000000000000'
[  217.976955][ T4222] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.117663][ T4222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  218.247458][ T5697] IPVS: Error connecting to the multicast addr
[  218.365335][ T4222] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  218.415418][ T4222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  218.465605][ T4222] usb 1-1: SerialNumber: syz
[  218.800675][ T4222] usb 1-1: 0:2 : does not exist
[  218.856406][ T4222] usb 1-1: USB disconnect, device number 6
[  220.798835][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.161365][ T5734] x_tables: ip6_tables: mh match: only valid for protocol 135
[  224.853054][ T5758] fuse: Unknown parameter '00000000000000000000'
[  232.626296][ T5841] fuse: Unknown parameter '00000000000000000000'
[  234.872535][ T5865] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[  235.900110][ T5869] device bond1 entered promiscuous mode
[  235.906472][ T5869] 8021q: adding VLAN 0 to HW filter on device bond1
[  236.168628][ T5877] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  236.182154][ T5874] x_tables: ip6_tables: mh match: only valid for protocol 135
[  237.122008][ T5902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  238.034784][ T5925] fuse: Unknown parameter 'f00000000000000000000'
[  238.256082][    T7] Bluetooth: hci3: command 0x1003 tx timeout
[  238.270162][ T4185] Bluetooth: hci3: sending frame failed (-49)
[  238.494523][ T5929] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  239.949686][ T5903] loop5: detected capacity change from 0 to 40427
[  240.307133][    T7] Bluetooth: hci3: command 0x1001 tx timeout
[  240.317897][ T4185] Bluetooth: hci3: sending frame failed (-49)
[  241.063948][ T5951] fuse: Bad value for 'fd'
[  241.633577][ T5948] =======================================================
[  241.633577][ T5948] WARNING: The mand mount option has been deprecated and
[  241.633577][ T5948]          and is ignored by this kernel. Remove the mand
[  241.633577][ T5948]          option from the mount to silence this warning.
[  241.633577][ T5948] =======================================================
[  241.671835][ T5948] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.684143][ T5948] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.695259][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  241.705359][ T5948] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.716470][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  241.726036][ T5948] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  241.733712][ T5948] UDF-fs: Scanning with blocksize 512 failed
[  241.740496][ T5948] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.751910][ T5948] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.762997][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  241.772828][ T5948] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.784530][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  241.794209][ T5948] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  241.801869][ T5948] UDF-fs: Scanning with blocksize 1024 failed
[  241.808339][ T5948] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.819449][ T5948] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.830970][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  241.840709][ T5948] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.851927][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  241.861536][ T5948] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  241.869218][ T5948] UDF-fs: Scanning with blocksize 2048 failed
[  241.875620][ T5948] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  241.887616][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  241.897437][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  241.907021][ T5948] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  241.914635][ T5948] UDF-fs: Scanning with blocksize 4096 failed
[  241.920714][ T5948] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  242.056972][ T5958] netlink: 248 bytes leftover after parsing attributes in process `syz.0.366'.
[  242.398677][    T7] Bluetooth: hci3: command 0x1009 tx timeout
[  242.949171][ T5964] IPVS: Error connecting to the multicast addr
[  245.848037][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.5.367'.
[  246.886985][ T6009] fuse: Unknown parameter 'f00000000000000000000'
[  247.048719][ T6013] fuse: Bad value for 'fd'
[  247.938778][ T6033] blktrace: Concurrent blktraces are not allowed on loop8
[  249.281007][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.291871][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.302175][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.312806][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.496793][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'.
[  251.505640][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'.
[  251.782082][ T6063] fuse: Unknown parameter 'f00000000000000000000'
[  251.817583][ T6062] fuse: Bad value for 'fd'
[  254.725033][ T6085] orangefs_mount: mount request failed with -4
[  255.316767][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'.
[  255.589939][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  255.596352][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  257.627627][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.402'.
[  257.636452][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'.
[  257.843926][ T4219] Bluetooth: hci5: command 0x0406 tx timeout
[  258.425808][ T6125] fuse: Bad value for 'fd'
[  260.023856][ T6135] fuse: Unknown parameter 'fd00000000000000000000'
[  260.915863][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.410'.
[  262.782822][ T6155] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  262.996391][ T6162] fuse: Bad value for 'fd'
[  263.154285][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'.
[  263.163265][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.416'.
[  263.454297][ T6157] loop4: detected capacity change from 0 to 40427
[  263.480766][ T6157] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  263.492402][ T6157] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  263.522772][ T6157] F2FS-fs (loop4): Found nat_bits in checkpoint
[  263.631313][ T6157] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  263.643679][ T6157] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  263.774566][   T26] audit: type=1804 audit(1749240860.740:4): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.415" name="/newroot/syzcgroup/unified/syz4/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  265.415920][ T4377] Bluetooth: hci3: command 0x1003 tx timeout
[  265.424037][ T4187] Bluetooth: hci3: sending frame failed (-49)
[  266.670041][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.5.426'.
[  266.812195][ T6203] IPVS: Error connecting to the multicast addr
[  267.519990][ T4173] Bluetooth: hci3: command 0x1001 tx timeout
[  267.529456][ T4187] Bluetooth: hci3: sending frame failed (-49)
[  268.308603][ T6217] blktrace: Concurrent blktraces are not allowed on loop10
[  269.596716][ T1107] Bluetooth: hci3: command 0x1009 tx timeout
[  270.526635][ T6229] hub 8-0:1.0: USB hub found
[  270.532495][ T6229] hub 8-0:1.0: 1 port detected
[  272.443824][ T6247] fuse: Bad value for 'fd'
[  272.705062][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.438'.
[  273.495841][ T6253] fuse: Unknown parameter 'fd00000000000000000000'
[  275.263357][ T6258] IPVS: Error connecting to the multicast addr
[  277.311685][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.446'.
[  277.917538][ T6290] orangefs_mount: mount request failed with -4
[  278.104466][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.449'.
[  278.129109][ T6292] fuse: Bad value for 'fd'
[  278.268212][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'.
[  279.043090][ T6304] fuse: Unknown parameter 'fd00000000000000000000'
[  279.572425][ T6310] IPVS: Error connecting to the multicast addr
[  281.479618][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[  281.488478][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'.
[  281.655331][ T6303] loop5: detected capacity change from 0 to 40427
[  281.743814][ T6303] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  282.170815][ T6331] blktrace: Concurrent blktraces are not allowed on loop0
[  282.239876][ T6303] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  282.671490][ T6303] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12)
[  283.302414][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.459'.
[  283.871189][ T6344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.463'.
[  284.604865][ T6350] fuse: Bad value for 'fd'
[  284.670067][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.465'.
[  284.903403][ T6358] fuse: Unknown parameter 'fd00000000000000000000'
[  286.471424][ T6381] blktrace: Concurrent blktraces are not allowed on loop10
[  287.774744][ T6379] orangefs_mount: mount request failed with -4
[  289.925374][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'.
[  290.175274][ T6408] fuse: Bad value for 'fd'
[  290.545444][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'.
[  290.635116][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'.
[  290.687881][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.476'.
[  290.834074][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.480'.
[  291.460417][ T6394] loop5: detected capacity change from 0 to 40427
[  291.489958][ T6394] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  291.513984][ T6394] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  292.922680][ T6394] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12)
[  293.450308][ T6426] fuse: Unknown parameter 'fd00000000000000000000'
[  294.041158][ T6434] IPVS: Error connecting to the multicast addr
[  295.592680][ T6443] blktrace: Concurrent blktraces are not allowed on loop10
[  296.235152][ T6439] orangefs_mount: mount request failed with -4
[  296.449054][ T6448] fuse: Bad value for 'fd'
[  296.782210][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'.
[  297.405383][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'.
[  297.507191][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.492'.
[  297.916773][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'.
[  298.770590][ T6474] fuse: Unknown parameter 'fd00000000000000000000'
[  301.199514][ T6493] IPVS: Error connecting to the multicast addr
[  301.937260][ T6501] blktrace: Concurrent blktraces are not allowed on loop8
[  302.738834][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.504'.
[  302.961845][ T6509] fuse: Bad value for 'fd'
[  303.368958][ T6503] orangefs_mount: mount request failed with -4
[  303.371512][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.506'.
[  303.727787][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[  304.279509][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'.
[  304.734542][ T6528] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  306.159435][ T6533] blktrace: Concurrent blktraces are not allowed on loop2
[  307.113398][ T6535] fuse: Unknown parameter 'fd00000000000000000000'
[  309.495800][ T6561] fuse: Bad value for 'fd'
[  310.134481][ T6568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.521'.
[  310.430297][ T6567] orangefs_mount: mount request failed with -4
[  310.518777][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.522'.
[  310.821309][ T6576] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  313.524945][ T6588] blktrace: Concurrent blktraces are not allowed on loop0
[  314.308386][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.525'.
[  314.872125][ T6595] fuse: Unknown parameter 'fd00000000000000000000'
[  314.953144][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'.
[  317.033355][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  317.040342][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  317.235214][ T6614] blktrace: Concurrent blktraces are not allowed on loop8
[  317.636763][ T6610] fuse: Bad value for 'fd'
[  317.874292][ T6617] orangefs_mount: mount request failed with -4
[  318.006846][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'.
[  318.938629][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'.
[  319.562607][ T6643] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  321.664467][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'.
[  321.707891][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'.
[  322.236984][ T6661] blktrace: Concurrent blktraces are not allowed on loop4
[  322.794653][ T6664] fuse: Unknown parameter 'fd00000000000000000000'
[  323.648975][ T6673] orangefs_mount: mount request failed with -4
[  324.003226][ T6669] fuse: Bad value for 'fd'
[  324.417948][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.549'.
[  325.607935][ T6694] blktrace: Concurrent blktraces are not allowed on loop10
[  325.913301][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.553'.
[  327.799674][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  329.745266][ T6727] orangefs_mount: mount request failed with -4
[  330.003757][ T6733] fuse: Unknown parameter 'fd00000000000000000000'
[  330.232529][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.564'.
[  331.701751][ T6745] blktrace: Concurrent blktraces are not allowed on loop8
[  332.167072][ T6747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'.
[  332.656486][ T6751] fuse: Bad value for 'fd'
[  333.103077][ T6756] blktrace: Concurrent blktraces are not allowed on loop4
[  334.223819][ T6768] xt_CT: You must specify a L4 protocol and not use inversions on it
[  334.931398][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'.
[  336.146713][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[  337.470806][ T6783] fuse: Unknown parameter 'fd00000000000000000000'
[  337.734412][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'.
[  338.585460][ T6794] blktrace: Concurrent blktraces are not allowed on loop2
[  339.611602][ T6796] fuse: Bad value for 'fd'
[  341.399180][ T6810] xt_CT: You must specify a L4 protocol and not use inversions on it
[  341.501931][ T6812] blktrace: Concurrent blktraces are not allowed on loop4
[  343.209396][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.586'.
[  344.279158][ T6827] orangefs_mount: mount request failed with -4
[  345.105856][ T6839] blktrace: Concurrent blktraces are not allowed on loop8
[  346.491725][ T6844] fuse: Unknown parameter 'fd00000000000000000000'
[  346.996917][ T6851] fuse: Bad value for 'fd'
[  347.726037][ T6863] blktrace: Concurrent blktraces are not allowed on loop0
[  348.402929][ T6868] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  349.883041][ T6871] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  350.216328][ T6873] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  350.970490][ T6890] blktrace: Concurrent blktraces are not allowed on loop8
[  351.914245][   T21] Bluetooth: hci3: command 0x1003 tx timeout
[  351.920930][ T4187] Bluetooth: hci3: sending frame failed (-49)
[  353.615655][ T6905] fuse: Bad value for 'fd'
[  353.640403][ T6911] ax25_connect(): syz.0.610 uses autobind, please contact jreuter@yaina.de
[  353.986829][   T21] Bluetooth: hci3: command 0x1001 tx timeout
[  354.025490][ T4187] Bluetooth: hci3: sending frame failed (-49)
[  356.089416][ T4377] Bluetooth: hci3: command 0x1009 tx timeout
[  356.198355][ T6932] xt_CT: You must specify a L4 protocol and not use inversions on it
[  356.329912][ T6939] fuse: Unknown parameter 'fd00000000000000000000'
[  358.180911][ T6965] fuse: Bad value for 'fd'
[  360.838102][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.848715][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.859156][ T6983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.567173][ T6990] fuse: Unknown parameter 'fd00000000000000000000'
[  361.578090][ T6983] device batadv_slave_0 entered promiscuous mode
[  361.839588][ T7001] netlink: 248 bytes leftover after parsing attributes in process `syz.2.635'.
[  365.419453][ T7025] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  367.025091][ T7027] fuse: Bad value for 'fd'
[  368.319830][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  368.330582][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.497535][ T7047] binder: 7040:7047 ioctl 4018620d 0 returned -22
[  368.811258][ T7053] overlayfs: unrecognized mount option "verity=on" or missing value
[  368.875723][ T7050] fuse: Unknown parameter 'fd00000000000000000000'
[  369.182629][ T7057] netlink: 248 bytes leftover after parsing attributes in process `syz.0.648'.
[  371.558005][ T7071] orangefs_mount: mount request failed with -4
[  372.608465][ T7078] fuse: Bad value for 'fd'
[  372.671294][ T7088] xt_CT: You must specify a L4 protocol and not use inversions on it
[  372.940441][ T7070] loop5: detected capacity change from 0 to 40427
[  373.077261][ T7070] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  373.105501][ T7070] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  373.724095][ T7070] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4)
[  374.037019][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.047478][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.185767][ T7100] fuse: Unknown parameter 'fd00000000000000000000'
[  374.425453][ T7106] netlink: 248 bytes leftover after parsing attributes in process `syz.5.663'.
[  375.230353][ T7122] binder: 7112:7122 ioctl 4018620d 0 returned -22
[  375.876966][ T4251] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  376.297048][ T4251] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.324385][ T4251] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  376.616639][ T4251] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  376.633414][ T4251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  376.660340][ T4251] usb 1-1: SerialNumber: syz
[  378.266877][ T4251] usb 1-1: can't set config #1, error -71
[  378.329143][ T4251] usb 1-1: USB disconnect, device number 7
[  378.468278][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  378.474743][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  380.997251][ T7155] blktrace: Concurrent blktraces are not allowed on loop2
[  381.334697][ T7162] fuse: Unknown parameter 'fd00000000000000000000'
[  381.645797][ T7173] netlink: 248 bytes leftover after parsing attributes in process `syz.5.678'.
[  381.747840][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.677'.
[  384.781006][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  384.941810][ T7212] xt_CT: You must specify a L4 protocol and not use inversions on it
[  385.146838][   T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  385.201277][   T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  385.316874][   T21] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  385.340797][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  385.370459][   T21] usb 3-1: SerialNumber: syz
[  385.679824][   T21] usb 3-1: 0:2 : does not exist
[  385.725480][   T21] usb 3-1: USB disconnect, device number 2
[  386.024106][ T7223] netlink: 'syz.4.686': attribute type 1 has an invalid length.
[  386.128107][ T7223] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  387.613583][ T7239] x_tables: ip6_tables: mh match: only valid for protocol 135
[  390.030505][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.696'.
[  391.274053][ T7252] blktrace: Concurrent blktraces are not allowed on loop8
[  391.525440][ T7271] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  393.202583][ T7287] fuse: Bad value for 'fd'
[  393.586727][ T1325] Bluetooth: hci3: command 0x1003 tx timeout
[  393.592923][ T4185] Bluetooth: hci3: sending frame failed (-49)
[  393.803848][ T7296] xt_CT: You must specify a L4 protocol and not use inversions on it
[  394.171502][ T4251] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  395.383717][ T4251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  395.412482][ T4251] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  395.567543][ T4251] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  396.802866][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  396.811740][ T4251] usb 5-1: SerialNumber: syz
[  396.819715][ T1325] Bluetooth: hci3: command 0x1001 tx timeout
[  396.825893][ T4185] Bluetooth: hci3: sending frame failed (-49)
[  396.846818][ T4251] usb 5-1: can't set config #1, error -71
[  396.857304][ T4251] usb 5-1: USB disconnect, device number 4
[  398.372724][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.716'.
[  398.979979][ T1325] Bluetooth: hci3: command 0x1009 tx timeout
[  399.068431][ T7341] blktrace: Concurrent blktraces are not allowed on loop4
[  402.566026][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.576757][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.130201][ T4220] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  403.826864][ T4220] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  403.848100][ T4220] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  403.947142][ T4220] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  403.970257][ T4220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  404.166859][ T4220] usb 1-1: SerialNumber: syz
[  404.225054][ T7385] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  404.660608][ T4220] usb 1-1: 0:2 : does not exist
[  404.711176][ T4220] usb 1-1: USB disconnect, device number 8
[  405.749702][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  405.789729][ T7394] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  407.082850][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.094094][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.041129][   T13] Bluetooth: hci3: command 0x1003 tx timeout
[  408.475043][ T4185] Bluetooth: hci3: sending frame failed (-49)
[  409.497529][ T7435] blktrace: Concurrent blktraces are not allowed on loop0
[  410.636798][   T13] Bluetooth: hci3: command 0x1001 tx timeout
[  410.642923][ T4185] Bluetooth: hci3: sending frame failed (-49)
[  412.573995][ T4220] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  412.742725][   T13] Bluetooth: hci3: command 0x1009 tx timeout
[  413.106878][ T4220] usb 6-1: Using ep0 maxpacket: 8
[  413.227072][ T4220] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  413.244651][ T4220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.294895][ T4220] usb 6-1: config 0 descriptor??
[  413.574478][ T7474] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  414.165303][ T7482] blktrace: Concurrent blktraces are not allowed on loop8
[  415.547241][ T4220] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  415.641295][ T4220] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  415.942354][ T4220] asix: probe of 6-1:0.0 failed with error -71
[  415.981561][ T4220] usb 6-1: USB disconnect, device number 3
[  416.023266][ T7499] fuse: Unknown parameter 'fd00000000000000000000'
[  417.905411][ T7510] autofs4:pid:7510:autofs_fill_super: called with bogus options
[  418.935986][ T7533] blktrace: Concurrent blktraces are not allowed on loop0
[  420.058137][ T7538] fuse: Unknown parameter 'fd00000000000000000000'
[  420.229737][ T7541] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  422.283685][ T7562] xt_CT: You must specify a L4 protocol and not use inversions on it
[  422.316823][ T4218] Bluetooth: hci3: command 0x1003 tx timeout
[  422.371969][ T4185] Bluetooth: hci3: sending frame failed (-49)
[  422.414113][ T7561] x_tables: ip6_tables: mh match: only valid for protocol 135
[  423.248275][ T7566] loop1: detected capacity change from 0 to 40427
[  423.274798][ T7566] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  423.323880][ T7566] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  423.444646][ T7566] F2FS-fs (loop1): Found nat_bits in checkpoint
[  423.532429][ T7566] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  423.550787][ T7566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  423.634230][   T26] audit: type=1804 audit(1749241020.600:5): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.782" name="/newroot/syzcgroup/unified/syz1/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  424.225641][ T7588] netlink: 248 bytes leftover after parsing attributes in process `syz.5.787'.
[  424.396712][ T1325] Bluetooth: hci3: command 0x1001 tx timeout
[  424.412277][ T4185] Bluetooth: hci3: sending frame failed (-49)
[  424.536644][ T7592] fuse: Unknown parameter 'fd00000000000000000000'
[  424.746257][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'.
[  425.891232][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.910200][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.967104][ T7607] blktrace: Concurrent blktraces are not allowed on loop0
[  426.468177][ T4218] Bluetooth: hci3: command 0x1009 tx timeout
[  428.990588][ T7631] xt_bpf: check failed: parse error
[  429.782463][ T7634] syz.1.801 uses obsolete (PF_INET,SOCK_PACKET)
[  429.909183][ T7636] fuse: Unknown parameter 'fd00000000000000000000'
[  430.315373][ T7642] x_tables: ip6_tables: mh match: only valid for protocol 135
[  432.520051][ T7665] blktrace: Concurrent blktraces are not allowed on loop10
[  433.806771][ T1107] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  434.116973][ T1107] usb 2-1: Using ep0 maxpacket: 32
[  434.238220][ T1107] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  434.405077][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.453593][ T7670] loop2: detected capacity change from 0 to 40427
[  434.473938][ T1107] usb 2-1: config 0 descriptor??
[  434.579514][ T7670] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  434.616629][ T7670] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  434.683930][ T7670] F2FS-fs (loop2): Found nat_bits in checkpoint
[  434.746815][ T1107] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  434.806004][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  434.854312][ T7685] fuse: Unknown parameter 'fd00000000000000000000'
[  434.862029][ T1107] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  434.878281][ T1107] usb 2-1: media controller created
[  434.892471][ T7670] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  434.905435][ T7670] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  434.933958][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  434.975024][   T26] audit: type=1804 audit(1749241031.940:6): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.812" name="/newroot/syzcgroup/unified/syz2/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  435.857190][ T1107] az6027: usb out operation failed. (-71)
[  435.887723][ T1107] az6027: usb out operation failed. (-71)
[  436.006752][ T1107] stb0899_attach: Driver disabled by Kconfig
[  436.012947][ T1107] az6027: no front-end attached
[  436.012947][ T1107] 
[  437.327382][ T1107] az6027: usb out operation failed. (-71)
[  437.342328][ T7705] x_tables: ip6_tables: mh match: only valid for protocol 135
[  437.566212][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.821'.
[  437.647617][ T1107] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  437.852785][ T1107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  438.754154][ T1107] dvb-usb: schedule remote query interval to 400 msecs.
[  438.761483][ T1107] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  438.779917][ T1107] usb 2-1: USB disconnect, device number 3
[  439.158818][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.176742][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.199510][ T1107] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  439.281484][ T7725] fuse: Unknown parameter 'fd00000000000000000000'
[  439.918385][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  439.925021][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  441.042415][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.834'.
[  441.767652][ T7755] x_tables: ip6_tables: mh match: only valid for protocol 135
[  443.876214][ T7765] netlink: 'syz.5.839': attribute type 1 has an invalid length.
[  444.126624][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'.
[  444.237536][ T7746] netlink: 3 bytes leftover after parsing attributes in process `syz.0.832'.
[  444.621028][ T7777] binder: 7773:7777 ioctl 4018620d 0 returned -22
[  446.165567][ T7772] fuse: Unknown parameter 'fd00000000000000000000'
[  449.930930][ T7821] netlink: 'syz.0.854': attribute type 1 has an invalid length.
[  450.363838][ T7831] fuse: Unknown parameter 'fd00000000000000000000'
[  452.725919][ T7857] x_tables: ip6_tables: mh match: only valid for protocol 135
[  454.659702][ T7871] netlink: 248 bytes leftover after parsing attributes in process `syz.4.869'.
[  454.836611][ T7879] fuse: Unknown parameter 'fd00000000000000000000'
[  455.416637][   T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  455.804342][ T7894] xt_CT: You must specify a L4 protocol and not use inversions on it
[  456.346895][   T13] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  456.395874][   T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  456.529783][   T13] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  456.956570][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  456.964682][   T13] usb 1-1: SerialNumber: syz
[  458.069528][   T13] usb 1-1: 0:2 : does not exist
[  458.074489][   T13] usb 1-1: unit 255 not found!
[  458.117705][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.147910][   T13] usb 1-1: USB disconnect, device number 9
[  458.170133][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.326321][ T7911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  458.527149][ T4163] udevd[4163]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  459.316885][ T7920] netlink: 248 bytes leftover after parsing attributes in process `syz.2.884'.
[  459.555199][ T7922] fuse: Unknown parameter 'fd00000000000000000000'
[  460.773460][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'.
[  462.636681][ T4220] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  463.027200][ T4220] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  463.100443][ T4220] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  463.326963][ T4220] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  463.347104][ T4220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  463.355132][ T4220] usb 6-1: SerialNumber: syz
[  463.472289][ T7961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  463.709618][ T4220] usb 6-1: 0:2 : does not exist
[  463.718058][ T4220] usb 6-1: unit 255 not found!
[  463.752476][ T4220] usb 6-1: USB disconnect, device number 4
[  464.118957][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  464.226061][ T7968] capability: warning: `syz.1.898' uses 32-bit capabilities (legacy support in use)
[  465.083666][ T7969] fuse: Unknown parameter 'fd00000000000000000000'
[  466.249057][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'.
[  466.264977][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'.
[  466.938470][ T7985] afs: Unknown parameter 'smackfsdef'
[  468.163549][ T7996] netlink: 248 bytes leftover after parsing attributes in process `syz.4.906'.
[  468.944311][ T8014] fuse: Unknown parameter 'fd00000000000000000000'
[  469.685777][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  469.739096][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.860261][ T8024] xt_CT: You must specify a L4 protocol and not use inversions on it
[  470.230752][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  472.376080][ T8051] binder: 8044:8051 ioctl 4018620d 0 returned -22
[  474.033268][ T8058] fuse: Unknown parameter 'fd00000000000000000000'
[  474.760757][ T8070] netlink: 248 bytes leftover after parsing attributes in process `syz.5.926'.
[  476.206664][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'.
[  479.256241][ T8125] fuse: Unknown parameter 'fd00000000000000000000'
[  480.126678][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'.
[  480.968598][ T8142] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  481.833743][ T8129] xt_CT: You must specify a L4 protocol and not use inversions on it
[  482.532552][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.945'.
[  482.845256][ T8177] netlink: 248 bytes leftover after parsing attributes in process `syz.0.947'.
[  483.622643][ T4270] Bluetooth: hci3: command 0x1003 tx timeout
[  483.641758][ T8143] Bluetooth: hci3: sending frame failed (-49)
[  484.980965][ T8192] fuse: Unknown parameter 'fd00000000000000000000'
[  485.078260][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'.
[  485.803642][ T4270] Bluetooth: hci3: command 0x1001 tx timeout
[  485.809740][ T8143] Bluetooth: hci3: sending frame failed (-49)
[  487.949841][ T7044] Bluetooth: hci3: command 0x1009 tx timeout
[  488.777912][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'.
[  492.020479][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'.
[  493.259515][ T8242] fuse: Unknown parameter 'fd00000000000000000000'
[  495.506717][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.969'.
[  496.352703][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'.
[  499.018653][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.095401][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.865442][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  501.871798][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  501.916773][ T8299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.983'.
[  502.523654][ T8303] netlink: 'syz.1.984': attribute type 1 has an invalid length.
[  504.986661][ T4270] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  505.598721][ T4270] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  505.608309][ T4270] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  505.619407][ T4270] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  505.646894][ T4270] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  505.669631][ T4270] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  505.806844][ T4270] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  505.815970][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  505.856646][ T4270] usb 3-1: Product: syz
[  505.860863][ T4270] usb 3-1: Manufacturer: syz
[  505.937739][ T4270] cdc_wdm 3-1:1.0: skipping garbage
[  505.943079][ T4270] cdc_wdm 3-1:1.0: skipping garbage
[  505.946606][ T4173] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  505.999185][ T4270] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  506.005141][ T4270] cdc_wdm 3-1:1.0: Unknown control protocol
[  506.418749][ T4173] usb 1-1: config 0 has an invalid interface number: 224 but max is 0
[  506.456915][ T4173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  506.571713][ T4173] usb 1-1: config 0 has no interface number 0
[  506.776603][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE
[  506.777073][ T4173] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc
[  506.836829][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  506.843860][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  506.856561][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  506.863289][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  506.863807][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.876575][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  506.884113][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  506.923031][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  506.929645][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  506.936549][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  506.943160][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  507.474423][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  507.481066][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  507.489190][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  507.493080][ T4173] usb 1-1: Product: syz
[  507.495818][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  507.506337][ T4173] usb 1-1: Manufacturer: syz
[  507.507331][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  507.517529][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  507.541933][ T4173] usb 1-1: SerialNumber: syz
[  507.565983][ T4220] usb 3-1: USB disconnect, device number 3
[  507.580333][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  507.586963][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  507.593044][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  507.595935][ T4173] usb 1-1: config 0 descriptor??
[  507.804388][ T4173] ldusb 1-1:0.224: Interrupt in endpoint not found
[  508.673076][ T4270] usb 1-1: USB disconnect, device number 10
[  509.807686][ T8362] netlink: 'syz.2.1002': attribute type 1 has an invalid length.
[  509.918680][ T8366] device bond2 entered promiscuous mode
[  509.924523][ T8366] 8021q: adding VLAN 0 to HW filter on device bond2
[  512.926224][ T8407] process 'syz.2.1014' launched './file0' with NULL argv: empty string added
[  513.839639][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.883441][ T8406] device batadv_slave_0 entered promiscuous mode
[  514.208405][ T8416] fuse: Unknown parameter 'fd00000000000000000000'
[  516.806087][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'.
[  517.573148][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'.
[  519.005270][ T8523] fuse: Unknown parameter 'fd00000000000000000000'
[  519.314173][ T8529] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  519.348251][ T2307] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  520.666806][ T2307] usb 3-1: device descriptor read/all, error -71
[  523.202607][ T8557] binder: 8552:8557 ioctl 4018620d 0 returned -22
[  526.148785][ T8574] fuse: Unknown parameter 'fd00000000000000000000'
[  529.816606][    T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  530.096646][    T7] usb 5-1: Using ep0 maxpacket: 32
[  530.350221][    T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.373097][    T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.518987][ T8618] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  531.887615][    T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  531.906534][    T7] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  531.935608][    T7] usb 5-1: Product: syz
[  531.971919][    T7] usb 5-1: Manufacturer: syz
[  533.046870][    T7] usb 5-1: can't set config #4, error -71
[  533.190968][    T7] usb 5-1: USB disconnect, device number 5
[  534.498737][ T2307] Bluetooth: hci3: command 0x1003 tx timeout
[  534.504930][ T8143] Bluetooth: hci3: sending frame failed (-49)
[  536.546745][ T1107] Bluetooth: hci3: command 0x1001 tx timeout
[  536.570492][ T8143] Bluetooth: hci3: sending frame failed (-49)
[  538.266214][ T8683] blktrace: Concurrent blktraces are not allowed on loop8
[  539.158425][ T1107] Bluetooth: hci3: command 0x1009 tx timeout
[  543.366741][ T4219] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  543.747609][ T4219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  543.812918][ T4219] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  544.011267][ T4219] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  544.039307][ T4219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.062102][ T4219] usb 6-1: config 0 descriptor??
[  545.406154][ T4219] usb 6-1: USB disconnect, device number 5
[  547.450552][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'.
[  549.950111][ T4219] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  550.236877][ T4219] usb 3-1: Using ep0 maxpacket: 8
[  550.368048][ T4219] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  550.467895][ T4219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.779259][ T4219] pvrusb2: Hardware description: Terratec Grabster AV400
[  550.816905][ T4219] pvrusb2: **********
[  550.854169][ T4219] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  550.896889][ T4219] pvrusb2: Important functionality might not be entirely working.
[  550.924143][ T4219] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  551.420754][ T4219] pvrusb2: **********
[  551.505748][ T2426] pvrusb2: Invalid write control endpoint
[  551.519521][ T8784] binder: 8782:8784 ioctl 4018620d 0 returned -22
[  551.833571][ T8791] syz.5.1113 sent an empty control message without MSG_MORE.
[  551.870699][ T7044] usb 3-1: USB disconnect, device number 6
[  551.961003][ T2426] pvrusb2: Invalid write control endpoint
[  551.984518][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  552.057919][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  552.096156][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  552.134899][ T2426] pvrusb2: Device being rendered inoperable
[  552.207945][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  552.266330][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  552.358769][ T2426] pvrusb2: Attached sub-driver cx25840
[  553.671008][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  553.693438][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  556.845197][ T7044] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  557.610038][ T8845] xt_CT: You must specify a L4 protocol and not use inversions on it
[  559.366694][   T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  561.754301][ T8875] Cannot find add_set index 0 as target
[  563.310791][   T21] usb 2-1: device not accepting address 4, error -71
[  563.311369][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  563.336574][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  564.691938][ T8896] binder: 8877:8896 ioctl 4018620d 0 returned -22
[  565.629876][ T8894] No source specified
[  565.655745][ T8894] binder: 8890:8894 ioctl c018620c 2000000000c0 returned -1
[  572.327525][ T8947] binder: BINDER_SET_CONTEXT_MGR already set
[  572.333966][ T8947] binder: 8945:8947 ioctl 4018620d 200000000040 returned -16
[  572.982824][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'.
[  572.991962][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1164'.
[  577.400013][ T8990] xt_CT: You must specify a L4 protocol and not use inversions on it
[  578.374477][ T8997] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  580.231477][ T8996] loop5: detected capacity change from 0 to 32768
[  580.283041][ T8996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1175 (8996)
[  580.476739][ T8996] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  580.533039][ T8996] BTRFS info (device loop5): turning off barriers
[  580.567716][ T8996] BTRFS info (device loop5): setting nodatasum
[  580.594739][ T8996] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  580.686335][ T8996] BTRFS info (device loop5): use zstd compression, level 3
[  580.728595][ T8996] BTRFS info (device loop5): using free space tree
[  580.755613][ T8996] BTRFS info (device loop5): has skinny extents
[  581.503430][ T8996] BTRFS error (device loop5): open_ctree failed: -12
[  585.780514][ T9077] autofs4:pid:9077:autofs_fill_super: called with bogus options
[  586.232691][ T9084] loop5: detected capacity change from 0 to 1024
[  587.474464][ T9084] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[  587.585715][ T9084] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.610976][   T26] audit: type=1800 audit(1749241184.580:7): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1194" name="file1" dev="loop5" ino=15 res=0 errno=0
[  587.642487][ T9084] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: block 3: comm syz.5.1194: lblock 3 mapped to illegal pblock 3 (length 13)
[  587.667242][ T9084] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  587.694572][ T9084] EXT4-fs (loop5): This should not happen!! Data will be lost
[  587.694572][ T9084] 
[  588.093890][ T9110] binder: 9098:9110 ioctl 4018620d 0 returned -22
[  588.393199][ T9106] EXT4-fs error (device loop5): ext4_ext_remove_space:2927: inode #15: comm syz.5.1194: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  592.572092][ T9145] autofs4:pid:9145:autofs_fill_super: called with bogus options
[  595.556444][ T9050] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  595.806844][ T9050] usb 3-1: Using ep0 maxpacket: 8
[  596.506710][ T9050] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  596.534729][ T9177] binder: 9169:9177 ioctl 4018620d 0 returned -22
[  596.971166][ T9050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.979358][ T9050] usb 3-1: Product: syz
[  596.983547][ T9050] usb 3-1: Manufacturer: syz
[  596.988281][ T9050] usb 3-1: SerialNumber: syz
[  596.997852][ T9050] usb 3-1: config 0 descriptor??
[  597.036784][ T9050] usb 3-1: can't set config #0, error -71
[  597.307587][ T9050] usb 3-1: USB disconnect, device number 8
[  598.815713][ T9199] autofs4:pid:9199:autofs_fill_super: called with bogus options
[  598.923181][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1222'.
[  601.636600][ T9050] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  602.366801][ T9050] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  602.388854][ T9050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.410002][ T9050] usb 5-1: Product: syz
[  602.414502][ T9050] usb 5-1: Manufacturer: syz
[  602.420031][ T9050] usb 5-1: SerialNumber: syz
[  602.427534][ T9050] usb 5-1: config 0 descriptor??
[  605.255266][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  605.267108][ T9050] usb-storage 5-1:0.0: USB Mass Storage device detected
[  605.354119][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  605.455522][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  605.524526][ T9256] device bridge_slave_0 left promiscuous mode
[  605.566723][ T9050] usb 5-1: USB disconnect, device number 6
[  605.610534][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.805291][ T9256] device bridge_slave_1 left promiscuous mode
[  605.825919][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.848378][ T9256] bond0: (slave bond_slave_0): Releasing backup interface
[  605.885928][ T9256] bond0: (slave bond_slave_1): Releasing backup interface
[  606.121164][ T9256] team0: Port device team_slave_0 removed
[  606.251654][ T9256] team0: Port device team_slave_1 removed
[  606.296694][ T9256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  606.355687][ T9256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  606.364383][ T9256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  606.435432][ T9272] autofs4:pid:9272:autofs_fill_super: called with bogus options
[  606.451755][ T9256] syz.5.1234 (9256) used greatest stack depth: 20096 bytes left
[  607.412996][ T9285] blktrace: Concurrent blktraces are not allowed on loop0
[  609.023040][ T9301] binder: 9287:9301 ioctl 4018620d 0 returned -22
[  609.858262][ T9294] UBIFS error (pid: 9294): cannot open "./file0", error -22
[  610.841582][ T9294] syz.4.1244 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  611.185157][ T9311] device syzkaller1 entered promiscuous mode
[  611.416086][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'.
[  612.482002][ T9327] autofs4:pid:9327:autofs_fill_super: called with bogus options
[  616.202692][ T9353] binder: 9344:9353 ioctl 4018620d 0 returned -22
[  619.623001][ T9365] autofs4:pid:9365:autofs_fill_super: called with bogus options
[  619.984816][ T9050] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  620.337356][ T9050] usb 1-1: Using ep0 maxpacket: 8
[  620.478314][ T9050] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  620.879204][ T9050] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  620.996594][ T9050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.058349][ T9050] usb 1-1: config 0 descriptor??
[  621.229412][ T9050] gspca_main: vc032x-2.14.0 probing 046d:0892
[  621.396759][ T9050] gspca_vc032x: reg_r err -71
[  621.406784][ T9050] vc032x: probe of 1-1:0.0 failed with error -71
[  621.580064][ T9050] usb 1-1: USB disconnect, device number 11
[  621.702682][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1274'.
[  623.548952][ T9397] overlayfs: missing 'workdir'
[  623.622450][ T9399] autofs4:pid:9399:autofs_fill_super: called with bogus options
[  624.467660][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  624.474829][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  626.449870][ T9428] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  627.735611][ T9431] x_tables: ip6_tables: mh match: only valid for protocol 135
[  628.075025][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  628.269314][ T9444] autofs4:pid:9444:autofs_fill_super: called with bogus options
[  629.286983][ T4232] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  629.498991][ T4232] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  629.689669][ T4232] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  629.889226][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.920632][ T9458] netlink: 'syz.4.1295': attribute type 12 has an invalid length.
[  629.944149][ T9458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1295'.
[  630.056895][ T9434] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  630.088703][ T9457] UBIFS error (pid: 9457): cannot open "./file0", error -22
[  630.442908][ T9050] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  631.366617][ T4232] usb 2-1: USB disconnect, device number 6
[  631.440304][ T9050] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  631.462602][ T9050] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  631.768461][ T9050] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  631.799594][ T9050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  631.919253][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  631.956658][ T9050] usb 3-1: SerialNumber: syz
[  632.627699][ T9050] usb 3-1: 0:2 : does not exist
[  632.800050][ T9050] usb 3-1: USB disconnect, device number 9
[  632.894895][ T9491] x_tables: ip6_tables: mh match: only valid for protocol 135
[  633.871898][ T9495] autofs4:pid:9495:autofs_fill_super: called with bogus options
[  634.132616][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  635.436245][ T9513] bridge0: port 3(batadv1) entered blocking state
[  635.487363][ T9513] bridge0: port 3(batadv1) entered disabled state
[  635.541027][ T9513] device batadv1 entered promiscuous mode
[  637.904091][  T144] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  637.914052][  T144] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  638.025978][   T26] audit: type=1326 audit(1749241234.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a87714929 code=0x0
[  639.393650][ T9542] x_tables: ip6_tables: mh match: only valid for protocol 135
[  640.368581][ T9548] UBIFS error (pid: 9548): cannot open "./file0", error -22
[  640.789639][ T9560] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1322'.
[  645.801331][ T9604] fuse: Bad value for 'fd'
[  647.575110][ T9611] autofs4:pid:9611:autofs_fill_super: called with bogus options
[  649.962622][ T9620] tipc: Started in network mode
[  649.967918][ T9620] tipc: Node identity 4, cluster identity 4711
[  649.974105][ T9620] tipc: Node number set to 4
[  653.650934][ T9653] fuse: Bad value for 'fd'
[  654.376193][ T9660] autofs4:pid:9660:autofs_fill_super: called with bogus options
[  655.627454][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1351'.
[  658.086575][ T9050] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  658.274438][ T9709] autofs4:pid:9709:autofs_fill_super: called with bogus options
[  659.527266][ T9050] usb 2-1: config 0 interface 0 has no altsetting 0
[  659.547857][ T9050] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  659.742722][ T9050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.766060][ T9050] usb 2-1: config 0 descriptor??
[  659.885147][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'.
[  660.378601][ T9050]  (null): keene_cmd_main failed (-110)
[  660.547369][ T9050] video4linux radio48: keene_cmd_main failed (-32)
[  660.584198][ T9050] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  660.838849][ T9050] usb 2-1: USB disconnect, device number 7
[  668.588221][ T9799] tipc: Started in network mode
[  668.633743][ T9799] tipc: Node identity 4, cluster identity 4711
[  668.692657][ T9799] tipc: Node number set to 4
[  672.056537][ T4251] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  672.534309][   T26] audit: type=1326 audit(1749241269.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.5.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf01f4929 code=0x7fc00000
[  672.666647][ T4251] usb 3-1: unable to read config index 0 descriptor/start: -71
[  672.679800][ T4251] usb 3-1: can't read configurations, error -71
[  674.452090][ T9880] xt_CT: You must specify a L4 protocol and not use inversions on it
[  675.414850][   T26] audit: type=1326 audit(1749241272.380:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.5.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbf0190b19 code=0x7fc00000
[  677.445816][ T1210] Bluetooth: hci3: Frame reassembly failed (-84)
[  677.537269][ T9895] UBIFS error (pid: 9895): cannot open "./file0", error -22
[  677.668541][ T1210] Bluetooth: hci3: Frame reassembly failed (-84)
[  679.932030][ T9051] Bluetooth: hci3: command 0x1003 tx timeout
[  679.951591][ T4187] Bluetooth: hci3: sending frame failed (-49)
[  680.226603][ T9051] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  680.303654][ T4251] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  680.476909][ T9051] usb 3-1: Using ep0 maxpacket: 8
[  680.561349][ T4251] usb 1-1: Using ep0 maxpacket: 16
[  680.837401][ T9051] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  680.873888][ T9051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.947411][ T9051] usb 3-1: Product: syz
[  681.006029][ T9051] usb 3-1: Manufacturer: syz
[  681.051638][ T9051] usb 3-1: SerialNumber: syz
[  681.171194][ T9051] usb 3-1: config 0 descriptor??
[  681.326671][ T4251] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  681.339687][ T9949] binder: 9946:9949 ioctl 4018620d 0 returned -22
[  682.063909][ T9051] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  682.738762][ T4251] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  682.926727][ T4251] usb 1-1: string descriptor 0 read error: -71
[  682.943278][ T4251] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  683.062891][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.317432][ T4251] usb 1-1: can't set config #1, error -71
[  683.385156][ T1107] Bluetooth: hci3: command 0x1001 tx timeout
[  683.391435][ T4187] Bluetooth: hci3: sending frame failed (-49)
[  683.421512][ T4251] usb 1-1: USB disconnect, device number 12
[  683.443349][ T9051] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  683.459919][ T9051] usb 3-1: USB disconnect, device number 12
[  684.457104][ T9973] ubi31: attaching mtd0
[  684.487535][ T9973] ubi31: scanning is finished
[  684.492477][ T9973] ubi31: empty MTD device detected
[  685.436767][ T9051] Bluetooth: hci3: command 0x1009 tx timeout
[  685.570392][ T9973] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  685.588586][ T9973] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  685.608825][ T9973] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  685.629110][ T9973] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  685.656542][ T9973] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  685.676018][ T9973] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  685.686808][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  685.686857][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  685.749923][ T9973] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1521869177
[  685.818997][ T9973] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  686.034582][ T9982] ubi31: background thread "ubi_bgt31d" started, PID 9982
[  686.962255][T10000] IPVS: Error connecting to the multicast addr
[  687.166730][ T1107] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  688.066523][ T1107] usb 5-1: Using ep0 maxpacket: 16
[  688.207066][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  688.426683][ T1107] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  688.456676][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.497465][ T1107] usb 5-1: Product: syz
[  688.501707][ T1107] usb 5-1: Manufacturer: syz
[  688.506311][ T1107] usb 5-1: SerialNumber: syz
[  688.600963][T10006] binder: 10004:10006 ioctl 4018620d 0 returned -22
[  690.073215][ T1107] usb 5-1: config 0 descriptor??
[  690.186919][ T1107] usb 5-1: can't set config #0, error -71
[  690.311527][ T1107] usb 5-1: USB disconnect, device number 7
[  695.397656][T10051] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.1447'.
[  698.583575][T10083] binder: 10081:10083 ioctl 4018620d 0 returned -22
[  702.281034][T10106] chnl_net:caif_netlink_parms(): no params data found
[  703.676607][ T7044] Bluetooth: hci3: command 0x0409 tx timeout
[  704.505749][T10106] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.682086][T10106] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.631035][T10106] device bridge_slave_0 entered promiscuous mode
[  705.678930][T10106] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.706175][T10106] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.817127][ T7044] Bluetooth: hci3: command 0x041b tx timeout
[  706.285874][T10106] device bridge_slave_1 entered promiscuous mode
[  707.093596][T10163] IPVS: Error connecting to the multicast addr
[  707.200848][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  708.158316][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  708.177803][   T13] Bluetooth: hci3: command 0x040f tx timeout
[  708.295255][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.399998][T10106] team0: Port device team_slave_0 added
[  708.449254][T10106] team0: Port device team_slave_1 added
[  708.613955][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  708.636490][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.582390][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  709.709392][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.739263][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  709.756946][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.817341][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  709.857848][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.146102][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.180842][T10106] device hsr_slave_0 entered promiscuous mode
[  710.210067][T10106] device hsr_slave_1 entered promiscuous mode
[  710.241699][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[  711.988896][    T9] tipc: Left network mode
[  712.642929][T10214] IPVS: Error connecting to the multicast addr
[  713.210561][T10106] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  713.252183][T10106] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  713.663454][T10106] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  713.958468][T10106] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  714.577747][T10106] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.770813][T10106] 8021q: adding VLAN 0 to HW filter on device team0
[  714.807092][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  714.815955][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  714.835827][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  714.884402][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  714.917606][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.924787][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  714.942336][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  714.954532][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  714.985694][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.992966][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  715.040943][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  715.073295][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  715.104785][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  715.142485][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  715.165322][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  715.183414][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  715.258771][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  715.308020][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  716.265720][T10106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  716.349153][T10106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  716.716820][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  716.856971][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  716.917691][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  717.072361][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  718.896283][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  719.528531][    T9] device hsr_slave_0 left promiscuous mode
[  719.688769][    T9] device hsr_slave_1 left promiscuous mode
[  721.181270][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  721.237588][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  721.245173][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  721.304602][    T9] device bridge_slave_1 left promiscuous mode
[  721.344763][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.541134][    T9] device bridge_slave_0 left promiscuous mode
[  721.556583][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.596604][    T9] device veth1_macvtap left promiscuous mode
[  721.602796][    T9] device veth0_macvtap left promiscuous mode
[  721.617484][    T9] device veth1_vlan left promiscuous mode
[  721.623630][    T9] device veth0_vlan left promiscuous mode
[  721.898436][    T9] bond2 (unregistering): Released all slaves
[  721.917066][    T9] bond1 (unregistering): Released all slaves
[  722.065672][    T9] team0 (unregistering): Port device team_slave_1 removed
[  722.088503][    T9] team0 (unregistering): Port device team_slave_0 removed
[  722.104887][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  722.121839][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  722.219200][    T9] bond0 (unregistering): Released all slaves
[  722.326543][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  722.334179][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  722.584797][T10106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  724.581033][T10328] xt_CT: You must specify a L4 protocol and not use inversions on it
[  726.099028][ T8483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  726.153452][ T8483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  726.741869][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  726.859660][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  726.980191][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  726.988490][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  727.150892][T10106] device veth0_vlan entered promiscuous mode
[  728.367983][T10357] block device autoloading is deprecated. It will be removed in Linux 5.19
[  728.604642][T10106] device veth1_vlan entered promiscuous mode
[  729.509424][T10106] device veth0_macvtap entered promiscuous mode
[  729.702972][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  729.719235][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  729.760500][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  729.959110][T10106] device veth1_macvtap entered promiscuous mode
[  730.709676][T10387] x_tables: ip6_tables: mh match: only valid for protocol 135
[  730.761610][T10106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  730.811922][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  730.838264][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  730.963486][T10398] binder: 10392:10398 ioctl c0306201 0 returned -14
[  731.270382][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.351941][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.416511][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.581011][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.591343][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.602115][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.689295][T10405] loop5: detected capacity change from 0 to 512
[  732.036962][ T9050] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  732.454368][T10106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  732.471931][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  732.486345][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  732.534119][T10106] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  732.559076][T10405] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  732.570183][T10405] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  732.595194][T10106] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  732.620120][T10106] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  732.664373][T10413] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  732.686756][ T9050] usb 2-1: config 0 has an invalid interface number: 5 but max is 0
[  732.694786][ T9050] usb 2-1: config 0 has no interface number 0
[  732.715944][T10106] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  732.961798][ T9050] usb 2-1: New USB device found, idVendor=3dd8, idProduct=6d09, bcdDevice=14.33
[  732.981880][ T9050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.012954][ T9050] usb 2-1: Product: syz
[  733.023847][ T9050] usb 2-1: Manufacturer: syz
[  733.119975][ T9050] usb 2-1: SerialNumber: syz
[  733.966005][ T9050] usb 2-1: config 0 descriptor??
[  734.143437][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  734.292179][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  734.677034][ T1107] usb 2-1: USB disconnect, device number 8
[  734.905721][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  735.051169][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.198056][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  735.282417][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  736.397830][ T1325] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  736.766592][ T1325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  737.576444][ T1325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  737.766958][ T1325] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  737.801096][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  737.874195][T10476] ubi: mtd0 is already attached to ubi31
[  738.586056][ T1325] usb 5-1: SerialNumber: syz
[  738.879700][ T1325] usb 5-1: 0:2 : does not exist
[  738.914185][ T1325] usb 5-1: USB disconnect, device number 8
[  740.080889][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  741.262236][T10510] loop6: detected capacity change from 0 to 128
[  743.136580][   T13] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  743.736679][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  743.943852][   T13] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  743.999000][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.828239][   T13] usb 2-1: Product: syz
[  744.832747][   T13] usb 2-1: Manufacturer: syz
[  744.838850][   T13] usb 2-1: SerialNumber: syz
[  744.848570][   T13] usb 2-1: config 0 descriptor??
[  744.891918][   T13] asix: probe of 2-1:0.0 failed with error -22
[  745.090371][   T13] usb 2-1: USB disconnect, device number 9
[  745.357563][T10570] xt_CT: You must specify a L4 protocol and not use inversions on it
[  746.427969][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1570'.
[  747.108774][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  747.115170][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  748.014609][T10610] loop6: detected capacity change from 0 to 1764
[  750.555098][T10632] loop5: detected capacity change from 0 to 512
[  750.676104][T10632] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  750.716530][T10632] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  750.829954][T10632] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  750.859507][T10632] EXT4-fs (loop5): 1 truncate cleaned up
[  750.865190][T10632] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  751.595407][T10647] loop5: detected capacity change from 0 to 64
[  751.761526][T10647] minix_free_block (loop5:21): bit already cleared
[  751.806729][T10648] netlink: 'syz.5.1586': attribute type 3 has an invalid length.
[  751.913175][T10648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  753.548683][ T4173] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  753.976602][ T4173] usb 3-1: Using ep0 maxpacket: 32
[  754.330802][ T4173] usb 3-1: unable to get BOS descriptor or descriptor too short
[  754.539001][ T4173] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  754.734562][ T4173] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  755.367956][ T4173] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  755.404212][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.247793][T10695] loop6: detected capacity change from 0 to 2048
[  756.356606][ T4173] usb 3-1: can't set config #1, error -71
[  756.376687][ T4173] usb 3-1: USB disconnect, device number 13
[  756.482081][T10695] EXT4-fs (loop6): inline encryption not supported
[  756.520114][T10695] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  756.596944][T10695] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  756.657308][T10695] EXT4-fs (loop6): Unrecognized mount option "audit" or missing value
[  761.973099][T10774] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1616'.
[  762.302402][T10761] loop6: detected capacity change from 0 to 8192
[  763.184773][ T4220] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  763.438404][ T4220] usb 2-1: Using ep0 maxpacket: 16
[  764.036710][ T4220] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  764.053769][ T4220] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  764.431273][ T4220] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  764.442341][ T4220] usb 2-1: config 1 has no interface number 1
[  764.449920][ T4220] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  764.479965][ T4220] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  765.304296][ T4220] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  765.476789][ T4220] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  765.723357][ T4220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.732168][ T4220] usb 2-1: Product: syz
[  765.736361][ T4220] usb 2-1: Manufacturer: syz
[  765.752110][ T4220] usb 2-1: SerialNumber: syz
[  765.956691][ T4220] usb 2-1: can't set config #1, error -71
[  765.985530][ T4220] usb 2-1: USB disconnect, device number 10
[  772.566361][T10883] x_tables: ip6_tables: mh match: only valid for protocol 135
[  776.019834][T10904] loop6: detected capacity change from 0 to 128
[  776.501119][T10892] UBIFS error (pid: 10892): cannot open "./file0", error -22
[  777.461983][T10904] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  777.756504][T10904] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  779.669228][T10941] tipc: Started in network mode
[  779.674348][T10941] tipc: Node identity 4, cluster identity 4711
[  779.680703][T10941] tipc: Node number set to 4
[  779.887300][T10943] x_tables: ip6_tables: mh match: only valid for protocol 135
[  784.863205][T10920] ODEBUG: Out of memory. ODEBUG disabled
[  785.268261][T10979] binder: 10975:10979 ioctl 4018620d 0 returned -22
[  785.562639][T10990] IPVS: length: 4096 != 8
[  787.308287][T10996] loop5: detected capacity change from 0 to 262144
[  787.372255][T10996] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 scanned by syz.5.1669 (10996)
[  787.413211][T10996] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  787.422606][T10996] BTRFS info (device loop5): use zlib compression, level 3
[  787.430041][T10996] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  787.440811][T10996] BTRFS info (device loop5): trying to use backup root at mount time
[  787.448985][T10996] BTRFS info (device loop5): allowing degraded mounts
[  787.455765][T10996] BTRFS info (device loop5): enabling ssd optimizations
[  787.462728][T10996] BTRFS info (device loop5): using spread ssd allocation scheme
[  787.470408][T10996] BTRFS info (device loop5): disabling tree log
[  787.476755][T10996] BTRFS info (device loop5): setting nodatacow, compression disabled
[  787.485639][T10996] BTRFS info (device loop5): max_inline at 0
[  787.491728][T10996] BTRFS info (device loop5): using free space tree
[  787.498240][T10996] BTRFS info (device loop5): has skinny extents
[  787.504480][T10996] BTRFS info (device loop5): flagging fs with big metadata feature
[  789.069898][T10996] BTRFS error (device loop5): open_ctree failed: -22
[  789.406579][ T1107] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  789.782120][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  789.810252][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  790.132320][T11080] x_tables: ip6_tables: mh match: only valid for protocol 135
[  790.144234][ T1107] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  790.157829][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  790.166055][ T1107] usb 5-1: SerialNumber: syz
[  790.915335][ T1107] usb 5-1: 0:2 : does not exist
[  790.975560][ T1107] usb 5-1: USB disconnect, device number 9
[  792.087933][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  794.854339][T11133] x_tables: ip6_tables: mh match: only valid for protocol 135
[  796.906523][ T9050] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  797.926567][ T9050] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  798.066498][ T9050] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  798.206539][ T9050] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  798.215856][ T9050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  798.254729][ T9050] usb 2-1: SerialNumber: syz
[  799.381518][ T9050] usb 2-1: 0:2 : does not exist
[  799.450009][ T9050] usb 2-1: USB disconnect, device number 11
[  800.588481][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  800.776698][ T4220] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  801.167089][ T4220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  801.307626][ T4220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  801.776468][ T4220] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  801.806465][ T4220] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  801.903904][T11190] x_tables: ip6_tables: mh match: only valid for protocol 135
[  801.933439][ T4220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.777123][ T4220] usb 5-1: config 0 descriptor??
[  803.026716][ T4220] usbhid 5-1:0.0: can't add hid device: -71
[  803.032719][ T4220] usbhid: probe of 5-1:0.0 failed with error -71
[  803.079987][ T4220] usb 5-1: USB disconnect, device number 10
[  803.141023][T11203] loop6: detected capacity change from 0 to 2048
[  803.212651][T11212] fuse: Unknown parameter 'grou00000000000000000000'
[  803.605614][T11203] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  804.116841][T11202] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1708: bg 0: block 234: padding at end of block bitmap is not set
[  804.688371][T11235] binder: 11222:11235 ioctl 4018620d 0 returned -22
[  804.826578][   T13] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  805.237092][   T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  805.273972][   T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  805.465902][T11254] xt_CT: You must specify a L4 protocol and not use inversions on it
[  806.396563][   T13] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  806.463159][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  806.502076][   T13] usb 3-1: SerialNumber: syz
[  806.591680][T11263] loop6: detected capacity change from 0 to 128
[  806.721276][T11268] x_tables: ip6_tables: mh match: only valid for protocol 135
[  807.448178][T11060] Bluetooth: hci1: command 0x0406 tx timeout
[  807.479327][   T13] usb 3-1: 0:2 : does not exist
[  808.229229][   T13] usb 3-1: USB disconnect, device number 14
[  808.548758][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  808.555132][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  810.008451][T11278] fuse: Unknown parameter 'grou00000000000000000000'
[  810.803564][   T26] audit: type=1326 audit(1749241407.770:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.5.1726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbf01f4929 code=0x0
[  810.907784][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  811.114377][T11294] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1727'.
[  812.408799][T11315] x_tables: ip6_tables: mh match: only valid for protocol 135
[  813.366470][   T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  815.069314][T11325] fuse: Unknown parameter 'grou00000000000000000000'
[  815.582519][T11336] loop6: detected capacity change from 0 to 256
[  815.727772][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  815.780846][T11336] FAT-fs (loop6): Filesystem has been set read-only
[  815.788383][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  815.797273][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  815.806095][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  815.815342][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  815.824403][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  815.835352][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  815.882740][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  815.987889][ T9050] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  816.236538][ T9050] usb 2-1: Using ep0 maxpacket: 16
[  816.377589][ T9050] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  816.556452][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  816.616904][T11336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  816.636547][   T26] audit: type=1800 audit(1749241413.590:12): pid=11336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1740" name="file1" dev="loop6" ino=1048612 res=0 errno=0
[  816.656663][    C0] vkms_vblank_simulate: vblank timer overrun
[  816.758237][ T9050] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  816.809036][ T9050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.858914][ T9050] usb 2-1: Product: syz
[  816.899090][ T9050] usb 2-1: Manufacturer: syz
[  816.916644][ T9050] usb 2-1: SerialNumber: syz
[  816.953926][ T9050] usb 2-1: config 0 descriptor??
[  817.969403][T11366] x_tables: ip6_tables: mh match: only valid for protocol 135
[  821.171911][   T13] usb 2-1: USB disconnect, device number 12
[  821.646448][   T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  822.526554][ T9050] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  822.729509][T11399] fuse: Unknown parameter 'group_i00000000000000000000'
[  822.776602][ T9050] usb 5-1: Using ep0 maxpacket: 16
[  822.826507][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  822.897193][ T9050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.947511][ T9050] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  823.021030][ T9050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.125509][ T9050] usb 5-1: config 0 descriptor??
[  823.473861][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  823.556532][   T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  823.590442][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  823.598579][   T13] usb 2-1: SerialNumber: syz
[  824.031097][   T13] usb 2-1: 0:2 : does not exist
[  824.065441][   T13] usb 2-1: USB disconnect, device number 13
[  824.817526][ T9050] usbhid 5-1:0.0: can't add hid device: -71
[  824.823530][ T9050] usbhid: probe of 5-1:0.0 failed with error -71
[  824.866657][ T9050] usb 5-1: USB disconnect, device number 11
[  826.003787][ T9051] Bluetooth: hci3: command 0x0406 tx timeout
[  826.195512][T11427] tipc: Failed to remove unknown binding: 66,1,1/4:107761047/107761049
[  826.298537][T11427] tipc: Failed to remove unknown binding: 66,1,1/4:107761047/107761049
[  826.355056][T11427] tipc: Failed to remove unknown binding: 66,1,1/4:107761047/107761049
[  826.466082][T11405] loop5: detected capacity change from 0 to 32768
[  826.534910][T11405] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1754 (11405)
[  826.691603][T11443] fuse: Unknown parameter 'group_i00000000000000000000'
[  826.890200][T11405] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  827.041499][T11405] BTRFS info (device loop5): using free space tree
[  827.135219][T11405] BTRFS info (device loop5): has skinny extents
[  828.206974][T11405] BTRFS error (device loop5): open_ctree failed: -12
[  830.836437][ T1325] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  831.103790][T11516] fuse: Unknown parameter 'group_i00000000000000000000'
[  831.226663][ T1325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  831.783181][ T1325] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  831.876903][ T1325] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  831.940445][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  832.431710][ T1325] usb 6-1: SerialNumber: syz
[  832.724897][ T1325] usb 6-1: 0:2 : does not exist
[  832.798194][ T1325] usb 6-1: USB disconnect, device number 7
[  832.830537][T11532] loop5: detected capacity change from 0 to 2048
[  833.089132][T11536] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  833.233113][T11538] ubi: mtd0 is already attached to ubi31
[  834.212349][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  834.239379][   T26] audit: type=1800 audit(1749241431.210:13): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1782" name="file1" dev="loop5" ino=16 res=0 errno=0
[  835.631257][T11555] device team_slave_0 entered promiscuous mode
[  835.638188][T11555] device team_slave_1 entered promiscuous mode
[  836.706850][T11563] fuse: Unknown parameter 'group_id00000000000000000000'
[  838.686521][ T1107] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  838.939672][T11577] tipc: Started in network mode
[  838.944610][T11577] tipc: Node identity 4, cluster identity 4711
[  838.951324][T11577] tipc: Node number set to 4
[  839.336721][ T1107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  839.365657][ T1107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  839.536713][ T1107] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  839.660454][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  839.692909][ T1107] usb 6-1: SerialNumber: syz
[  839.746610][ T1107] usb 6-1: can't set config #1, error -71
[  839.792005][ T1107] usb 6-1: USB disconnect, device number 8
[  842.879486][T11608] fuse: Unknown parameter 'group_id00000000000000000000'
[  845.732284][   T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  847.096537][   T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  847.266479][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  847.333240][T11643] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  847.367058][   T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  847.526026][T11649] fuse: Unknown parameter 'group_id00000000000000000000'
[  848.303429][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  848.372277][   T13] usb 5-1: SerialNumber: syz
[  848.385515][T11655] loop6: detected capacity change from 0 to 128
[  848.426519][   T13] usb 5-1: can't set config #1, error -71
[  848.464084][   T13] usb 5-1: USB disconnect, device number 12
[  848.720889][T11655] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  848.972039][T11655] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  851.022935][T11677] x_tables: ip6_tables: mh match: only valid for protocol 135
[  851.789573][T11655] fscrypt: Error allocating hmac(sha512): -2
[  853.177164][T11701] loop6: detected capacity change from 0 to 512
[  853.240087][T11702] mkiss: ax0: crc mode is auto.
[  853.298709][T11709] fuse: Bad value for 'user_id'
[  853.686597][T11062] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  853.696537][T11701] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,norecovery,noload,errors=remount-ro,dioread_lock,. Quota mode: writeback.
[  853.925099][T11701] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  854.000793][T11701] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #2: comm syz.6.1824: corrupted inode contents
[  854.018654][T11701] EXT4-fs (loop6): Remounting filesystem read-only
[  854.027098][T11701] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #2: comm syz.6.1824: mark_inode_dirty error
[  854.040461][T11701] EXT4-fs (loop6): Remounting filesystem read-only
[  854.049851][T11701] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #2: comm syz.6.1824: corrupted inode contents
[  854.062147][T11701] EXT4-fs (loop6): Remounting filesystem read-only
[  854.069907][T11701] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1824: mark_inode_dirty error
[  854.093636][T11701] EXT4-fs (loop6): Remounting filesystem read-only
[  854.241222][T11062] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  854.263145][T11062] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  855.096822][T11726] xt_CT: You must specify a L4 protocol and not use inversions on it
[  855.816475][T11062] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  855.836467][T11062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  855.844485][T11062] usb 6-1: SerialNumber: syz
[  856.003076][T11732] loop6: detected capacity change from 0 to 1024
[  856.171404][T11062] usb 6-1: 0:2 : does not exist
[  856.477651][T11062] usb 6-1: USB disconnect, device number 9
[  856.777410][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  857.106475][T11741] capability: warning: `syz.5.1837' uses deprecated v2 capabilities in a way that may be insecure
[  859.504183][ T1325] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  861.606540][ T1325] usb 3-1: device descriptor read/all, error -71
[  862.016619][T11788] xt_CT: You must specify a L4 protocol and not use inversions on it
[  864.456112][T11804] kAFS: unparsable volume name
[  866.072191][T11810] loop6: detected capacity change from 0 to 512
[  869.508736][T11810] EXT4-fs warning (device loop6): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop6.
[  869.991662][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  870.002694][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  870.639197][ T1325] libceph: connect (1)[c::]:6789 error -101
[  870.646092][ T1325] libceph: mon0 (1)[c::]:6789 connect error
[  870.659629][ T1325] libceph: connect (1)[c::]:6789 error -101
[  870.674977][ T1325] libceph: mon0 (1)[c::]:6789 connect error
[  870.758166][T11842] ceph: No mds server is up or the cluster is laggy
[  870.938386][ T1325] libceph: connect (1)[c::]:6789 error -101
[  870.944516][ T1325] libceph: mon0 (1)[c::]:6789 connect error
[  873.191665][T11060] libceph: connect (1)[c::]:6789 error -101
[  873.197842][T11060] libceph: mon0 (1)[c::]:6789 connect error
[  875.065935][T11062] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  875.366724][T11062] Bluetooth: hci0: Injecting HCI hardware error event
[  875.462974][ T8143] Bluetooth: hci0: hardware error 0x00
[  879.339649][ T4185] Bluetooth: hci0: unexpected event for opcode 0x0c1a
[  880.463670][T11938] input: syz1 as /devices/virtual/input/input20
[  880.665103][T11917] loop5: detected capacity change from 0 to 32768
[  881.626804][T11953] netlink: 'syz.4.1893': attribute type 1 has an invalid length.
[  882.006649][T11959] x_tables: ip6_tables: mh match: only valid for protocol 135
[  884.439959][T11974] loop6: detected capacity change from 0 to 2048
[  884.572316][T11974] EXT4-fs (loop6): inline encryption not supported
[  884.603438][T11974] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  884.632652][T11974] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  884.787187][T11974] EXT4-fs (loop6): Unrecognized mount option "audit" or missing value
[  885.026424][T11988] binder: BINDER_SET_CONTEXT_MGR already set
[  885.032639][T11988] binder: 11983:11988 ioctl 4018620d 200000000040 returned -16
[  885.816642][T11986] netlink: 'syz.2.1905': attribute type 1 has an invalid length.
[  886.473766][T12005] x_tables: ip6_tables: mh match: only valid for protocol 135
[  889.190442][T12017] loop5: detected capacity change from 0 to 512
[  889.286435][T12017] EXT4-fs (loop5): Unrecognized mount option "permit_directio" or missing value
[  889.728013][T12031] binder: BINDER_SET_CONTEXT_MGR already set
[  889.734217][T12031] binder: 12024:12031 ioctl 4018620d 200000000040 returned -16
[  891.550874][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1915'.
[  892.286978][T12017] loop5: detected capacity change from 0 to 2048
[  892.506455][ T1325] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  892.558612][T12042] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  894.414313][T12054] x_tables: ip6_tables: mh match: only valid for protocol 135
[  894.826840][T12060] 
[  894.829253][T12060] ======================================================
[  894.836276][T12060] WARNING: possible circular locking dependency detected
[  894.843313][T12060] 5.15.185-syzkaller #0 Not tainted
[  894.848509][T12060] ------------------------------------------------------
[  894.855531][T12060] syz.1.1922/12060 is trying to acquire lock:
[  894.861604][T12060] ffff888062702790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  894.869990][T12060] 
[  894.869990][T12060] but task is already holding lock:
[  894.877355][T12060] ffff888029f38460 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5b2/0xec0
[  894.886016][T12060] 
[  894.886016][T12060] which lock already depends on the new lock.
[  894.886016][T12060] 
[  894.896435][T12060] 
[  894.896435][T12060] the existing dependency chain (in reverse order) is:
[  894.905460][T12060] 
[  894.905460][T12060] -> #7 (sb_writers#3){.+.+}-{0:0}:
[  894.912977][T12060]        lo_write_bvec+0x193/0x770
[  894.918294][T12060]        loop_process_work+0x1d62/0x2480
[  894.923947][T12060]        process_one_work+0x863/0x1000
[  894.929426][T12060]        worker_thread+0xaa8/0x12a0
[  894.934643][T12060]        kthread+0x436/0x520
[  894.939247][T12060]        ret_from_fork+0x1f/0x30
[  894.944209][T12060] 
[  894.944209][T12060] -> #6 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}:
[  894.953615][T12060]        process_one_work+0x7bf/0x1000
[  894.959092][T12060]        worker_thread+0xaa8/0x12a0
[  894.964315][T12060]        kthread+0x436/0x520
[  894.968931][T12060]        ret_from_fork+0x1f/0x30
[  894.973889][T12060] 
[  894.973889][T12060] -> #5 ((wq_completion)loop5){+.+.}-{0:0}:
[  894.981992][T12060]        flush_workqueue+0x142/0x1380
[  894.987397][T12060]        drain_workqueue+0xcf/0x380
[  894.992607][T12060]        destroy_workqueue+0x7b/0xb20
[  894.997988][T12060]        __loop_clr_fd+0x234/0xb90
[  895.003117][T12060]        blkdev_put+0x53f/0x7d0
[  895.007981][T12060]        blkdev_close+0x76/0xa0
[  895.012840][T12060]        __fput+0x234/0x930
[  895.017355][T12060]        task_work_run+0x125/0x1a0
[  895.022488][T12060]        exit_to_user_mode_loop+0x10f/0x130
[  895.028398][T12060]        exit_to_user_mode_prepare+0xb1/0x140
[  895.034482][T12060]        syscall_exit_to_user_mode+0x16/0x40
[  895.040477][T12060]        do_syscall_64+0x58/0xa0
[  895.045430][T12060]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  895.051878][T12060] 
[  895.051878][T12060] -> #4 (&lo->lo_mutex){+.+.}-{3:3}:
[  895.059368][T12060]        __mutex_lock_common+0x1eb/0x2390
[  895.065121][T12060]        mutex_lock_killable_nested+0x17/0x20
[  895.071206][T12060]        lo_open+0x6a/0x100
[  895.075735][T12060]        blkdev_get_whole+0x90/0x390
[  895.081039][T12060]        blkdev_get_by_dev+0x2d0/0xa60
[  895.086516][T12060]        blkdev_open+0x12d/0x2c0
[  895.091471][T12060]        do_dentry_open+0x7ff/0xf80
[  895.096794][T12060]        path_openat+0x2682/0x2f30
[  895.101933][T12060]        do_filp_open+0x1b3/0x3e0
[  895.106980][T12060]        do_sys_openat2+0x142/0x4a0
[  895.112221][T12060]        __x64_sys_openat+0x135/0x160
[  895.117614][T12060]        do_syscall_64+0x4c/0xa0
[  895.122663][T12060]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  895.129199][T12060] 
[  895.129199][T12060] -> #3 (&disk->open_mutex){+.+.}-{3:3}:
[  895.137057][T12060]        __mutex_lock_common+0x1eb/0x2390
[  895.142805][T12060]        mutex_lock_nested+0x17/0x20
[  895.148111][T12060]        blkdev_get_by_dev+0x157/0xa60
[  895.153569][T12060]        swsusp_check+0x9b/0x2a0
[  895.158506][T12060]        software_resume+0xc6/0x3b0
[  895.163737][T12060]        resume_store+0xe4/0x130
[  895.168668][T12060]        kernfs_fop_write_iter+0x379/0x4c0
[  895.174463][T12060]        vfs_write+0x712/0xd00
[  895.179226][T12060]        ksys_write+0x14d/0x250
[  895.184067][T12060]        do_syscall_64+0x4c/0xa0
[  895.188996][T12060]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  895.195406][T12060] 
[  895.195406][T12060] -> #2 (system_transition_mutex/1){+.+.}-{3:3}:
[  895.203914][T12060]        __mutex_lock_common+0x1eb/0x2390
[  895.209628][T12060]        mutex_lock_nested+0x17/0x20
[  895.214904][T12060]        software_resume+0x7c/0x3b0
[  895.220094][T12060]        resume_store+0xe4/0x130
[  895.225030][T12060]        kernfs_fop_write_iter+0x379/0x4c0
[  895.230826][T12060]        vfs_write+0x712/0xd00
[  895.235678][T12060]        ksys_write+0x14d/0x250
[  895.240605][T12060]        do_syscall_64+0x4c/0xa0
[  895.245708][T12060]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  895.252122][T12060] 
[  895.252122][T12060] -> #1 (&of->mutex){+.+.}-{3:3}:
[  895.259330][T12060]        __mutex_lock_common+0x1eb/0x2390
[  895.265049][T12060]        mutex_lock_nested+0x17/0x20
[  895.270330][T12060]        kernfs_seq_start+0x51/0x3c0
[  895.275612][T12060]        seq_read_iter+0x3c4/0xd50
[  895.280713][T12060]        vfs_read+0x725/0xcf0
[  895.285387][T12060]        ksys_read+0x14d/0x250
[  895.290140][T12060]        do_syscall_64+0x4c/0xa0
[  895.295182][T12060]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  895.301628][T12060] 
[  895.301628][T12060] -> #0 (&p->lock){+.+.}-{3:3}:
[  895.308666][T12060]        __lock_acquire+0x2c33/0x7c60
[  895.314034][T12060]        lock_acquire+0x197/0x3f0
[  895.319050][T12060]        __mutex_lock_common+0x1eb/0x2390
[  895.324760][T12060]        mutex_lock_nested+0x17/0x20
[  895.330036][T12060]        seq_read_iter+0xad/0xd50
[  895.335049][T12060]        generic_file_splice_read+0x3a2/0x590
[  895.341104][T12060]        splice_direct_to_actor+0x413/0xb50
[  895.346986][T12060]        do_splice_direct+0x1b9/0x2c0
[  895.352437][T12060]        do_sendfile+0x5d5/0xec0
[  895.357458][T12060]        __se_sys_sendfile64+0x13b/0x190
[  895.363084][T12060]        do_syscall_64+0x4c/0xa0
[  895.368017][T12060]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  895.374773][T12060] 
[  895.374773][T12060] other info that might help us debug this:
[  895.374773][T12060] 
[  895.384987][T12060] Chain exists of:
[  895.384987][T12060]   &p->lock --> (work_completion)(&lo->rootcg_work) --> sb_writers#3
[  895.384987][T12060] 
[  895.398976][T12060]  Possible unsafe locking scenario:
[  895.398976][T12060] 
[  895.406411][T12060]        CPU0                    CPU1
[  895.411759][T12060]        ----                    ----
[  895.417105][T12060]   lock(sb_writers#3);
[  895.421282][T12060]                                lock((work_completion)(&lo->rootcg_work));
[  895.429943][T12060]                                lock(sb_writers#3);
[  895.436611][T12060]   lock(&p->lock);
[  895.440416][T12060] 
[  895.440416][T12060]  *** DEADLOCK ***
[  895.440416][T12060] 
[  895.448539][T12060] 1 lock held by syz.1.1922/12060:
[  895.453631][T12060]  #0: ffff888029f38460 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5b2/0xec0
[  895.462673][T12060] 
[  895.462673][T12060] stack backtrace:
[  895.468561][T12060] CPU: 1 PID: 12060 Comm: syz.1.1922 Not tainted 5.15.185-syzkaller #0
[  895.476959][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  895.487008][T12060] Call Trace:
[  895.490275][T12060]  <TASK>
[  895.493222][T12060]  dump_stack_lvl+0x168/0x230
[  895.497891][T12060]  ? load_image+0x3b0/0x3b0
[  895.502390][T12060]  ? show_regs_print_info+0x20/0x20
[  895.507575][T12060]  ? print_circular_bug+0x12b/0x1a0
[  895.512763][T12060]  check_noncircular+0x274/0x310
[  895.517686][T12060]  ? add_chain_block+0x940/0x940
[  895.522610][T12060]  ? lockdep_lock+0xdc/0x1e0
[  895.527204][T12060]  ? verify_lock_unused+0x140/0x140
[  895.532394][T12060]  ? __lock_acquire+0x12d9/0x7c60
[  895.537405][T12060]  ? mark_lock+0x94/0x320
[  895.541722][T12060]  __lock_acquire+0x2c33/0x7c60
[  895.546567][T12060]  ? mark_lock+0x94/0x320
[  895.550887][T12060]  ? verify_lock_unused+0x140/0x140
[  895.556090][T12060]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  895.562077][T12060]  ? lock_chain_count+0x20/0x20
[  895.566918][T12060]  ? mark_lock+0x94/0x320
[  895.571241][T12060]  lock_acquire+0x197/0x3f0
[  895.575731][T12060]  ? seq_read_iter+0xad/0xd50
[  895.580391][T12060]  ? __switch_to_asm+0x34/0x60
[  895.585147][T12060]  ? __schedule+0x11c0/0x43b0
[  895.589818][T12060]  ? __might_sleep+0xf0/0xf0
[  895.594394][T12060]  ? read_lock_is_recursive+0x10/0x10
[  895.599754][T12060]  ? verify_lock_unused+0x140/0x140
[  895.604943][T12060]  ? is_bpf_text_address+0x254/0x270
[  895.610220][T12060]  ? seq_read_iter+0xad/0xd50
[  895.614883][T12060]  __mutex_lock_common+0x1eb/0x2390
[  895.620069][T12060]  ? seq_read_iter+0xad/0xd50
[  895.624734][T12060]  ? release_firmware_map_entry+0x190/0x190
[  895.630617][T12060]  ? mutex_lock_io_nested+0x60/0x60
[  895.635818][T12060]  ? rcu_lock_release+0x5/0x20
[  895.640570][T12060]  ? __lock_acquire+0x7c60/0x7c60
[  895.645685][T12060]  mutex_lock_nested+0x17/0x20
[  895.650437][T12060]  seq_read_iter+0xad/0xd50
[  895.654932][T12060]  ? memset+0x1e/0x40
[  895.658900][T12060]  generic_file_splice_read+0x3a2/0x590
[  895.664441][T12060]  ? splice_shrink_spd+0xc0/0xc0
[  895.669377][T12060]  ? common_file_perm+0x171/0x1c0
[  895.674400][T12060]  ? fsnotify_perm+0x254/0x560
[  895.679157][T12060]  splice_direct_to_actor+0x413/0xb50
[  895.684536][T12060]  ? do_splice_direct+0x2c0/0x2c0
[  895.689645][T12060]  ? pipe_to_sendpage+0x310/0x310
[  895.694670][T12060]  ? common_file_perm+0x171/0x1c0
[  895.699688][T12060]  ? fsnotify_perm+0x5d/0x560
[  895.704357][T12060]  ? security_file_permission+0x75/0xa0
[  895.709893][T12060]  do_splice_direct+0x1b9/0x2c0
[  895.714764][T12060]  ? splice_direct_to_actor+0xb50/0xb50
[  895.720306][T12060]  ? rcu_read_lock_any_held+0xb0/0x120
[  895.725757][T12060]  ? common_file_perm+0x171/0x1c0
[  895.730795][T12060]  do_sendfile+0x5d5/0xec0
[  895.735214][T12060]  ? do_pwritev+0x340/0x340
[  895.739710][T12060]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  895.745331][T12060]  __se_sys_sendfile64+0x13b/0x190
[  895.750435][T12060]  ? __x64_sys_sendfile64+0xa0/0xa0
[  895.755623][T12060]  ? syscall_enter_from_user_mode+0x2a/0x70
[  895.761508][T12060]  do_syscall_64+0x4c/0xa0
[  895.765915][T12060]  ? clear_bhb_loop+0x30/0x80
[  895.770577][T12060]  ? clear_bhb_loop+0x30/0x80
[  895.775241][T12060]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  895.781140][T12060] RIP: 0033:0x7fa8eafa7929
[  895.785546][T12060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  895.805147][T12060] RSP: 002b:00007fa8e8dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  895.813561][T12060] RAX: ffffffffffffffda RBX: 00007fa8eb1cf160 RCX: 00007fa8eafa7929
[  895.821529][T12060] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007
[  895.829521][T12060] RBP: 00007fa8eb029b39 R08: 0000000000000000 R09: 0000000000000000
[  895.837489][T12060] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000
[  895.845456][T12060] R13: 0000000000000000 R14: 00007fa8eb1cf160 R15: 00007ffe03d5a828
[  895.853429][T12060]  </TASK>