last executing test programs:

2m40.19592141s ago: executing program 2 (id=516):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x121e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x0, "b7e31a19"}]}}, 0x0}, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'r\x00'}, 0x8)

2m36.966579799s ago: executing program 2 (id=524):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x1ce2, &(0x7f0000000300)={0x0, 0x1, 0x800, 0x0, 0x200250})
r1 = syz_usb_connect(0x6, 0x24, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=@deltfilter={0x848, 0x2d, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x5, 0x4}, {0xffff, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x2, 0x3, 0x7fffffff, 0x84, 0xffffff7f, 0x80000000, 0x7fff, 0x4, 0x80, 0x9, 0x3, 0x3, 0x4, 0x8001, 0x4, 0x6, 0x9, 0x4, 0x3ff, 0x7, 0x18000000, 0x9, 0x0, 0x4, 0xe2, 0x1, 0xfffffffc, 0x1, 0x883, 0x5, 0x4, 0xa, 0xfffffffe, 0x60, 0x4, 0x10000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, 0x401, 0x5, 0x0, 0x5, 0x81, 0x6b, 0x9, 0x626a29e7, 0x8, 0x6, 0x9, 0x0, 0x5, 0x9, 0x1, 0x6, 0x0, 0x2, 0x19, 0x140, 0x4000000, 0x5, 0xa6e, 0x100, 0x5, 0x10, 0x1ff, 0x5, 0xffffffff, 0xfffffffd, 0x3, 0xf2a, 0xfffffff8, 0x4, 0x31, 0x7ff, 0xe49c, 0xa74, 0x3, 0x5, 0x401, 0x47, 0x3, 0xc, 0x48, 0x20004, 0x2, 0x193, 0xf, 0x5, 0x9f, 0x8001, 0x1a0c, 0x8, 0x3, 0xe7b, 0x7, 0xf, 0xde, 0x7, 0x7, 0x8, 0x3, 0x88, 0xf2, 0x800, 0x40, 0xd56, 0x0, 0x4, 0x5, 0x7fffffff, 0x5, 0x8, 0x3, 0x3, 0x20003, 0x6, 0x2dfe, 0x2, 0x7, 0x5, 0x6, 0xfffffffe, 0xc, 0x10001, 0x80000000, 0x0, 0x74, 0xd51, 0x81, 0x0, 0x10, 0x200, 0x7e, 0xe, 0x200004, 0x3, 0x7083, 0x9, 0x3, 0x6, 0x5, 0x6, 0x1000, 0x8, 0x7ff, 0x1175, 0x6, 0xa, 0x1, 0xc, 0x4, 0xfffffff9, 0xffff, 0x1000, 0xffffffff, 0x5, 0xfffffff7, 0x1, 0x3, 0x3, 0x28, 0x0, 0x200, 0x57c7, 0x8, 0x10000000, 0x6, 0x9, 0x8, 0x1, 0x9, 0xfff, 0x3, 0x8001, 0x0, 0x7, 0xa5, 0x3, 0x4, 0x22, 0x800, 0x4, 0xfff, 0xfffffff8, 0x9, 0x3, 0x7, 0x3, 0x0, 0xa, 0xfffffffe, 0x7, 0x8, 0x9, 0x7f, 0x539, 0x10001, 0x8, 0x10e1, 0x8, 0x3, 0x0, 0x200, 0x0, 0x6, 0x4, 0x6, 0x6, 0x25, 0x1, 0x5, 0x10000, 0x7f, 0xfffffffc, 0xfffffffd, 0x400, 0x3ff, 0x0, 0x1000, 0xffff, 0x66e, 0x2, 0x8f, 0x6, 0xfffeffff, 0x9, 0x6, 0x8, 0x6, 0x7, 0x2, 0x4, 0x73, 0x45, 0x7, 0x6, 0x200, 0x6, 0x0, 0x7ff, 0x40, 0x3, 0x5, 0x1, 0x7, 0x7, 0x0, 0x8, 0x6, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x0, 0x7f, 0x2, 0x8, 0x6, 0x3, 0x80, 0x9, 0x1000, 0x8, 0x401, 0x1, 0x2, 0x2, 0x1, 0x3, 0x6, 0x2, 0x6, 0x3, 0x2, 0x9, 0x9, 0x2991, 0x0, 0xd2, 0x0, 0x7, 0x5, 0xffff8001, 0x4, 0x9, 0x8, 0x4000000, 0x4, 0x9, 0x7, 0x3, 0x5, 0x9, 0xac, 0x0, 0x8, 0x7646, 0x40, 0x4, 0x0, 0x2, 0x4, 0x1ff, 0x7, 0x7, 0x40, 0xb0, 0x7f, 0xae7, 0x1, 0x1, 0x5, 0x3, 0x6, 0xffff, 0x3, 0x2, 0x9, 0x6bdfbae7, 0x7, 0x1, 0x2, 0x9, 0x8, 0x1, 0x6bd1, 0x100, 0x7, 0x80000001, 0x800, 0x9, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x9, 0x9, 0x6698211, 0xfffffffa, 0x0, 0x5, 0x2, 0x8, 0x3, 0x81, 0x1, 0x9, 0x1000, 0x8, 0x6c, 0x9, 0xe, 0x2, 0x80000000, 0x2, 0xffffffff, 0xfffffffc, 0x4, 0x4, 0x9, 0x9, 0x3ff, 0x4, 0x100, 0x2, 0xd0be, 0x5, 0x36508, 0xffffff1d, 0xfffffff9, 0x400, 0xfffffffe, 0x9, 0x2, 0x6, 0x401, 0x80, 0x1, 0x55, 0x7, 0x1e, 0xf, 0x8, 0xfff, 0x1, 0x8, 0x6, 0x18, 0x8001, 0x3, 0x9, 0x1ff, 0x77, 0x100, 0xfffffffe, 0xc, 0x10000, 0x35, 0x3, 0x8, 0x7fffffff, 0xffff8000, 0x7, 0x568, 0x5b2c958b, 0x1, 0x1, 0x7, 0x3, 0x80000001, 0x9, 0x2, 0x1, 0xff, 0x4, 0x4, 0x7d2e, 0x8000, 0xb086, 0xa1d, 0x8000, 0xffffff20, 0x8, 0x2f, 0x622f, 0x4, 0x2, 0xff, 0x1, 0xda61, 0x6, 0x5, 0x10, 0x7, 0x27, 0x6, 0x1, 0x1, 0x10a, 0xfffeffff, 0xd, 0x0, 0x0, 0x80000000, 0x461, 0x80000001, 0x7, 0x0, 0x3, 0x0, 0x7fffffff, 0xb, 0x0, 0x4, 0x4, 0x8, 0x3, 0xff, 0x7, 0xffff, 0x4, 0x4, 0x8000, 0x8, 0xb2, 0x8000, 0x8, 0x4, 0x3ff, 0x53079775, 0x1, 0x8, 0x6, 0x7000, 0x3ff, 0x2, 0x7, 0x4, 0x4, 0xe74, 0x9, 0x8, 0x4, 0x4, 0x10, 0x2, 0x1, 0x101, 0x6, 0x3, 0x7, 0x0, 0x0, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x6, 0x203, 0x24000, 0x10000, 0xa7, 0x8, 0x54, 0x3]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850004002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001814010000000000cd0000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x8010)

2m34.283777376s ago: executing program 2 (id=530):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2002"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5170000000000000000000200000000000000000000000700008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x3)

2m33.537678625s ago: executing program 2 (id=532):
io_uring_setup(0xdac, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$binfmt_misc(r2, &(0x7f0000000400)="d0d2e4eba60b695dc69f6b732401629dd4744862bf0d0ebc26aa05d693b3575e79b2af53fbc88513743ce744e5020f4ed9630114a77b6c8be424cd588b4b02fcffffffffffffff08f2069d17324c7947e38f01cf03f0ba2198360eae3edc22fc050000ed83a3c7a7c600000000001884b04d40170ff9f94d012661389a4c792dc5505978ae7f0c0bfebf3efc596546e7108f5736cd3e36838b6a3beb8bcbf2f0653cfcec70edc01e2dcb18b82ed75fdf229834defbdc56f3a640db50f10207c419754d750253cae2d37ace8b7b0176e9389041ba0ee5f86963353104bda6a414fd23", 0xe2)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c0000"])
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r6 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r7 = fsmount(r6, 0x0, 0x0)
tkill(0x0, 0xb)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r6, @ANYRESDEC=r7, @ANYRESOCT=0x0, @ANYBLOB="8338c1ad4a9fd8f2568c97af7e73fba614984088dd5d2d95d0daee20f8d931fce32503e1fa4c0036e1464c43e0c88a692bedf790594c2384858fbac25b15978800c351e4eec7af2809a2478969db30840a47733a96259e42be913f34ca6f008daea6e3245b44d9129bc0bea0954b6597e952a757779c85ea7b7ba85baa19a8ab02367fd0b89fbfa0a014ecab3bfb774b0c2366", @ANYRESHEX=r5], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008001)

2m32.203245699s ago: executing program 2 (id=535):
r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x6d89, 0x800, 0x1, 0x1f9}, &(0x7f0000000580)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(0xffffffffffffffff, &(0x7f0000000040)="07000000010001", 0x7)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)="5c123958a5d3a2d11df2610599e6ff67b07b13f214d204e8cfe3875e39f688b2fb742bf571539070f8f0b7ab613d435e2db3e299c7199f17235618764dd1be7fad8b56d417eb07163c7bd87651fe8b8774e8e5ab68533953c63868dd594232a2f4a179ff8a1c97d968ece3815b8f9d9de12eca268d468cdd110e3d7143f42b5a4084a6f3b4288142c3db411fd90736d3d12a4454ef3ccbe896b653a3888d3655e1330caa535fdc23c98880544e3782e7d2099eee3b01b7aed8798e59429e1e8bbbbe86639bae436a87827d7ff50aa5936f105cdad3920f278810c24a", 0xdc, 0x10160})
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)

2m32.018987624s ago: executing program 2 (id=537):
socket$inet6(0xa, 0x6, 0x0)
r0 = syz_io_uring_setup(0x6444, &(0x7f0000000080)={0x0, 0x0, 0x11104}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r6)
r7 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r6)
add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000003c0)="d527f150224a167550db3baf9a3414ee3bdf1bdf7324dd07df7c0146bbf4ca73b5f2927fa03ad1037cfec679e22bf240d5a9442463cfcc9845468fcdb31361ed4c0098d4f714ad91edd21edfd89669273bb5d81b26329ee334db8b52ea7a247a5aa4f533362550959ec29b13e8329c3c073189f3a14c8ebef7d459040213d752789476af21efe898d08d42ab5bc73bb44f3f5718159a45f57e0bf678965ff05e0221acce00e5ebc1236b6345744bcbe013a301d9fe5cf12c073aebc7f0929e33012936d6aeb5c7472b44dc3bea142580d9167fdf016f9f7da9", 0xffffff0f, r7)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x1c443, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000100)=0x9, 0x4)
r8 = socket(0x2b, 0x80801, 0x1)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0x4, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2a, 0x31, 0x58, 0x8, 0x1415, 0x2000, 0xcf52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x9, 0x7, 0xb0, 0x2, [{{0x9, 0x4, 0x88, 0xfe, 0x0, 0xb, 0x4, 0x19, 0x8}}, {{0x9, 0x4, 0x3c, 0x2, 0x0, 0x69, 0x6f, 0x77, 0x7}}]}}]}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2m15.49384153s ago: executing program 32 (id=537):
socket$inet6(0xa, 0x6, 0x0)
r0 = syz_io_uring_setup(0x6444, &(0x7f0000000080)={0x0, 0x0, 0x11104}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r6)
r7 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r6)
add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000003c0)="d527f150224a167550db3baf9a3414ee3bdf1bdf7324dd07df7c0146bbf4ca73b5f2927fa03ad1037cfec679e22bf240d5a9442463cfcc9845468fcdb31361ed4c0098d4f714ad91edd21edfd89669273bb5d81b26329ee334db8b52ea7a247a5aa4f533362550959ec29b13e8329c3c073189f3a14c8ebef7d459040213d752789476af21efe898d08d42ab5bc73bb44f3f5718159a45f57e0bf678965ff05e0221acce00e5ebc1236b6345744bcbe013a301d9fe5cf12c073aebc7f0929e33012936d6aeb5c7472b44dc3bea142580d9167fdf016f9f7da9", 0xffffff0f, r7)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x1c443, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000100)=0x9, 0x4)
r8 = socket(0x2b, 0x80801, 0x1)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0x4, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2a, 0x31, 0x58, 0x8, 0x1415, 0x2000, 0xcf52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x9, 0x7, 0xb0, 0x2, [{{0x9, 0x4, 0x88, 0xfe, 0x0, 0xb, 0x4, 0x19, 0x8}}, {{0x9, 0x4, 0x3c, 0x2, 0x0, 0x69, 0x6f, 0x77, 0x7}}]}}]}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

14.37809059s ago: executing program 4 (id=941):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
close(r1)

14.224113199s ago: executing program 4 (id=942):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000100)={0x2, 0x0, [0x7fffffffffffffff, 0x8000000000000000, 0x7fffffff, 0x4, 0x5, 0xc000000000000, 0x8000000000000000, 0xc5d]}) (async)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff}) (async)
ioprio_set$uid(0x3, 0x0, 0x0) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0xfe, 0x0, 0x0, r2, 0x0}])
r4 = socket(0x10, 0x80002, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001f540)={0x18, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="18350000030000000000000000000000a260251085066f3ed3212930e3fdaa4f99006c45c95d4e1eba28e92d5a53ad7dd17de4e9fe24749e9f1752eb56909e54c743c6f999c53e2b42d7eb7e16911da9a11f492bd9cac7a4"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x45, &(0x7f0000000280)=""/69, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x0, 0x53553bae}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) (async)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (rerun: 64)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) (async, rerun: 64)
r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, <r8=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r8, 0x0, '\x00', 0x1ffffffffffffd64, 0x20}) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async, rerun: 32)
r9 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

13.432036899s ago: executing program 0 (id=943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newlink={0x48, 0x10, 0xf05aca9da8f90d41, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6089}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}]}, 0x48}}, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x4, 0xfffffffc) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x33, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000054a000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gretap0\x00'}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13.356093181s ago: executing program 1 (id=944):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x50009405, &(0x7f0000000080))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1fffffffffffd)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r8, r8, 0x0, 0x40000f63c)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[])

13.355144676s ago: executing program 3 (id=945):
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000280)={'macsec0\x00', {0x2, 0x0, @empty}})
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002300)={0x60, 0x0, r4, {{0xd97, 0xe3a5, 0x8, 0x3, 0x3, 0xb62, 0x1, 0x378f}}}, 0x60)
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002500)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002540)={r2, 0x9, 0xe8ef5a298dbe301b}, 0xc)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002580)={r2, 0x3, 0x10}, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=@bloom_filter={0x1e, 0x5, 0x8, 0x5, 0x2000, 0xffffffffffffffff, 0x584, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xd, @void, @value, @void, @value}, 0x50)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002680)=@o_path={&(0x7f0000002640)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002740)={{r5, <r11=>0xffffffffffffffff}, &(0x7f00000026c0), &(0x7f0000002700)}, 0x20)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002780)={r2, 0x7ff, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0xa, 0x5, &(0x7f0000002380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f00000023c0)='GPL\x00', 0x6, 0xff, &(0x7f0000002400)=""/255, 0x100, 0x2, '\x00', r3, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000027c0)=[r6, r7, r8, r9, r10, r11, r12], &(0x7f0000002800)=[{0x4, 0x2, 0x1, 0x7}, {0x5, 0x3, 0x1, 0x5}], 0x10, 0x4, @void, @value}, 0x94)
r13 = dup2(r9, r10)
accept4$tipc(r13, 0x0, &(0x7f0000002900), 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002940))
r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000004c40)={<r15=>0x0, <r16=>0x0})
recvmmsg$unix(r14, &(0x7f0000004ac0)=[{{&(0x7f00000029c0)=@abs, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002a40)=""/182, 0xb6}, {&(0x7f0000002b00)=""/75, 0x4b}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/135, 0x87}, {&(0x7f0000003c40)=""/119, 0x77}], 0x5, &(0x7f0000003d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003e00)=""/122, 0x7a}], 0x1, &(0x7f0000003ec0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r18=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000004000)=@abs, 0x6e, &(0x7f0000004100)=[{&(0x7f0000004080)=""/106, 0x6a}], 0x1, &(0x7f0000004140)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r19=>0xffffffffffffffff, 0xffffffffffffffff, <r20=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004240), 0x6e, &(0x7f0000004700)=[{&(0x7f00000042c0)=""/246, 0xf6}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/74, 0x4a}, {&(0x7f00000044c0)=""/21, 0x15}, {&(0x7f0000004500)=""/30, 0x1e}, {&(0x7f0000004540)=""/108, 0x6c}, {&(0x7f00000045c0)=""/16, 0x10}, {&(0x7f0000004600)=""/201, 0xc9}], 0x8, &(0x7f0000004780)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f0000004840), 0x0, &(0x7f0000004880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000048c0)=@abs, 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004940)=""/58, 0x3a}, {&(0x7f0000004980)=""/144, 0x90}], 0x2, &(0x7f0000004a80)=[@rights={{0x20, 0x1, 0x1, [<r21=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x6, 0x2000, &(0x7f0000004c80)={r15, r16+10000000})
r22 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004d00), r20)
sendmsg$NL80211_CMD_REQ_SET_REG(r17, &(0x7f0000004f00)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004d40)={0x168, r22, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x144, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x23}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff7f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xce}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x14}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x75839e73}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x44811)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000004f40), 0xc000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000004fc0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000004f80)={<r23=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r21, &(0x7f0000005000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, {0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0xe}, r23, 0x4}}, 0x48)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r19, 0x84, 0x1f, &(0x7f0000005100)={0x0, @in6={{0xa, 0x4e20, 0xf7e2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21}}, 0x3, 0x7f}, 0x90)

13.324352676s ago: executing program 5 (id=946):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)
sendmmsg$inet(r5, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1}}], 0x2, 0x4008440)
msgget(0x3, 0x710)
msgget(0x2, 0x624)
msgctl$IPC_RMID(0x0, 0x0)

12.977764913s ago: executing program 0 (id=947):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
r1 = syz_usbip_server_init(0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd7, 0x62, 0xac, 0x40, 0xaf0, 0x7201, 0xad9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd5, 0x5b}}]}}]}}, 0x0)
write$usbip_server(r1, &(0x7f0000003400)=ANY=[@ANYBLOB="00000003"], 0x2c5d)

12.965951004s ago: executing program 4 (id=948):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f00090504000004000000090507000004"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000a00200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000a00200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800ce6068007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000000000100c00078008000a400000ffff100007800c001480080001"], 0x74}}, 0x40800) (async)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800ce6068007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000000000100c00078008000a400000ffff100007800c001480080001"], 0x74}}, 0x40800)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r6, r7, 0x4, 0x0, 0x0, @void, @value}, 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r6, r7, 0x4, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r5}, 0x20)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_dccp(0xa, 0x6, 0x0)
socket$packet(0x11, 0xa, 0x300) (async)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
close(r5) (async)
close(r5)
r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x8)
execveat(r9, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={[&(0x7f0000000140)='/dev/vmci\x00']}, &(0x7f0000000380)={[&(0x7f0000000200)='\xe5\x00', &(0x7f0000000240)='/dev/vmci\x00', &(0x7f0000000280)='/dev/vmci\x00', &(0x7f00000002c0)='/dev/vmci\x00', &(0x7f0000000300)='/dev/vmci\x00', &(0x7f0000000340)='/dev/vmci\x00']}, 0x800)

12.934173577s ago: executing program 3 (id=949):
io_uring_setup(0x1ce2, &(0x7f0000000080)={0x0, 0x1, 0x800, 0x0, 0x200250})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x6, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
wait4(0x0, 0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

12.210003001s ago: executing program 5 (id=950):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0x28)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x60201, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100), 0x4)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)=""/52, &(0x7f0000000040)=0x34)

11.808212613s ago: executing program 1 (id=951):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000001600007600000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
setsockopt$MRT6_DONE(r2, 0x29, 0xd0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r3 = fsopen(&(0x7f0000000300)='iso9660\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000200af501000000000000000001000000040004800900018073797a3000000000100005"], 0x84}}, 0x0) (async, rerun: 64)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async, rerun: 64)
connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async, rerun: 32)
socket(0x0, 0x0, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000004000000000000000000000000010100", @ANYRES32, @ANYBLOB="004b2055f4434400"/20, @ANYRES32=0x0, @ANYBLOB="000000000300"/24, @ANYRES32=r5, @ANYBLOB], 0x50) (async)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9c0905, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)=0xfffffffc}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
io_uring_enter(0xffffffffffffffff, 0x3f70, 0x0, 0x0, 0x0, 0x0) (async)
clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) (async)
socket$unix(0x1, 0x2, 0x0)

11.065701752s ago: executing program 5 (id=952):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
close(r1)

11.064692184s ago: executing program 1 (id=953):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$pid(0x1, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0)
sendfile(r3, r3, 0x0, 0xa)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000040))
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021)
r5 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x300, 0x62e5})

4.928913037s ago: executing program 5 (id=954):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = open(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, 0xf, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40d1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$cgroup_devices(r0, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0)
socket$netlink(0x10, 0x3, 0x12)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000691205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r3, &(0x7f0000000380), 0x0}, 0x20)

4.825523971s ago: executing program 0 (id=955):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0x6, &(0x7f0000000000))
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x33524742, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}})
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000001240)={0x0, 0x20002, 0x0, 0xfffffffc, 0x80, "001bf10000000000000020000000000000ffff"})
r7 = syz_open_pts(r6, 0x101)
r8 = dup3(r7, r6, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd)
write$UHID_INPUT(r8, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c)

4.117762105s ago: executing program 5 (id=956):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x20000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000002e00)=[{&(0x7f0000002e40)="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", 0xc7d}, {&(0x7f0000001b80)="82", 0x1}], 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

4.087769503s ago: executing program 1 (id=957):
socket$nl_route(0x10, 0x3, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x401}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
syz_open_pts(0xffffffffffffffff, 0x0) (rerun: 32)
epoll_create(0x8)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async)
chdir(&(0x7f0000000240)='./file0\x00') (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}], [{@euid_eq}, {@euid_gt}, {@smackfshat={'smackfshat', 0x3d, 'lowerdir'}}, {@smackfsdef={'smackfsdef', 0x3d, '\\['}}]}) (async)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x68cc42, 0x0)
unshare(0x60400) (async)
fdatasync(r3) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (rerun: 64)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x79cd, 0x0, 0x0, {0x2}})
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x3)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})

2.882464378s ago: executing program 1 (id=958):
r0 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
ioctl$sock_bt_hci(r2, 0x400448de, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='sched_switch\x00'}, 0x18)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r10=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x0, r10}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x100000000}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in6=@remote, 0x0, 0x0, 0x1, 0x4, 0xfffffffc}}, 0xe8)

2.553484471s ago: executing program 5 (id=959):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4, @ANYRES16=r2, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESDEC=r2], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x0, 0xda5, 0x8, 0x200}})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0xfb}, {0x1, 0x7}}}}, 0x9)
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9", @ANYRES16=r6], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bind$packet(r4, &(0x7f0000000140)={0x11, 0x4}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r9=>0x0})
bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random='`_2@Pu'}, 0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r10=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, r10}, 0x14)
syz_emit_ethernet(0x11, &(0x7f00000004c0)=ANY=[], 0x0)

2.425715611s ago: executing program 0 (id=960):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000200)={<r2=>0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000280)={<r3=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000300)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000003c0)={&(0x7f0000000340)=[r2, r3, r4], &(0x7f0000000380)=[0x5, 0x3ff, 0x5, 0x3], 0x3})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x8, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x30, 0x100}, 0x14}}, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0xc, 0x6, 0x2, 0x4, 0x401})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
socketpair(0x23, 0x5, 0x0, &(0x7f0000000240))
ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xc0e4)

2.396883168s ago: executing program 3 (id=961):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40000000000000079101c0000000000630000ff0000000095007400000000807020a6465de3c0b906eba5e9dccc8271fd21ed1e0ee5226a66d5b85b500e495b69d6fe4e470e621ff7040863c3be60dc04e56c273e15217b2ad89c1c6f1bf291572b09b17f1a569ff5ea9464f9308769992fe1a74cdd6a1ed98e9ef5046de6dd17ce847edbaed8372bd7ec513e03ba53a3cb33b817625583e092ed8e06e20bd5d6fafdbddd65a5e392bc87b5da80c2de0f8c79cd4e1b2a41fdc6f4ecb2c826f7aa164a1efc2880254e7bf066"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149282, 0x0)
ioctl$RTC_PIE_OFF(r0, 0x7006) (async, rerun: 64)
write$cgroup_int(r0, &(0x7f0000000740)=0x100000000080a, 0x12) (rerun: 64)

2.24613551s ago: executing program 4 (id=962):
mq_open(&(0x7f0000000000)='.:]-\x00', 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0xfffffffd}]}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet6_dccp(0xa, 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1388024, &(0x7f0000000280)=ANY=[@ANYBLOB='gid=', @ANYRESHEX])
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
syz_clone(0x22801100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)

1.401708684s ago: executing program 3 (id=963):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async)
r2 = dup(r1) (async)
r3 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x6, 0x0, 0x7}}) (async)
syz_create_resource$binfmt(&(0x7f0000000140)='./file0/file0\x00') (async)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x4010, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r1])
setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)

1.401324834s ago: executing program 4 (id=964):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
close(r1)

1.28083881s ago: executing program 0 (id=965):
mkdir(&(0x7f0000002880)='./file0\x00', 0x0) (async)
r0 = fanotify_init(0x10, 0x1) (async)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) (async)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02", @ANYRESDEC], 0x4, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000500100e0d0000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c0002800800070005000000"], 0x3c}}, 0x0)

1.233265135s ago: executing program 3 (id=966):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macsec0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0)
sendmmsg$inet(r5, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1}}], 0x2, 0x4008440)
msgget(0x3, 0x710)
msgget(0x2, 0x624)
msgctl$IPC_RMID(0x0, 0x0)

1.179114741s ago: executing program 4 (id=967):
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x107001, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000008000000000000001bac4ab3a0b36000000940000f80ead413e85000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a7, 0x8000000})
ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000380)=0x2)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x3, 0x6}, {0x5, 0xe5}, 0x0, 0x145dcf2e4d87d950, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r6)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r8, &(0x7f0000001a80)=[{{&(0x7f0000000400)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000580)="e200183df9", 0x5}], 0x1}}, {{&(0x7f0000001080)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001280)=[{&(0x7f00000010c0)="d0de852e", 0x4}], 0x1}}], 0x2, 0x40)
syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000480), 0x10)

897.442189ms ago: executing program 0 (id=968):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r1 = socket$inet(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2)
pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x100000001}, 0x0, 0x0, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000032000000c00000000000000", @ANYRES32=r0, @ANYBLOB="feffffff00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000000000000000008b1a2e0378366e490000000000040000001f8b722e75e984a014f0e2498a8949d8851bbdb7fff32609e78796e8884102c4f94722b13b493665e489b892e5ce5bcc380c032fd7324f066e066a2111ce4cb0361f94bb22d1988a121ec1"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001900010000000000000000001d010000080005000000080015000400000000000000000008400000000000000100000008000a00", @ANYRES32, @ANYBLOB="1500030002"], 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000004746ef2c560f00000000000000850000001397f0a31801000020207025569c9300001027e2c749df79b2e534729643fed3aada4872d064aa707b5592d3618bad7fdc4c874387afe30c044cc018d1930ac40be5bd2b1e51e040454c133aed5100"/112], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="00000080ff897b85ee64e0000000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x1}, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
socket$inet6(0xa, 0x3, 0x4)
close_range(r3, 0xffffffffffffffff, 0x0)

43.137708ms ago: executing program 1 (id=969):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c, 0x8}, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

0s ago: executing program 3 (id=970):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c, 0x8}, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

as too many interfaces: 228, using maximum allowed: 32
[  220.742033][   T59] usb 3-1: config 217 has an invalid descriptor of length 0, skipping remainder of the config
[  221.239716][   T59] usb 3-1: config 217 has 0 interfaces, different from the descriptor's value: 228
[  221.357474][   T59] usb 3-1: config index 1 descriptor too short (expected 61202, got 18)
[  221.372670][   T59] usb 3-1: config 217 has too many interfaces: 228, using maximum allowed: 32
[  221.381986][   T59] usb 3-1: config 217 has an invalid descriptor of length 0, skipping remainder of the config
[  221.393838][   T59] usb 3-1: config 217 has 0 interfaces, different from the descriptor's value: 228
[  221.446493][ T7489] input: syz0 as /devices/virtual/input/input10
[  221.475112][ T7504] netlink: 'syz.4.402': attribute type 1 has an invalid length.
[  221.489250][ T7504] netlink: 100 bytes leftover after parsing attributes in process `syz.4.402'.
[  221.559548][   T59] usb 3-1: config index 2 descriptor too short (expected 61202, got 18)
[  221.568905][   T59] usb 3-1: config 217 has too many interfaces: 228, using maximum allowed: 32
[  221.580977][   T59] usb 3-1: config 217 has an invalid descriptor of length 0, skipping remainder of the config
[  221.591533][   T59] usb 3-1: config 217 has 0 interfaces, different from the descriptor's value: 228
[  221.723270][   T30] audit: type=1326 audit(1735499056.707:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  222.175256][   T59] usb 3-1: config index 3 descriptor too short (expected 61202, got 18)
[  222.191844][   T30] audit: type=1326 audit(1735499056.745:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  222.203808][   T59] usb 3-1: config 217 has too many interfaces: 228, using maximum allowed: 32
[  222.700447][   T59] usb 3-1: config 217 has an invalid descriptor of length 0, skipping remainder of the config
[  222.724870][   T59] usb 3-1: config 217 has 0 interfaces, different from the descriptor's value: 228
[  222.743200][   T30] audit: type=1326 audit(1735499056.745:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  222.870243][   T30] audit: type=1326 audit(1735499056.754:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  222.895521][   T59] usb 3-1: unable to read config index 4 descriptor/start: -71
[  222.909439][   T59] usb 3-1: can't read configurations, error -71
[  222.994820][   T30] audit: type=1326 audit(1735499056.763:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  223.186861][   T30] audit: type=1326 audit(1735499056.763:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  224.071058][ T7517] fuse: Bad value for 'fd'
[  224.128328][   T30] audit: type=1326 audit(1735499056.763:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  224.350484][   T30] audit: type=1326 audit(1735499056.763:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  224.395864][   T30] audit: type=1326 audit(1735499056.763:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  224.492085][   T30] audit: type=1326 audit(1735499056.763:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa99b987c47 code=0x7ffc0000
[  225.256627][ T5134] Bluetooth: hci2: unexpected event for opcode 0x0c03
[  225.402790][ T7537] 9pnet: Unknown protocol version 9p200
[  225.415323][ T7537] siw: device registration error -23
[  226.074896][   T59] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  226.128867][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'.
[  226.172825][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'.
[  226.260308][   T59] usb 3-1: Using ep0 maxpacket: 8
[  226.274271][   T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.308273][   T59] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  226.320821][   T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.337180][   T59] usb 3-1: config 0 descriptor??
[  226.441273][ T7550] 9pnet_fd: Insufficient options for proto=fd
[  226.449747][ T5941] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  226.644196][ T5941] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  226.666665][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.677382][ T5941] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  226.688719][ T5941] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  226.758697][ T5941] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  226.767862][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.775981][ T5941] usb 4-1: Product: syz
[  226.781300][ T5941] usb 4-1: Manufacturer: syz
[  226.786235][ T5941] usb 4-1: SerialNumber: syz
[  227.069798][ T5941] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  227.078317][ T5941] usb 4-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  227.087235][ T5941] usb 4-1: found format II with max.bitrate = 128, frame size=0
[  227.102486][ T5941] usb 4-1: 2:1: All rates were zero
[  227.157842][ T5941] usb 4-1: USB disconnect, device number 11
[  227.160001][   T59] usbhid 3-1:0.0: can't add hid device: -71
[  227.174521][   T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  227.312362][ T7564] netlink: 152 bytes leftover after parsing attributes in process `syz.4.417'.
[  227.857178][   T59] usb 3-1: USB disconnect, device number 16
[  228.113601][ T6130] udevd[6130]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  228.566196][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'.
[  229.595091][ T5134] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  229.609451][ T5134] Bluetooth: hci2: Injecting HCI hardware error event
[  229.640111][ T5823] Bluetooth: hci2: hardware error 0x00
[  231.017749][   T59] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  231.387706][   T59] usb 2-1: device descriptor read/64, error -71
[  231.670187][   T59] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  231.840879][   T59] usb 2-1: device descriptor read/64, error -71
[  231.980087][   T59] usb usb2-port1: attempt power cycle
[  231.980094][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  232.091267][ T7636] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  232.217868][ T5908] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  232.367739][   T59] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  232.615571][ T5908] usb 3-1: Using ep0 maxpacket: 8
[  232.691558][   T59] usb 2-1: device descriptor read/8, error -71
[  232.722177][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.770481][ T5908] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  232.815183][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.865200][ T5908] usb 3-1: config 0 descriptor??
[  233.004132][   T59] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  233.027333][ T7647] tmpfs: Bad value for 'mpol'
[  233.824695][   T59] usb 2-1: device descriptor read/8, error -71
[  233.924531][ T5908] usbhid 3-1:0.0: can't add hid device: -71
[  233.931323][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  233.948770][   T59] usb usb2-port1: unable to enumerate USB device
[  233.963621][ T5908] usb 3-1: USB disconnect, device number 17
[  234.214514][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.438'.
[  235.150541][ T7674] could not open pipe file descriptor
[  235.200960][ T5941] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  235.716809][ T5941] usb 4-1: Using ep0 maxpacket: 32
[  235.729559][ T5941] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  235.739122][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.747474][ T5941] usb 4-1: Product: syz
[  235.751667][ T5941] usb 4-1: Manufacturer: syz
[  235.756943][ T5941] usb 4-1: SerialNumber: syz
[  235.817324][ T5941] usb 4-1: config 0 descriptor??
[  236.329835][ T7686] blk_print_req_error: 552 callbacks suppressed
[  236.336473][ T7686] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[  236.427519][ T7686] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[  236.443836][ T7686] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  236.453339][ T7686] buffer_io_error: 2854 callbacks suppressed
[  236.459465][ T7686] Buffer I/O error on dev loop7, logical block 256, async page read
[  236.470728][ T7686] I/O error, dev loop7, sector 257 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  236.480178][ T7686] Buffer I/O error on dev loop7, logical block 257, async page read
[  236.491079][ T7686] I/O error, dev loop7, sector 258 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  236.500805][ T7686] Buffer I/O error on dev loop7, logical block 258, async page read
[  236.511868][ T7686] I/O error, dev loop7, sector 259 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  236.521875][ T7686] Buffer I/O error on dev loop7, logical block 259, async page read
[  236.532175][ T7686] I/O error, dev loop7, sector 260 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  236.541968][ T7686] Buffer I/O error on dev loop7, logical block 260, async page read
[  236.552486][ T7686] I/O error, dev loop7, sector 261 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  236.561974][ T7686] Buffer I/O error on dev loop7, logical block 261, async page read
[  236.574924][ T7686] I/O error, dev loop7, sector 262 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  236.584495][ T7686] Buffer I/O error on dev loop7, logical block 262, async page read
[  236.595571][ T7686] I/O error, dev loop7, sector 263 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  236.605129][ T7686] Buffer I/O error on dev loop7, logical block 263, async page read
[  236.781579][ T5941] airspy 4-1:0.0: Board ID: 00
[  236.786549][ T5941] airspy 4-1:0.0: Firmware version: 
[  236.884889][   T40] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  236.894487][   T40] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  237.391848][ T7671] lo speed is unknown, defaulting to 1000
[  238.065072][ T5941] airspy 4-1:0.0: usb_control_msg() failed -110 request 0e
[  238.299544][ T5941] airspy 4-1:0.0: Registered as swradio24
[  238.344792][ T5941] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  238.464178][ T5941] usb 4-1: USB disconnect, device number 12
[  238.640125][   T59] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  239.196124][   T59] usb 3-1: Using ep0 maxpacket: 8
[  239.230599][   T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.251409][ T7719] FAULT_INJECTION: forcing a failure.
[  239.251409][ T7719] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  239.265670][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.4.458 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  239.276266][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  239.286664][ T7719] Call Trace:
[  239.289935][ T7719]  <TASK>
[  239.292860][ T7719]  dump_stack_lvl+0x241/0x360
[  239.297548][ T7719]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.302748][ T7719]  ? __pfx__printk+0x10/0x10
[  239.307358][ T7719]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  239.313350][ T7719]  should_fail_ex+0x3b0/0x4e0
[  239.318087][ T7719]  prepare_alloc_pages+0x1da/0x5b0
[  239.323205][ T7719]  __alloc_pages_noprof+0x16f/0x710
[  239.328435][ T7719]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  239.334421][ T7719]  alloc_pages_mpol_noprof+0x3e8/0x680
[  239.339946][ T7719]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  239.346789][ T7719]  ? __pfx_lock_release+0x10/0x10
[  239.352008][ T7719]  folio_alloc_mpol_noprof+0x36/0x50
[  239.358201][ T7719]  shmem_alloc_and_add_folio+0x4a0/0x1080
[  239.365156][ T7719]  ? __pfx_filemap_get_entry+0x10/0x10
[  239.373954][ T7719]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  239.384972][ T7719]  ? shmem_allowable_huge_orders+0x601/0x660
[  239.391171][ T7719]  shmem_get_folio_gfp+0x621/0x1840
[  239.397007][ T7719]  ? __pfx_lock_acquire+0x10/0x10
[  239.402081][ T7719]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  239.407834][ T7719]  ? __pfx_validate_chain+0x10/0x10
[  239.413244][ T7719]  shmem_fault+0x220/0x5b0
[  239.417723][ T7719]  ? __pfx_shmem_fault+0x10/0x10
[  239.423024][ T7719]  ? __pfx_lock_release+0x10/0x10
[  239.428085][ T7719]  __do_fault+0x135/0x390
[  239.432427][ T7719]  handle_pte_fault+0xfcf/0x5ed0
[  239.437468][ T7719]  ? __lock_acquire+0x1397/0x2100
[  239.442595][ T7719]  ? mark_lock+0x9a/0x360
[  239.446933][ T7719]  ? __pfx_handle_pte_fault+0x10/0x10
[  239.452348][ T7719]  ? __lock_acquire+0x1397/0x2100
[  239.457408][ T7719]  ? __pfx_lock_acquire+0x10/0x10
[  239.462441][ T7719]  ? do_raw_spin_lock+0x14f/0x370
[  239.467493][ T7719]  handle_mm_fault+0x1053/0x1ad0
[  239.472494][ T7719]  ? __pfx_handle_mm_fault+0x10/0x10
[  239.477797][ T7719]  ? follow_page_pte+0x97f/0x1ca0
[  239.482858][ T7719]  ? vma_needs_dirty_tracking+0x172/0x1f0
[  239.488668][ T7719]  ? check_vma_flags+0x52b/0x5a0
[  239.494225][ T7719]  __get_user_pages+0x1c82/0x49e0
[  239.499261][ T7719]  ? mark_lock+0x9a/0x360
[  239.503648][ T7719]  ? __pfx___get_user_pages+0x10/0x10
[  239.509148][ T7719]  ? __pfx_down_read_killable+0x10/0x10
[  239.514707][ T7719]  __gup_longterm_locked+0x8b3/0x17f0
[  239.520102][ T7719]  ? __pfx___gup_longterm_locked+0x10/0x10
[  239.525942][ T7719]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  239.532322][ T7719]  ? sanity_check_pinned_pages+0x11b9/0x12a0
[  239.538324][ T7719]  ? gup_fast_fallback+0x207e/0x29c0
[  239.543627][ T7719]  gup_fast_fallback+0x2266/0x29c0
[  239.548854][ T7719]  ? mark_lock+0x9a/0x360
[  239.553211][ T7719]  ? __pfx_gup_fast_fallback+0x10/0x10
[  239.558675][ T7719]  ? __pfx_lock_acquire+0x10/0x10
[  239.563709][ T7719]  ? mark_lock+0x9a/0x360
[  239.568058][ T7719]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  239.574065][ T7719]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  239.580470][ T7719]  ? __lruvec_stat_mod_folio+0x7d/0x300
[  239.586143][ T7719]  ? __kasan_kmalloc_large+0x8a/0xa0
[  239.591498][ T7719]  ? is_valid_gup_args+0x124/0x200
[  239.596630][ T7719]  pin_user_pages_fast+0xcc/0x160
[  239.601727][ T7719]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  239.607364][ T7719]  ? trace_kmalloc+0x1f/0xd0
[  239.611955][ T7719]  ? __kvmalloc_node_noprof+0x72/0x190
[  239.617787][ T7719]  io_pin_pages+0xb4/0x1a0
[  239.622322][ T7719]  io_sqe_buffer_register+0x22a/0x28b0
[  239.627809][ T7719]  ? __pfx_io_sqe_buffer_register+0x10/0x10
[  239.633805][ T7719]  ? trace_kmalloc+0x1f/0xd0
[  239.638396][ T7719]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  239.643887][ T7719]  ? iovec_from_user+0x1b4/0x240
[  239.649342][ T7719]  io_sqe_buffers_register+0x404/0x820
[  239.654816][ T7719]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  239.660808][ T7719]  ? __fget_files+0x395/0x410
[  239.665611][ T7719]  ? __fget_files+0x2a/0x410
[  239.670210][ T7719]  __se_sys_io_uring_register+0xcd4/0x3df0
[  239.676026][ T7719]  ? get_pid_task+0x23/0x1f0
[  239.680624][ T7719]  ? __pfx_lock_release+0x10/0x10
[  239.685670][ T7719]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  239.692003][ T7719]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  239.697918][ T7719]  ? ksys_write+0x22a/0x2b0
[  239.702615][ T7719]  ? __pfx_lock_release+0x10/0x10
[  239.707647][ T7719]  ? vfs_write+0x730/0xd30
[  239.712072][ T7719]  ? __mutex_unlock_slowpath+0x21e/0x790
[  239.717734][ T7719]  ? __pfx_vfs_write+0x10/0x10
[  239.722506][ T7719]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  239.728487][ T7719]  ? __fget_files+0x2a/0x410
[  239.733082][ T7719]  ? __fget_files+0x2a/0x410
[  239.737701][ T7719]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  239.743685][ T7719]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  239.750033][ T7719]  ? do_syscall_64+0x100/0x230
[  239.754821][ T7719]  ? do_syscall_64+0xb6/0x230
[  239.759504][ T7719]  do_syscall_64+0xf3/0x230
[  239.764016][ T7719]  ? clear_bhb_loop+0x35/0x90
[  239.768704][ T7719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.774603][ T7719] RIP: 0033:0x7f3949b85d29
[  239.779046][ T7719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.798724][ T7719] RSP: 002b:00007f394a90b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  239.807150][ T7719] RAX: ffffffffffffffda RBX: 00007f3949d75fa0 RCX: 00007f3949b85d29
[  239.815238][ T7719] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003
[  239.823307][ T7719] RBP: 00007f394a90b090 R08: 0000000000000000 R09: 0000000000000000
[  239.831524][ T7719] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002
[  239.840560][ T7719] R13: 0000000000000000 R14: 00007f3949d75fa0 R15: 00007ffd5e85d458
[  239.849151][ T7719]  </TASK>
[  239.906336][   T59] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  239.915931][   T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.932496][   T59] usb 3-1: config 0 descriptor??
[  241.220862][   T59] usbhid 3-1:0.0: can't add hid device: -71
[  241.227232][   T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  241.245099][   T59] usb 3-1: USB disconnect, device number 18
[  241.343161][ T7744] netlink: 152 bytes leftover after parsing attributes in process `syz.3.462'.
[  242.677420][ T5823] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  242.687274][ T5823] Bluetooth: hci0: command 0x0406 tx timeout
[  242.936559][ T7759] netlink: 100 bytes leftover after parsing attributes in process `syz.3.467'.
[  243.638714][ T5941] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  243.863585][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.966204][ T7781] FAULT_INJECTION: forcing a failure.
[  243.966204][ T7781] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  243.980584][ T7781] CPU: 0 UID: 0 PID: 7781 Comm: syz.1.475 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  243.991216][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  244.001404][ T7781] Call Trace:
[  244.004696][ T7781]  <TASK>
[  244.007641][ T7781]  dump_stack_lvl+0x241/0x360
[  244.012355][ T7781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.017590][ T7781]  ? dump_stack+0x9/0x15
[  244.021855][ T7781]  ? __sanitizer_cov_trace_pc+0x18/0x70
[  244.027498][ T7781]  should_fail_ex+0x3b0/0x4e0
[  244.032196][ T7781]  prepare_alloc_pages+0x1da/0x5b0
[  244.037323][ T7781]  __alloc_pages_noprof+0x16f/0x710
[  244.042634][ T7781]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  244.048380][ T7781]  alloc_pages_mpol_noprof+0x3e8/0x680
[  244.053858][ T7781]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  244.059856][ T7781]  ? __pfx_lock_release+0x10/0x10
[  244.064918][ T7781]  folio_alloc_mpol_noprof+0x36/0x50
[  244.070602][ T7781]  shmem_alloc_and_add_folio+0x4a0/0x1080
[  244.076366][ T7781]  ? __pfx_filemap_get_entry+0x10/0x10
[  244.081927][ T7781]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  244.088102][ T7781]  ? shmem_allowable_huge_orders+0x601/0x660
[  244.094125][ T7781]  shmem_get_folio_gfp+0x621/0x1840
[  244.099351][ T7781]  ? __pfx_lock_acquire+0x10/0x10
[  244.104393][ T7781]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  244.110035][ T7781]  ? __pfx_validate_chain+0x10/0x10
[  244.115335][ T7781]  shmem_fault+0x220/0x5b0
[  244.119781][ T7781]  ? __pfx_shmem_fault+0x10/0x10
[  244.124735][ T7781]  ? __pfx_lock_release+0x10/0x10
[  244.129871][ T7781]  __do_fault+0x135/0x390
[  244.134236][ T7781]  handle_pte_fault+0xfcf/0x5ed0
[  244.139186][ T7781]  ? __lock_acquire+0x1397/0x2100
[  244.144223][ T7781]  ? mark_lock+0x9a/0x360
[  244.148558][ T7781]  ? __pfx_handle_pte_fault+0x10/0x10
[  244.154555][ T7781]  ? __lock_acquire+0x1397/0x2100
[  244.159613][ T7781]  ? __pfx_lock_acquire+0x10/0x10
[  244.164828][ T7781]  ? do_raw_spin_lock+0x14f/0x370
[  244.169871][ T7781]  handle_mm_fault+0x1053/0x1ad0
[  244.174869][ T7781]  ? __pfx_handle_mm_fault+0x10/0x10
[  244.180157][ T7781]  ? follow_page_pte+0x97f/0x1ca0
[  244.185291][ T7781]  ? vma_needs_dirty_tracking+0x172/0x1f0
[  244.191027][ T7781]  ? check_vma_flags+0x52b/0x5a0
[  244.195998][ T7781]  __get_user_pages+0x1c82/0x49e0
[  244.201130][ T7781]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  244.207240][ T7781]  ? __pfx___get_user_pages+0x10/0x10
[  244.212799][ T7781]  ? __pfx_down_read_killable+0x10/0x10
[  244.218462][ T7781]  __gup_longterm_locked+0x8b3/0x17f0
[  244.224300][ T7781]  ? __pfx___gup_longterm_locked+0x10/0x10
[  244.230219][ T7781]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  244.236751][ T7781]  ? sanity_check_pinned_pages+0x11b9/0x12a0
[  244.242944][ T7781]  ? gup_fast_fallback+0x207e/0x29c0
[  244.248549][ T7781]  gup_fast_fallback+0x2266/0x29c0
[  244.253695][ T7781]  ? mark_lock+0x9a/0x360
[  244.258080][ T7781]  ? __pfx_gup_fast_fallback+0x10/0x10
[  244.263559][ T7781]  ? __pfx_lock_acquire+0x10/0x10
[  244.268588][ T7781]  ? mark_lock+0x9a/0x360
[  244.272924][ T7781]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  244.278908][ T7781]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  244.285243][ T7781]  ? __lruvec_stat_mod_folio+0x7d/0x300
[  244.290796][ T7781]  ? __kasan_kmalloc_large+0x8a/0xa0
[  244.296121][ T7781]  ? is_valid_gup_args+0x124/0x200
[  244.301262][ T7781]  pin_user_pages_fast+0xcc/0x160
[  244.306317][ T7781]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  244.311963][ T7781]  ? trace_kmalloc+0x1f/0xd0
[  244.316560][ T7781]  ? __kvmalloc_node_noprof+0x72/0x190
[  244.322040][ T7781]  io_pin_pages+0xb4/0x1a0
[  244.326634][ T7781]  io_sqe_buffer_register+0x22a/0x28b0
[  244.332348][ T7781]  ? __pfx_io_sqe_buffer_register+0x10/0x10
[  244.338346][ T7781]  ? trace_kmalloc+0x1f/0xd0
[  244.343114][ T7781]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  244.348587][ T7781]  ? iovec_from_user+0x1b4/0x240
[  244.353548][ T7781]  io_sqe_buffers_register+0x404/0x820
[  244.359035][ T7781]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  244.365556][ T7781]  ? __fget_files+0x395/0x410
[  244.370256][ T7781]  ? __fget_files+0x2a/0x410
[  244.374854][ T7781]  __se_sys_io_uring_register+0xcd4/0x3df0
[  244.380705][ T7781]  ? get_pid_task+0x23/0x1f0
[  244.385358][ T7781]  ? __pfx_lock_release+0x10/0x10
[  244.390425][ T7781]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  244.396672][ T7781]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  244.402670][ T7781]  ? ksys_write+0x22a/0x2b0
[  244.407282][ T7781]  ? __pfx_lock_release+0x10/0x10
[  244.412333][ T7781]  ? vfs_write+0x730/0xd30
[  244.416780][ T7781]  ? __mutex_unlock_slowpath+0x21e/0x790
[  244.422427][ T7781]  ? __pfx_vfs_write+0x10/0x10
[  244.427215][ T7781]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  244.433216][ T7781]  ? __fget_files+0x2a/0x410
[  244.437813][ T7781]  ? __fget_files+0x2a/0x410
[  244.442443][ T7781]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  244.448444][ T7781]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  244.454801][ T7781]  ? do_syscall_64+0x100/0x230
[  244.459582][ T7781]  ? do_syscall_64+0xb6/0x230
[  244.464268][ T7781]  do_syscall_64+0xf3/0x230
[  244.468787][ T7781]  ? clear_bhb_loop+0x35/0x90
[  244.473471][ T7781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.479371][ T7781] RIP: 0033:0x7fe564b85d29
[  244.483811][ T7781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.503514][ T7781] RSP: 002b:00007fe565974038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  244.511939][ T7781] RAX: ffffffffffffffda RBX: 00007fe564d76080 RCX: 00007fe564b85d29
[  244.519929][ T7781] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003
[  244.527910][ T7781] RBP: 00007fe565974090 R08: 0000000000000000 R09: 0000000000000000
[  244.535889][ T7781] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002
[  244.544078][ T7781] R13: 0000000000000000 R14: 00007fe564d76080 R15: 00007fff8ca05ff8
[  244.552184][ T7781]  </TASK>
[  244.555355][    C0] vkms_vblank_simulate: vblank timer overrun
[  244.555446][ T5941] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  244.805982][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.912944][ T5941] usb 3-1: config 0 descriptor??
[  245.153210][ T5941] usbhid 3-1:0.0: can't add hid device: -71
[  245.178921][ T5941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  245.211361][ T5941] usb 3-1: USB disconnect, device number 19
[  245.236174][   T47] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  245.428631][   T47] usb 1-1: Using ep0 maxpacket: 8
[  245.518440][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.616439][ T7792] netlink: zone id is out of range
[  245.621899][ T7792] netlink: zone id is out of range
[  245.627026][ T7792] netlink: zone id is out of range
[  245.632238][ T7792] netlink: zone id is out of range
[  245.640542][ T7792] netlink: set zone limit has 8 unknown bytes
[  246.212898][   T47] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  246.238821][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.324560][   T47] usb 1-1: config 0 descriptor??
[  247.175334][   T47] usbhid 1-1:0.0: can't add hid device: -71
[  247.229467][   T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  247.443774][   T47] usb 1-1: USB disconnect, device number 14
[  248.582739][ T5941] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  248.753970][ T5941] usb 5-1: Using ep0 maxpacket: 32
[  248.763739][ T5941] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 132
[  248.770486][ T5941] usb 5-1: can't read configurations, error -22
[  248.938472][ T5941] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  249.202478][ T5941] usb 5-1: Using ep0 maxpacket: 32
[  249.459566][ T5941] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 132
[  249.468433][ T5941] usb 5-1: can't read configurations, error -22
[  249.484616][ T5941] usb usb5-port1: attempt power cycle
[  249.980652][ T5941] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  250.150621][ T5941] usb 5-1: Using ep0 maxpacket: 32
[  250.163728][ T5941] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 132
[  250.172828][ T5941] usb 5-1: can't read configurations, error -22
[  250.266396][ T7839] 9pnet: Unknown protocol version 9p200
[  250.325181][ T5941] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  250.438786][ T5941] usb 5-1: Using ep0 maxpacket: 32
[  250.481892][ T5941] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 132
[  250.874959][ T5941] usb 5-1: can't read configurations, error -22
[  250.898962][ T5941] usb usb5-port1: unable to enumerate USB device
[  251.575703][   T59] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  251.740792][   T59] usb 3-1: Using ep0 maxpacket: 8
[  252.000626][   T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.025411][   T59] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  252.036202][   T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.106539][   T59] usb 3-1: config 0 descriptor??
[  253.377844][   T59] usbhid 3-1:0.0: can't add hid device: -71
[  253.384435][   T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  253.561594][   T59] usb 3-1: USB disconnect, device number 20
[  254.842827][ T7883] 9pnet: Unknown protocol version 9p200
[  255.939580][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.508'.
[  257.397096][   T59] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  258.246559][   T59] usb 3-1: Using ep0 maxpacket: 8
[  258.262451][   T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.262483][   T59] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  258.262499][   T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.263740][   T59] usb 3-1: config 0 descriptor??
[  258.971899][   T59] usbhid 3-1:0.0: can't add hid device: -71
[  258.971969][   T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  258.977226][   T59] usb 3-1: USB disconnect, device number 21
[  259.246277][ T7925] 9pnet: Unknown protocol version 9p200
[  259.990128][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.519'.
[  260.085638][ T7928] MTD: Couldn't look up './file0': -15
[  261.068207][ T7939] IPv6: addrconf: prefix option has invalid lifetime
[  261.331799][ T7943] veth0_to_team: entered promiscuous mode
[  261.343848][ T7943] veth0_to_team: entered allmulticast mode
[  262.525319][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  262.531775][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  264.293748][ T7971] 9pnet: Unknown protocol version 9p200
[  265.195474][ T5908] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  265.289232][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.298383][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.307200][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.318257][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.327286][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.338249][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.344907][ T7981] =======================================================
[  265.344907][ T7981] WARNING: The mand mount option has been deprecated and
[  265.344907][ T7981]          and is ignored by this kernel. Remove the mand
[  265.344907][ T7981]          option from the mount to silence this warning.
[  265.344907][ T7981] =======================================================
[  265.346948][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.382890][ T5908] usb 4-1: Using ep0 maxpacket: 8
[  265.401592][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.415925][ T5908] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  265.428209][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.449444][ T5908] usb 4-1: config 0 descriptor??
[  265.457528][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.471351][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.488478][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.537689][ T5874] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  265.708822][   T59] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  265.720002][ T5874] usb 2-1: config index 0 descriptor too short (expected 100, got 45)
[  265.732415][ T5874] usb 2-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config
[  265.744697][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  265.756908][ T5874] usb 2-1: config 1 has no interface number 0
[  265.768506][ T5874] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.845379][ T5874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.858830][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.889579][ T5874] usb 2-1: Product: syz
[  265.891273][   T59] usb 3-1: device descriptor read/64, error -71
[  265.904338][ T5874] usb 2-1: Manufacturer: syz
[  265.910906][ T5874] usb 2-1: SerialNumber: syz
[  265.949875][ T5874] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing
[  265.957753][ T5874] cdc_ncm 2-1:1.1: bind() failure
[  266.405207][   T59] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  266.499444][ T5872] usb 2-1: USB disconnect, device number 14
[  266.542931][ T5908] usbhid 4-1:0.0: can't add hid device: -71
[  266.549283][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  266.563847][   T59] usb 3-1: device descriptor read/64, error -71
[  266.581972][ T5908] usb 4-1: USB disconnect, device number 13
[  266.682000][   T59] usb usb3-port1: attempt power cycle
[  267.558787][   T59] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  267.590769][   T59] usb 3-1: device descriptor read/8, error -71
[  267.614557][ T8002] netlink: 'syz.1.542': attribute type 1 has an invalid length.
[  267.638689][ T8002] netlink: 100 bytes leftover after parsing attributes in process `syz.1.542'.
[  268.549760][   T59] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  269.087949][ T8017] 9pnet: Unknown protocol version 9p200
[  270.630921][ T8005] delete_channel: no stack
[  273.979132][   T59] usb 3-1: device descriptor read/8, error -110
[  274.109423][   T59] usb usb3-port1: unable to enumerate USB device
[  276.530910][ T8061] netlink: 'syz.4.559': attribute type 1 has an invalid length.
[  276.532117][ T6043] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  276.555126][ T8061] netlink: 100 bytes leftover after parsing attributes in process `syz.4.559'.
[  277.418993][ T8071] 9pnet: Unknown protocol version 9p200
[  277.832719][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'.
[  278.248808][ T6043] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  278.373454][ T8089] overlayfs: failed to resolve './file1': -2
[  278.458625][ T8089] overlayfs: overlapping lowerdir path
[  278.464534][ T6043] usb 2-1: Using ep0 maxpacket: 16
[  278.480711][ T6043] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  278.506468][ T6043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.540467][ T6043] usb 2-1: Product: syz
[  278.553733][ T6043] usb 2-1: Manufacturer: syz
[  278.564712][ T6043] usb 2-1: SerialNumber: syz
[  278.631267][ T6043] usb 2-1: config 0 descriptor??
[  278.708094][ T6043] visor 2-1:0.0: Sony Clie 3.5 converter detected
[  279.169851][ T6043] usb 2-1: clie_3_5_startup: get interface number bad return length: 0
[  279.180053][ T6043] visor 2-1:0.0: probe with driver visor failed with error -5
[  279.398924][ T6043] usb 2-1: USB disconnect, device number 16
[  279.494412][ T8085] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  279.530558][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'.
[  279.707066][   T59] IPVS: starting estimator thread 0...
[  279.712911][ T8101] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  279.809611][ T8105] IPVS: using max 27 ests per chain, 64800 per kthread
[  279.819317][ T8107] : renamed from ipvlan1
[  279.997940][ T8116] netlink: 'syz.3.571': attribute type 10 has an invalid length.
[  280.042828][ T8116] netlink: 'syz.3.571': attribute type 1 has an invalid length.
[  280.095198][ T8118] netlink: 'syz.0.570': attribute type 1 has an invalid length.
[  280.137701][ T8118] netlink: 100 bytes leftover after parsing attributes in process `syz.0.570'.
[  280.254281][ T8122] 9pnet: Unknown protocol version 9p200
[  280.977349][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[  281.496993][ T8126] netlink: 'syz.3.574': attribute type 1 has an invalid length.
[  281.507827][ T8126] netlink: 100 bytes leftover after parsing attributes in process `syz.3.574'.
[  282.310589][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'.
[  282.416710][ T8138] IPv6: addrconf: prefix option has invalid lifetime
[  282.470237][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  282.480925][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  282.502270][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  282.517429][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  282.529768][ T5823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  282.538342][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  283.070508][ T8139] lo speed is unknown, defaulting to 1000
[  283.639215][ T8139] chnl_net:caif_netlink_parms(): no params data found
[  283.940307][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.984263][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.002894][ T8139] bridge_slave_0: entered allmulticast mode
[  284.016945][ T8139] bridge_slave_0: entered promiscuous mode
[  284.050490][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.074242][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.105390][ T8153] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  284.106429][ T8139] bridge_slave_1: entered allmulticast mode
[  284.158747][ T8139] bridge_slave_1: entered promiscuous mode
[  284.212784][ T8180] netlink: 'syz.4.588': attribute type 1 has an invalid length.
[  284.224550][ T8180] netlink: 100 bytes leftover after parsing attributes in process `syz.4.588'.
[  284.257894][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.273457][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.323433][ T8139] team0: Port device team_slave_0 added
[  284.920332][ T8139] team0: Port device team_slave_1 added
[  284.941269][ T5134] Bluetooth: hci5: command tx timeout
[  284.993466][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.005596][ T8185] netlink: 'syz.1.590': attribute type 1 has an invalid length.
[  285.013426][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.046182][ T8185] netlink: 100 bytes leftover after parsing attributes in process `syz.1.590'.
[  285.083587][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.556899][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.571779][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.618185][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.678107][ T8139] hsr_slave_0: entered promiscuous mode
[  285.687434][ T8139] hsr_slave_1: entered promiscuous mode
[  285.735705][ T8139] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  285.743516][ T8139] Cannot create hsr debugfs directory
[  285.921570][ T8189] netlink: 'syz.0.591': attribute type 1 has an invalid length.
[  285.932249][ T8189] netlink: 100 bytes leftover after parsing attributes in process `syz.0.591'.
[  286.657895][ T8139] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  286.699144][ T8139] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  286.738108][ T8139] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  286.767813][ T8139] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  287.079619][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.098145][ T8139] 8021q: adding VLAN 0 to HW filter on device team0
[  287.110692][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.117921][ T7364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.160616][ T5134] Bluetooth: hci5: command tx timeout
[  287.440571][  T795] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.447780][  T795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.483143][ T8139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.505632][ T8139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  288.241683][ T8217] tap0: tun_chr_ioctl cmd 2147767507
[  288.525303][ T8214] Bluetooth: MGMT ver 1.23
[  288.736299][ T8212] geneve2: entered promiscuous mode
[  288.744535][ T8223] openvswitch: netlink: IP tunnel dst address not specified
[  288.972391][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.060879][ T8231] netlink: 256 bytes leftover after parsing attributes in process `syz.3.600'.
[  289.378238][ T8231] netlink: 'syz.3.600': attribute type 9 has an invalid length.
[  289.387219][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'.
[  289.405134][ T5823] Bluetooth: hci5: command tx timeout
[  290.767520][ T5874] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  290.818256][ T8139] veth0_vlan: entered promiscuous mode
[  290.851820][ T8139] veth1_vlan: entered promiscuous mode
[  290.927861][ T5874] usb 2-1: Using ep0 maxpacket: 16
[  291.060596][ T5823] Bluetooth: hci6: command 0x1003 tx timeout
[  291.068829][ T5134] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  291.077224][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  291.087843][ T5874] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  291.112629][ T5874] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  291.889677][ T5134] Bluetooth: hci5: command tx timeout
[  292.129559][ T8264] 9pnet: Unknown protocol version 9p200
[  292.130248][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.999303][ T5874] usb 2-1: config 0 descriptor??
[  293.061858][ T8139] veth0_macvtap: entered promiscuous mode
[  293.115693][ T8139] veth1_macvtap: entered promiscuous mode
[  293.254323][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.309241][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.320153][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.331177][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.343771][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.355047][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.364933][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.375944][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.385836][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.397630][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.419456][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.479946][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.552484][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.621217][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.703564][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.920715][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.976819][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.992524][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.015208][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.026502][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.048464][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.068604][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.087079][ T8139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.167069][ T8139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.204762][ T8139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.235567][ T8139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.519336][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.541959][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.657855][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.666190][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.527571][ T8272] syz.0.611 (8272) used greatest stack depth: 17936 bytes left
[  295.680776][  T978] usb 2-1: USB disconnect, device number 17
[  295.792171][ T8301] loop7: detected capacity change from 0 to 16384
[  296.094228][ T8302] loop7: detected capacity change from 16384 to 16383
[  296.178284][ T8301] blk_print_req_error: 17 callbacks suppressed
[  296.178306][ T8301] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0
[  296.197289][ T8302] I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  296.207212][ T8302] buffer_io_error: 254 callbacks suppressed
[  296.207230][ T8302] Buffer I/O error on dev loop7, logical block 64, lost async page write
[  296.221803][ T8302] Buffer I/O error on dev loop7, logical block 65, lost async page write
[  296.230412][ T8302] Buffer I/O error on dev loop7, logical block 66, lost async page write
[  296.238979][ T8302] Buffer I/O error on dev loop7, logical block 67, lost async page write
[  296.240730][ T8301] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0
[  296.247654][ T8302] Buffer I/O error on dev loop7, logical block 68, lost async page write
[  296.257409][ T8301] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  296.265903][ T8302] Buffer I/O error on dev loop7, logical block 69, lost async page write
[  296.275248][ T8301] Buffer I/O error on dev loop7, logical block 448, async page read
[  296.291976][ T8302] Buffer I/O error on dev loop7, logical block 70, lost async page write
[  296.301354][ T8302] Buffer I/O error on dev loop7, logical block 71, lost async page write
[  296.309989][ T8302] Buffer I/O error on dev loop7, logical block 72, lost async page write
[  296.323654][ T8302] I/O error, dev loop7, sector 1536 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  296.344291][ T8302] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  296.353783][ T8302] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  296.363356][ T8302] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  296.372708][ T8302] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  296.382079][ T8302] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  296.391657][ T8302] ldm_validate_partition_table(): Disk read failed.
[  296.398596][ T8302] Dev loop7: unable to read RDB block 0
[  296.405327][ T8302]  loop7: unable to read partition table
[  296.411186][ T8302] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  296.772324][ T8318] 9pnet: Unknown protocol version 9p200
[  297.096292][   T47] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  297.179911][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  297.320834][   T47] usb 2-1: device descriptor read/64, error -32
[  297.654181][   T47] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  297.718620][ T8323] 9pnet_fd: Insufficient options for proto=fd
[  297.868033][   T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.918711][   T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  297.955563][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.027149][   T47] usb 2-1: Product: syz
[  298.037264][   T47] usb 2-1: Manufacturer: syz
[  298.053075][   T47] usb 2-1: SerialNumber: syz
[  298.805120][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'.
[  298.868182][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'.
[  299.445884][ T8317] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  299.883346][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  299.883368][   T30] audit: type=1326 audit(1735499129.790:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  299.917590][   T30] audit: type=1326 audit(1735499129.790:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  299.939095][   T30] audit: type=1326 audit(1735499129.790:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  299.961065][   T30] audit: type=1326 audit(1735499129.790:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  299.982753][   T30] audit: type=1326 audit(1735499129.790:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  300.004678][   T30] audit: type=1326 audit(1735499129.809:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  300.397104][ T8370] 9pnet: Unknown protocol version 9p200
[  301.115931][   T30] audit: type=1326 audit(1735499130.866:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  301.194053][   T30] audit: type=1326 audit(1735499130.866:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  301.227435][   T30] audit: type=1326 audit(1735499130.922:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  301.320354][   T30] audit: type=1326 audit(1735499130.922:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99b985d29 code=0x7ffc0000
[  301.598017][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.632'.
[  301.988661][   T47] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed
[  302.022628][   T47] cdc_ncm 2-1:1.0: bind() failure
[  302.063084][   T47] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  302.099479][   T47] cdc_ncm 2-1:1.1: bind() failure
[  302.140359][   T47] usb 2-1: USB disconnect, device number 19
[  302.558746][  T978] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  302.965780][  T978] usb 5-1: Using ep0 maxpacket: 8
[  302.981400][  T978] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  302.990781][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.998867][  T978] usb 5-1: Product: syz
[  303.003054][  T978] usb 5-1: Manufacturer: syz
[  303.007687][  T978] usb 5-1: SerialNumber: syz
[  303.208910][ T8412] 9pnet: Unknown protocol version 9p200
[  303.989952][ T5907] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  304.036682][  T978] usb 5-1: config 0 descriptor??
[  304.090747][  T978] gspca_main: se401-2.14.0 probing 047d:5003
[  304.328402][ T5134] Bluetooth: hci3: unexpected event for opcode 0x080e
[  304.473876][ T5907] usb 2-1: device descriptor read/64, error -71
[  304.557473][  T978] gspca_se401: ExtraFeatures: 7
[  304.741006][ T5907] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  304.932644][  T978] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12
[  305.002840][ T5907] usb 2-1: device descriptor read/64, error -71
[  305.017250][  T978] usb 5-1: USB disconnect, device number 15
[  305.897234][ T5907] usb usb2-port1: attempt power cycle
[  306.180820][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[  306.201997][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.290476][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.743578][ T8436] sp0: Synchronizing with TNC
[  306.846200][ T5908] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  308.218415][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.235807][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.248336][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  308.257621][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.265735][ T5908] usb 1-1: Product: syz
[  308.279182][ T5908] usb 1-1: Manufacturer: syz
[  308.283839][ T5908] usb 1-1: SerialNumber: syz
[  308.352874][ T5874] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  308.537389][ T5874] usb 6-1: Using ep0 maxpacket: 32
[  308.604140][ T8455] 9pnet: Unknown protocol version 9p200
[  308.954573][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'.
[  309.439514][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short
[  309.466820][ T5874] usb 6-1: unable to read config index 0 descriptor/start: -71
[  309.466858][ T5874] usb 6-1: can't read configurations, error -71
[  309.480912][ T5908] usb 1-1: 0:2 : does not exist
[  309.497750][ T5908] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  309.528300][ T5908] usb 1-1: USB disconnect, device number 15
[  309.540207][   T59] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  309.754108][   T59] usb 4-1: Using ep0 maxpacket: 16
[  309.808097][   T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.819476][   T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.829480][   T59] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  309.842550][   T59] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  309.851787][   T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.861376][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  309.862284][   T59] usb 4-1: config 0 descriptor??
[  309.974887][ T8465] loop7: detected capacity change from 0 to 16384
[  310.277669][ T5872] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  310.584923][ T8466] loop7: detected capacity change from 16384 to 16383
[  310.631878][   T59] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  310.640170][   T59] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max
[  310.650096][   T59] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0
[  310.661099][   T59] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0
[  310.669836][   T59] microsoft 0003:045E:07DA.0005: No inputs registered, leaving
[  310.683096][   T59] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  310.709651][ T8466] blk_print_req_error: 14 callbacks suppressed
[  310.709671][ T8466] I/O error, dev loop7, sector 1280 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0
[  310.718317][ T8465] I/O error, dev loop7, sector 2312 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0
[  310.758864][   T59] microsoft 0003:045E:07DA.0005: no inputs found
[  310.768653][ T8466] buffer_io_error: 392 callbacks suppressed
[  310.768671][ T8466] Buffer I/O error on dev loop7, logical block 160, lost async page write
[  310.769529][   T59] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway
[  310.781842][ T8466] Buffer I/O error on dev loop7, logical block 161, lost async page write
[  310.801081][ T8465] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  310.818260][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.823168][ T8466] Buffer I/O error on dev loop7, logical block 162, lost async page write
[  310.838880][ T8465] I/O error, dev loop7, sector 2568 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0
[  310.844364][ T5872] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[  310.868435][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.876575][ T8465] I/O error, dev loop7, sector 2312 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  310.876614][ T8465] Buffer I/O error on dev loop7, logical block 289, async page read
[  310.877009][ T8466] Buffer I/O error on dev loop7, logical block 163, lost async page write
[  310.911627][ T5872] usb 2-1: config 0 descriptor??
[  310.928692][ T8466] Buffer I/O error on dev loop7, logical block 164, lost async page write
[  310.937528][ T8466] Buffer I/O error on dev loop7, logical block 165, lost async page write
[  310.946268][ T8466] Buffer I/O error on dev loop7, logical block 166, lost async page write
[  310.954997][ T8466] Buffer I/O error on dev loop7, logical block 167, lost async page write
[  310.964494][ T8466] Buffer I/O error on dev loop7, logical block 168, lost async page write
[  310.974532][ T5874] usb 4-1: USB disconnect, device number 14
[  310.988279][ T8466] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  311.094917][ T5872] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[  311.360695][ T5872] pwc: send_video_command error -71
[  311.371961][ T5872] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  311.608806][ T5872] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  311.656876][   T59] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  311.809205][ T5874] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  311.832119][ T5872] usb 2-1: USB disconnect, device number 23
[  311.924609][   T59] usb 5-1: Using ep0 maxpacket: 8
[  311.942479][   T59] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  311.970710][   T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.009660][ T5874] usb 6-1: Using ep0 maxpacket: 8
[  312.077472][   T59] usb 5-1: Product: syz
[  312.082250][   T59] usb 5-1: Manufacturer: syz
[  313.063628][   T59] usb 5-1: SerialNumber: syz
[  313.083148][   T59] usb 5-1: config 0 descriptor??
[  313.159842][   T59] gspca_main: se401-2.14.0 probing 047d:5003
[  313.196242][ T8494] 9pnet: Unknown protocol version 9p200
[  313.460152][ T5134] Bluetooth: hci3: unexpected event for opcode 0x080e
[  313.694174][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'.
[  313.720202][ T5874] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  313.729491][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.737827][ T5874] usb 6-1: Product: syz
[  313.742355][ T5874] usb 6-1: Manufacturer: syz
[  313.747009][ T5874] usb 6-1: SerialNumber: syz
[  313.759972][ T5874] usb 6-1: config 0 descriptor??
[  313.768787][ T5874] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  313.796479][ T8500] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  313.803495][ T8500] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  313.824479][ T8500] vhci_hcd vhci_hcd.0: Device attached
[  313.836001][   T59] gspca_se401: ExtraFeatures: 7
[  314.019694][   T47] vhci_hcd: vhci_device speed not set
[  314.040837][  T978] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  314.054955][   T59] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13
[  314.075994][   T59] usb 5-1: USB disconnect, device number 16
[  314.091693][   T47] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  314.210298][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.220710][  T978] usb 1-1: config 0 has no interfaces?
[  314.224781][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.233268][  T978] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  314.247723][  T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.267555][  T978] usb 1-1: config 0 descriptor??
[  314.273806][ T5874] gspca_m5602: Failed to find a sensor
[  314.281301][ T5874] ALi m5602 6-1:0.0: ALi m5602 webcam failed
[  314.297141][ T5874] usb 6-1: USB disconnect, device number 4
[  314.308163][ T6043] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  314.407180][ T8516] loop7: detected capacity change from 0 to 16384
[  314.468620][ T6043] usb 2-1: device descriptor read/64, error -71
[  314.542650][ T8502] vhci_hcd: connection reset by peer
[  314.554714][  T978] usb 1-1: string descriptor 0 read error: -71
[  314.567004][ T8520] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  314.584201][  T795] vhci_hcd: stop threads
[  314.587005][  T978] usb 1-1: USB disconnect, device number 16
[  314.595532][  T795] vhci_hcd: release socket
[  314.614367][  T795] vhci_hcd: disconnect device
[  314.757850][ T8519] loop7: detected capacity change from 16384 to 16383
[  314.769776][ T8516] I/O error, dev loop7, sector 9088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  314.771374][ T8519] I/O error, dev loop7, sector 3216 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  314.789278][ T8516] I/O error, dev loop7, sector 9088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  314.865427][ T6043] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  314.866419][ T8519] I/O error, dev loop7, sector 4240 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  315.142462][ T6043] usb 2-1: device descriptor read/64, error -71
[  315.167375][ T8528] Can't find a SQUASHFS superblock on nullb0
[  315.228463][ T8519] ldm_validate_partition_table(): Disk read failed.
[  315.275099][ T6043] usb usb2-port1: attempt power cycle
[  315.477213][ T8519] Dev loop7: unable to read RDB block 0
[  315.591745][ T8519]  loop7: unable to read partition table
[  315.597849][ T8519] loop_reread_partitions: partition scan of loop7 (R%?���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  315.719878][ T6043] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  315.767243][ T6043] usb 2-1: device descriptor read/8, error -71
[  316.030085][ T6043] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  316.076558][ T6043] usb 2-1: device descriptor read/8, error -71
[  316.213335][ T6043] usb usb2-port1: unable to enumerate USB device
[  316.734022][ T8556] 9pnet: Unknown protocol version 9p200
[  316.746431][ T8556] siw: device registration error -23
[  317.696983][  T978] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  317.831236][ T8569] lo speed is unknown, defaulting to 1000
[  317.910897][   T59] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  318.173499][  T978] usb 1-1: Using ep0 maxpacket: 32
[  318.197569][  T978] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  318.267831][  T978] usb 1-1: config 0 has no interface number 0
[  318.368604][  T978] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  318.464822][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.525658][  T978] usb 1-1: Product: syz
[  318.540773][  T978] usb 1-1: Manufacturer: syz
[  318.545757][  T978] usb 1-1: SerialNumber: syz
[  318.553746][  T978] usb 1-1: config 0 descriptor??
[  318.566993][  T978] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  318.585404][   T59] usb 5-1: Using ep0 maxpacket: 8
[  318.610538][   T59] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  318.622563][   T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.631319][   T59] usb 5-1: Product: syz
[  318.635525][   T59] usb 5-1: Manufacturer: syz
[  318.640693][   T59] usb 5-1: SerialNumber: syz
[  318.721362][ T8578] loop7: detected capacity change from 0 to 16384
[  318.751208][   T59] usb 5-1: config 0 descriptor??
[  318.759993][   T59] gspca_main: se401-2.14.0 probing 047d:5003
[  318.804503][  T978] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  318.840273][  T978] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  318.881213][ T8579] loop7: detected capacity change from 16384 to 16383
[  318.919392][ T8578] blk_print_req_error: 21 callbacks suppressed
[  318.919441][ T8578] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0
[  318.952663][ T8579] I/O error, dev loop7, sector 1520 op 0x1:(WRITE) flags 0x800 phys_seg 34 prio class 0
[  318.980398][ T8579] buffer_io_error: 871 callbacks suppressed
[  318.980418][ T8579] Buffer I/O error on dev loop7, logical block 190, lost async page write
[  319.006144][ T8578] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.035891][ T8578] Buffer I/O error on dev loop7, logical block 224, async page read
[  319.037655][ T8579] Buffer I/O error on dev loop7, logical block 191, lost async page write
[  319.053035][ T5134] Bluetooth: hci3: unexpected event for opcode 0x080e
[  319.060780][ T8579] Buffer I/O error on dev loop7, logical block 192, lost async page write
[  319.071645][ T8579] Buffer I/O error on dev loop7, logical block 193, lost async page write
[  319.080986][ T8579] Buffer I/O error on dev loop7, logical block 194, lost async page write
[  319.090389][ T8579] Buffer I/O error on dev loop7, logical block 195, lost async page write
[  319.099530][ T8579] Buffer I/O error on dev loop7, logical block 196, lost async page write
[  319.108630][ T8579] Buffer I/O error on dev loop7, logical block 197, lost async page write
[  319.119481][ T8579] Buffer I/O error on dev loop7, logical block 198, lost async page write
[  319.139694][ T8579] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.151835][ T8579] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.161180][ T8579] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.171056][ T8579] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.184943][ T8579] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.194356][ T8579] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.204130][ T8579] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.241020][ T8579] ldm_validate_partition_table(): Disk read failed.
[  319.248362][ T8579] Dev loop7: unable to read RDB block 0
[  319.254888][ T8579]  loop7: unable to read partition table
[  319.260837][ T8579] loop_reread_partitions: partition scan of loop7 (R%A���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  319.269312][   T59] gspca_se401: ExtraFeatures: 7
[  319.546646][   T47] vhci_hcd: vhci_device speed not set
[  319.697698][ T8598] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  320.675376][   T59] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14
[  320.932256][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  320.948293][   T59] usb 5-1: USB disconnect, device number 17
[  321.058446][ T8610] lo speed is unknown, defaulting to 1000
[  321.157453][ T8617] 9pnet: Unknown protocol version 9p200
[  321.169116][ T8617] siw: device registration error -23
[  321.750902][ T5874] usb 1-1: USB disconnect, device number 17
[  321.859347][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  321.925426][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  321.984105][ T5874] quatech2 1-1:0.51: device disconnected
[  322.132023][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'.
[  322.255440][ T8625] overlayfs: failed to resolve './file1': -2
[  322.284545][ T8625] overlayfs: failed to resolve './file1': -2
[  323.044111][ T8637] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  323.555860][ T5874] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  323.630393][ T5907] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  324.928834][ T5874] usb 1-1: Using ep0 maxpacket: 32
[  324.939828][ T5907] usb 5-1: Using ep0 maxpacket: 16
[  325.079569][ T5907] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  325.089534][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.102251][ T5907] usb 5-1: Product: syz
[  325.108904][ T5907] usb 5-1: Manufacturer: syz
[  325.114966][ T5907] usb 5-1: SerialNumber: syz
[  325.125741][ T5874] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  325.134121][ T5874] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  325.145374][ T5874] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  325.156568][ T5874] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  325.170151][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0
[  325.178229][ T5907] usb 5-1: config 0 descriptor??
[  325.362264][ T5874] usb 1-1: string descriptor 0 read error: -71
[  325.370383][ T5874] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  325.379683][ T5874] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  325.415880][ T5874] usb 1-1: config 0 descriptor??
[  325.436458][ T5874] usb 1-1: can't set config #0, error -71
[  325.458775][ T5874] usb 1-1: USB disconnect, device number 18
[  325.702075][ T8656] FAULT_INJECTION: forcing a failure.
[  325.702075][ T8656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.786470][ T8656] CPU: 0 UID: 0 PID: 8656 Comm: syz.5.718 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  325.797128][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  325.807211][ T8656] Call Trace:
[  325.810506][ T8656]  <TASK>
[  325.813542][ T8656]  dump_stack_lvl+0x241/0x360
[  325.818336][ T8656]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.823563][ T8656]  ? __pfx__printk+0x10/0x10
[  325.828189][ T8656]  ? __pfx_lock_release+0x10/0x10
[  325.833238][ T8656]  should_fail_ex+0x3b0/0x4e0
[  325.838036][ T8656]  _copy_from_user+0x2f/0xc0
[  325.842741][ T8656]  copy_msghdr_from_user+0xae/0x680
[  325.847972][ T8656]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  325.853813][ T8656]  ? __fget_files+0x2a/0x410
[  325.858443][ T8656]  ? __fget_files+0x2a/0x410
[  325.863058][ T8656]  __sys_sendmmsg+0x32b/0x720
[  325.867771][ T8656]  ? __pfx___sys_sendmmsg+0x10/0x10
[  325.873002][ T8656]  ? __pfx_lock_release+0x10/0x10
[  325.878047][ T8656]  ? kstrtouint_from_user+0x128/0x190
[  325.883465][ T8656]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  325.889394][ T8656]  ? ksys_write+0x22a/0x2b0
[  325.893938][ T8656]  ? __pfx_lock_release+0x10/0x10
[  325.899003][ T8656]  ? vfs_write+0x730/0xd30
[  325.903459][ T8656]  ? __mutex_unlock_slowpath+0x21e/0x790
[  325.909231][ T8656]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  325.915235][ T8656]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  325.921672][ T8656]  ? do_syscall_64+0x100/0x230
[  325.926466][ T8656]  __x64_sys_sendmmsg+0xa0/0xb0
[  325.931343][ T8656]  do_syscall_64+0xf3/0x230
[  325.935872][ T8656]  ? clear_bhb_loop+0x35/0x90
[  325.940574][ T8656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.946515][ T8656] RIP: 0033:0x7ff344b85d29
[  325.950977][ T8656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.970614][ T8656] RSP: 002b:00007ff345a26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  325.979094][ T8656] RAX: ffffffffffffffda RBX: 00007ff344d75fa0 RCX: 00007ff344b85d29
[  325.987086][ T8656] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000003
[  325.995079][ T8656] RBP: 00007ff345a26090 R08: 0000000000000000 R09: 0000000000000000
[  326.003072][ T8656] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001
[  326.011063][ T8656] R13: 0000000000000000 R14: 00007ff344d75fa0 R15: 00007ffc2fa1fa78
[  326.019070][ T8656]  </TASK>
[  326.289634][ T5907] usb 5-1: can't set config #0, error -71
[  326.305923][ T5907] usb 5-1: USB disconnect, device number 18
[  326.497488][ T8670] 9pnet: Unknown protocol version 9p200
[  326.504309][ T8670] siw: device registration error -23
[  326.645685][   T59] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  326.811485][   T59] usb 4-1: Using ep0 maxpacket: 8
[  326.867507][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  326.882463][ T5907] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  326.900410][   T59] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  326.911017][   T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.923047][   T59] usb 4-1: Product: syz
[  326.929147][   T59] usb 4-1: Manufacturer: syz
[  326.935249][   T59] usb 4-1: SerialNumber: syz
[  326.995740][   T59] usb 4-1: config 0 descriptor??
[  327.022882][   T59] gspca_main: se401-2.14.0 probing 047d:5003
[  327.051765][ T5907] usb 5-1: Using ep0 maxpacket: 32
[  327.059878][ T5872] usb 6-1: Using ep0 maxpacket: 32
[  327.070868][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  327.082654][ T5872] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=db.8b
[  327.092277][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.111529][ T5872] usb 6-1: config 0 descriptor??
[  327.123331][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0
[  327.202490][ T5907] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  327.211867][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.219985][ T5907] usb 5-1: Product: syz
[  327.224314][ T5907] usb 5-1: Manufacturer: syz
[  327.228990][ T5907] usb 5-1: SerialNumber: syz
[  327.262624][ T5907] usb 5-1: config 0 descriptor??
[  327.270519][ T5134] Bluetooth: hci1: unexpected event for opcode 0x080e
[  327.355820][ T5908] usb 6-1: USB disconnect, device number 5
[  327.454187][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  327.454206][   T30] audit: type=1326 audit(1735499155.616:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8673 comm="syz.0.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0cc985d29 code=0x80000000
[  327.484573][   T59] gspca_se401: ExtraFeatures: 7
[  327.743112][   T59] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15
[  327.806532][   T59] usb 4-1: USB disconnect, device number 15
[  327.816927][ T5907] gs_usb 5-1:0.0: Configuring for 3 interfaces
[  328.131174][ T5907] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  328.143919][ T5907] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  328.166733][ T5907] usb 5-1: USB disconnect, device number 19
[  328.201113][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  328.355656][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  328.501994][ T8688] netlink: 'syz.1.727': attribute type 1 has an invalid length.
[  328.518483][ T5908] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  328.534094][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.551150][ T8688] netlink: 100 bytes leftover after parsing attributes in process `syz.1.727'.
[  328.582238][ T5908] usb 6-1: config 0 descriptor??
[  328.823229][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.843231][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.876641][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.899681][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.953963][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'.
[  328.963820][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.008397][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.030037][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.061558][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.103647][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.151096][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.217765][ T8705] FAULT_INJECTION: forcing a failure.
[  329.217765][ T8705] name failslab, interval 1, probability 0, space 0, times 0
[  329.230857][ T8705] CPU: 0 UID: 0 PID: 8705 Comm: syz.3.732 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  329.241500][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  329.251600][ T8705] Call Trace:
[  329.254900][ T8705]  <TASK>
[  329.257855][ T8705]  dump_stack_lvl+0x241/0x360
[  329.262571][ T8705]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.267811][ T8705]  ? __pfx__printk+0x10/0x10
[  329.272434][ T8705]  ? __kmalloc_cache_noprof+0x48/0x390
[  329.277918][ T8705]  ? __pfx___might_resched+0x10/0x10
[  329.283241][ T8705]  should_fail_ex+0x3b0/0x4e0
[  329.287954][ T8705]  should_failslab+0xac/0x100
[  329.292666][ T8705]  __kmalloc_cache_noprof+0x70/0x390
[  329.297993][ T8705]  ? tcp_sendmsg_fastopen+0x1d8/0x5d0
[  329.303391][ T8705]  ? ima_get_action+0x75/0xb0
[  329.308107][ T8705]  tcp_sendmsg_fastopen+0x1d8/0x5d0
[  329.313338][ T8705]  tcp_sendmsg_locked+0x48d2/0x4f30
[  329.318582][ T8705]  ? mark_lock+0x9a/0x360
[  329.322937][ T8705]  ? __lock_acquire+0x1397/0x2100
[  329.327997][ T8705]  ? mark_lock+0x9a/0x360
[  329.332351][ T8705]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  329.338355][ T8705]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  329.344715][ T8705]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  329.350290][ T8705]  ? tcp_sendmsg+0x22/0x50
[  329.354735][ T8705]  ? do_raw_spin_unlock+0x13c/0x8b0
[  329.359972][ T8705]  tcp_sendmsg+0x30/0x50
[  329.364243][ T8705]  __sock_sendmsg+0x1a6/0x270
[  329.369053][ T8705]  ____sys_sendmsg+0x52a/0x7e0
[  329.373863][ T8705]  ? __pfx_____sys_sendmsg+0x10/0x10
[  329.379186][ T8705]  ? __fget_files+0x2a/0x410
[  329.383807][ T8705]  ? __fget_files+0x2a/0x410
[  329.388427][ T8705]  __sys_sendmmsg+0x36a/0x720
[  329.393148][ T8705]  ? __pfx___sys_sendmmsg+0x10/0x10
[  329.398392][ T8705]  ? __pfx_lock_release+0x10/0x10
[  329.403442][ T8705]  ? kstrtouint_from_user+0x128/0x190
[  329.408879][ T8705]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  329.414814][ T8705]  ? ksys_write+0x22a/0x2b0
[  329.419360][ T8705]  ? __pfx_lock_release+0x10/0x10
[  329.424415][ T8705]  ? vfs_write+0x730/0xd30
[  329.428866][ T8705]  ? __mutex_unlock_slowpath+0x21e/0x790
[  329.434532][ T8705]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  329.440523][ T8705]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  329.446853][ T8705]  ? do_syscall_64+0x100/0x230
[  329.451626][ T8705]  __x64_sys_sendmmsg+0xa0/0xb0
[  329.456482][ T8705]  do_syscall_64+0xf3/0x230
[  329.461007][ T8705]  ? clear_bhb_loop+0x35/0x90
[  329.465687][ T8705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.471614][ T8705] RIP: 0033:0x7fa99b985d29
[  329.476041][ T8705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.495656][ T8705] RSP: 002b:00007fa99c777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  329.504077][ T8705] RAX: ffffffffffffffda RBX: 00007fa99bb75fa0 RCX: 00007fa99b985d29
[  329.512052][ T8705] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000003
[  329.520032][ T8705] RBP: 00007fa99c777090 R08: 0000000000000000 R09: 0000000000000000
[  329.528006][ T8705] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001
[  329.535980][ T8705] R13: 0000000000000000 R14: 00007fa99bb75fa0 R15: 00007ffe665ed468
[  329.543973][ T8705]  </TASK>
[  329.612909][ T5908] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  329.630168][ T5908] asix 6-1:0.0: probe with driver asix failed with error -71
[  330.099076][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'.
[  330.285092][ T5908] usb 6-1: USB disconnect, device number 6
[  331.114333][   T47] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  331.243223][ T5823] Bluetooth: hci5: command 0x0405 tx timeout
[  331.592435][ T8722] 9pnet: Unknown protocol version 9p200
[  331.613515][ T8722] siw: device registration error -23
[  332.209371][   T47] usb 2-1: Using ep0 maxpacket: 16
[  332.403971][   T47] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  332.413393][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.638505][   T47] usb 2-1: Product: syz
[  332.752821][ T8735] lo speed is unknown, defaulting to 1000
[  332.772564][ T8735] lo speed is unknown, defaulting to 1000
[  332.781736][ T8735] lo speed is unknown, defaulting to 1000
[  333.314497][ T8735] infiniband s
z1: set active
[  333.319595][ T8735] infiniband s
z1: added lo
[  333.388221][ T8734] ������: renamed from lo (while UP)
[  333.406364][  T978] ������ speed is unknown, defaulting to 1000
[  333.428364][ T8735] RDS/IB: s
z1: added
[  333.433043][ T8735] smc: adding ib device s
z1 with port count 1
[  333.439797][ T8735] smc:    ib device s
z1 port 1 has pnetid 
[  333.448294][ T8735] ������ speed is unknown, defaulting to 1000
[  333.533425][ T8735] ������ speed is unknown, defaulting to 1000
[  333.589651][ T8735] ������ speed is unknown, defaulting to 1000
[  333.654291][ T8735] ������ speed is unknown, defaulting to 1000
[  333.717197][ T8735] ������ speed is unknown, defaulting to 1000
[  333.776830][ T8735] ������ speed is unknown, defaulting to 1000
[  333.833566][ T8736] siw: device registration error -23
[  333.911571][   T47] usb 2-1: Manufacturer: syz
[  333.927688][  T978] ������ speed is unknown, defaulting to 1000
[  333.934229][   T47] usb 2-1: SerialNumber: syz
[  333.942802][   T47] usb 2-1: config 0 descriptor??
[  333.948699][   T47] usb 2-1: can't set config #0, error -71
[  333.957171][   T47] usb 2-1: USB disconnect, device number 28
[  334.697470][ T5907] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  334.876954][ T5907] usb 2-1: device descriptor read/64, error -71
[  334.917057][ T8754] netlink: 'syz.3.743': attribute type 1 has an invalid length.
[  334.930730][ T8754] netlink: 100 bytes leftover after parsing attributes in process `syz.3.743'.
[  334.970588][ T8756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  334.983961][ T8756] FAULT_INJECTION: forcing a failure.
[  334.983961][ T8756] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.999554][ T8756] CPU: 0 UID: 0 PID: 8756 Comm: syz.0.744 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  335.010211][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  335.020306][ T8756] Call Trace:
[  335.023602][ T8756]  <TASK>
[  335.026550][ T8756]  dump_stack_lvl+0x241/0x360
[  335.031262][ T8756]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.036495][ T8756]  ? __pfx__printk+0x10/0x10
[  335.041128][ T8756]  ? snprintf+0xda/0x120
[  335.045415][ T8756]  should_fail_ex+0x3b0/0x4e0
[  335.050157][ T8756]  _copy_to_user+0x31/0xb0
[  335.054631][ T8756]  simple_read_from_buffer+0xca/0x150
[  335.060057][ T8756]  proc_fail_nth_read+0x1e9/0x250
[  335.065136][ T8756]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  335.070773][ T8756]  ? rw_verify_area+0x55e/0x6f0
[  335.075774][ T8756]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  335.081359][ T8756]  vfs_read+0x1fc/0xb70
[  335.085546][ T8756]  ? __pfx___mutex_lock+0x10/0x10
[  335.090577][ T8756]  ? __pfx_vfs_read+0x10/0x10
[  335.095280][ T8756]  ? __fget_files+0x2a/0x410
[  335.099906][ T8756]  ? __fget_files+0x395/0x410
[  335.104606][ T8756]  ? __fget_files+0x2a/0x410
[  335.109321][ T8756]  ksys_read+0x18f/0x2b0
[  335.113597][ T8756]  ? __pfx_ksys_read+0x10/0x10
[  335.118376][ T8756]  ? do_syscall_64+0x100/0x230
[  335.123151][ T8756]  ? do_syscall_64+0xb6/0x230
[  335.127925][ T8756]  do_syscall_64+0xf3/0x230
[  335.132455][ T8756]  ? clear_bhb_loop+0x35/0x90
[  335.137146][ T8756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.143068][ T8756] RIP: 0033:0x7fd0cc98473c
[  335.147513][ T8756] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  335.167138][ T8756] RSP: 002b:00007fd0cd887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  335.175570][ T8756] RAX: ffffffffffffffda RBX: 00007fd0ccb75fa0 RCX: 00007fd0cc98473c
[  335.183550][ T8756] RDX: 000000000000000f RSI: 00007fd0cd8870a0 RDI: 0000000000000004
[  335.191542][ T8756] RBP: 00007fd0cd887090 R08: 0000000000000000 R09: 0000000000000000
[  335.199608][ T8756] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001
[  335.207582][ T8756] R13: 0000000000000000 R14: 00007fd0ccb75fa0 R15: 00007ffc5ba26978
[  335.215570][ T8756]  </TASK>
[  335.305219][ T5907] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  335.443420][ T5907] usb 2-1: device descriptor read/64, error -71
[  335.459844][ T8760] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  335.562116][ T5907] usb usb2-port1: attempt power cycle
[  336.766741][ T8777] 9pnet: Unknown protocol version 9p200
[  336.773777][ T8777] siw: device registration error -23
[  336.921370][ T5907] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  337.474666][ T5907] usb 2-1: device descriptor read/8, error -71
[  337.556967][ T8786] lo speed is unknown, defaulting to 1000
[  337.591720][ T8786] ������ speed is unknown, defaulting to 1000
[  337.659751][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'.
[  337.966579][ T5908] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  340.953303][ T5823] Bluetooth: hci5: command 0x0405 tx timeout
[  341.056309][ T5908] usb 1-1: Using ep0 maxpacket: 16
[  341.062345][ T5908] usb 1-1: device descriptor read/all, error -71
[  341.559600][ T8829] 9pnet: Unknown protocol version 9p200
[  341.566411][ T8829] siw: device registration error -23
[  341.577565][ T8830] netlink: 152 bytes leftover after parsing attributes in process `syz.0.765'.
[  343.631834][ T8844] netlink: 'syz.3.769': attribute type 1 has an invalid length.
[  345.110020][ T8859] tc_dump_action: action bad kind
[  345.429583][ T8863] usb usb7: usbfs: process 8863 (syz.3.774) did not claim interface 0 before use
[  345.511532][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'.
[  346.020389][  T978] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  346.925451][  T978] usb 5-1: Using ep0 maxpacket: 16
[  346.963381][  T978] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  347.039442][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.255686][  T978] usb 5-1: Product: syz
[  347.273605][  T978] usb 5-1: Manufacturer: syz
[  347.282896][  T978] usb 5-1: SerialNumber: syz
[  347.349540][ T8886] netlink: 'syz.0.780': attribute type 1 has an invalid length.
[  347.884195][ T8892] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  347.997562][  T978] usb 5-1: config 0 descriptor??
[  348.016536][  T978] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  349.543998][  T978] usb 5-1: clie_3_5_startup: get interface number failed: -71
[  349.552339][  T978] visor 5-1:0.0: probe with driver visor failed with error -71
[  349.908824][  T978] usb 5-1: USB disconnect, device number 20
[  350.840227][ T8909] netlink: 'syz.0.786': attribute type 3 has an invalid length.
[  350.874575][ T8909] netlink: 'syz.0.786': attribute type 10 has an invalid length.
[  350.899321][ T8909] syz_tun: entered promiscuous mode
[  350.924937][ T8909] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  353.868367][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'.
[  354.366231][ T5908] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  354.441569][ T8949] netlink: 152 bytes leftover after parsing attributes in process `syz.1.796'.
[  354.647564][ T5908] usb 5-1: Using ep0 maxpacket: 16
[  354.713093][ T5908] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  354.840942][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.974468][ T5908] usb 5-1: Product: syz
[  355.018038][ T5908] usb 5-1: Manufacturer: syz
[  355.038616][ T5908] usb 5-1: SerialNumber: syz
[  355.054417][ T5908] usb 5-1: config 0 descriptor??
[  355.063673][ T5908] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  355.599437][ T5908] usb 5-1: clie_3_5_startup: get interface number bad return length: 0
[  355.618461][ T5908] visor 5-1:0.0: probe with driver visor failed with error -5
[  355.640599][   T30] audit: type=1326 audit(1735499181.976:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.0.799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0cc985d29 code=0x0
[  355.744998][   T59] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  355.823624][ T5908] usb 5-1: USB disconnect, device number 21
[  355.919000][   T59] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  355.937870][   T59] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  355.951827][   T59] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  355.973589][   T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.982720][   T59] usb 2-1: Product: syz
[  355.987332][   T59] usb 2-1: Manufacturer: syz
[  355.992763][   T59] usb 2-1: SerialNumber: syz
[  356.220820][ T8953] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  356.835588][ T5907] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  356.929405][ T8953] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  356.985169][ T5907] usb 1-1: device descriptor read/64, error -71
[  357.317615][   T59] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  357.329148][ T8974] loop7: detected capacity change from 0 to 16384
[  357.330631][   T59] cdc_ncm 2-1:1.0: setting rx_max = 16384
[  357.594718][ T5907] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  357.752109][ T8953] netlink: 'syz.1.798': attribute type 1 has an invalid length.
[  357.776574][ T5907] usb 1-1: device descriptor read/64, error -71
[  357.969819][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'.
[  358.003534][ T5907] usb usb1-port1: attempt power cycle
[  358.103695][   T59] cdc_ncm 2-1:1.0: setting tx_max = 16384
[  358.294919][ T8982] 9pnet_fd: Insufficient options for proto=fd
[  358.392736][ T8975] loop7: detected capacity change from 16384 to 16383
[  358.567232][ T5907] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  358.627451][ T5907] usb 1-1: device descriptor read/8, error -71
[  358.707755][ T8990] netlink: 152 bytes leftover after parsing attributes in process `syz.4.808'.
[  358.909613][ T5907] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  359.258310][   T59] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  359.270087][ T5907] usb 1-1: device descriptor read/8, error -71
[  359.891302][  T911] usb 2-1: USB disconnect, device number 33
[  359.909512][  T911] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  359.939520][ T5907] usb usb1-port1: unable to enumerate USB device
[  361.505448][ T8995] blk_print_req_error: 10 callbacks suppressed
[  361.505464][ T8995] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0
[  361.524847][ T8995] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0
[  361.534870][ T8995] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.545600][ T8995] buffer_io_error: 42 callbacks suppressed
[  361.545616][ T8995] Buffer I/O error on dev loop7, logical block 4096, async page read
[  361.563238][ T8995] I/O error, dev loop7, sector 4097 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.572698][ T8995] Buffer I/O error on dev loop7, logical block 4097, async page read
[  361.580837][ T8995] I/O error, dev loop7, sector 4098 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.590255][ T8995] Buffer I/O error on dev loop7, logical block 4098, async page read
[  361.598836][ T8995] I/O error, dev loop7, sector 4099 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.608663][ T8995] Buffer I/O error on dev loop7, logical block 4099, async page read
[  361.616875][ T8995] I/O error, dev loop7, sector 4100 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.626292][ T8995] Buffer I/O error on dev loop7, logical block 4100, async page read
[  361.634433][ T8995] I/O error, dev loop7, sector 4101 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.643860][ T8995] Buffer I/O error on dev loop7, logical block 4101, async page read
[  361.653296][ T8995] I/O error, dev loop7, sector 4102 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.662822][ T8995] Buffer I/O error on dev loop7, logical block 4102, async page read
[  361.671081][ T8995] I/O error, dev loop7, sector 4103 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.680554][ T8995] Buffer I/O error on dev loop7, logical block 4103, async page read
[  361.692049][   T26] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  361.711113][   T26] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  366.243371][ T5907] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  366.435628][ T5907] usb 1-1: Using ep0 maxpacket: 16
[  366.489862][ T5907] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  366.536612][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.608452][ T5907] usb 1-1: Product: syz
[  366.612761][ T5907] usb 1-1: Manufacturer: syz
[  366.646169][ T5907] usb 1-1: SerialNumber: syz
[  366.709885][ T5907] usb 1-1: config 0 descriptor??
[  366.754842][ T5907] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  366.804849][ T5907] usb 1-1: Detected FT232H
[  366.971614][ T5907] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  367.228709][ T9064] 9pnet: Unknown protocol version 9p200
[  367.241870][ T9064] siw: device registration error -23
[  367.251604][  T978] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  367.472553][  T978] usb 5-1: Using ep0 maxpacket: 8
[  367.498672][  T978] usb 5-1: unable to get BOS descriptor or descriptor too short
[  367.584485][  T978] usb 5-1: config 9 has an invalid interface number: 93 but max is 0
[  367.843151][ T5907] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  367.985582][  T978] usb 5-1: config 9 has no interface number 0
[  367.995718][  T978] usb 5-1: config 9 interface 93 altsetting 9 endpoint 0x1 has an invalid bInterval 192, changing to 11
[  368.014071][ T9041] befs: (nbd5): No write support. Marking filesystem read-only
[  368.017640][  T978] usb 5-1: config 9 interface 93 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0
[  368.042372][ T9041] syz.5.823: attempt to access beyond end of device
[  368.042372][ T9041] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0
[  368.069237][  T978] usb 5-1: config 9 interface 93 has no altsetting 0
[  368.116077][ T9041] befs: (nbd5): unable to read superblock
[  368.126476][  T978] usb 5-1: New USB device found, idVendor=0cf3, idProduct=0004, bcdDevice=4f.8a
[  368.146295][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.167436][  T978] usb 5-1: Product: syz
[  368.179215][ T7219] usb 1-1: USB disconnect, device number 25
[  368.370693][  T978] usb 5-1: Manufacturer: syz
[  368.377631][  T978] usb 5-1: SerialNumber: syz
[  368.442635][ T9073] loop8: detected capacity change from 0 to 7
[  368.471468][ T7219] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  368.538856][ T9076] 9pnet: Unknown protocol version 9p200
[  368.558720][ T9076] siw: device registration error -23
[  368.597572][ T7219] ftdi_sio 1-1:0.0: device disconnected
[  368.677908][ T9073] Dev loop8: unable to read RDB block 7
[  368.710044][ T9073]  loop8: AHDI p4
[  368.722897][ T9059] tmpfs: Unknown parameter 'smackfsfloor'
[  368.795800][ T9073] loop8: partition table partially beyond EOD, truncated
[  369.019577][ T9059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.041657][ T9059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.109748][  T978] usb 5-1: Could not find all expected endpoints
[  369.120040][  T978] usb 5-1: USB disconnect, device number 22
[  369.526992][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  372.561210][   T59] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  372.629177][ T9099] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  373.010477][  T978] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  373.224506][  T978] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef
[  373.224609][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.224695][  T978] usb 1-1: Product: syz
[  373.224775][  T978] usb 1-1: Manufacturer: syz
[  373.224856][  T978] usb 1-1: SerialNumber: syz
[  373.299302][  T978] usb 1-1: config 0 descriptor??
[  373.387278][  T978] gspca_main: benq-2.14.0 probing 04a5:3035
[  373.694698][   T59] usb 4-1: device descriptor read/64, error -71
[  373.880094][ T5872] usb 1-1: USB disconnect, device number 26
[  373.951896][   T59] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  373.995442][   T30] audit: type=1326 audit(1735499199.150:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  374.122265][   T30] audit: type=1326 audit(1735499199.178:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  374.165072][   T59] usb 4-1: device descriptor read/64, error -71
[  374.249193][   T30] audit: type=1326 audit(1735499199.187:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  374.340171][   T30] audit: type=1326 audit(1735499199.187:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  374.353422][   T59] usb usb4-port1: attempt power cycle
[  374.433875][   T30] audit: type=1326 audit(1735499199.187:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  374.551788][   T30] audit: type=1326 audit(1735499199.187:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  374.756749][   T30] audit: type=1326 audit(1735499199.187:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  374.785073][   T59] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  374.830258][   T59] usb 4-1: device descriptor read/8, error -71
[  374.972650][   T30] audit: type=1326 audit(1735499199.197:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  375.051584][   T30] audit: type=1326 audit(1735499199.197:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  375.084698][   T59] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  375.125509][   T59] usb 4-1: device descriptor read/8, error -71
[  375.223337][   T30] audit: type=1326 audit(1735499199.197:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9119 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff344b85d29 code=0x7ffc0000
[  375.277401][   T59] usb usb4-port1: unable to enumerate USB device
[  376.313436][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.848'.
[  376.458070][ T9153] netlink: 'syz.3.849': attribute type 1 has an invalid length.
[  376.573840][ T9153] bond1: entered promiscuous mode
[  376.696077][ T9156] team0: Port device team_slave_1 removed
[  376.714432][ T9156] bond1: (slave team_slave_1): making interface the new active one
[  376.726242][ T9156] team_slave_1: entered promiscuous mode
[  376.739657][ T9156] bond1: (slave team_slave_1): Enslaving as an active interface with an up link
[  377.279383][ T9166] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  377.364880][ T5872] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  377.564633][ T5872] usb 2-1: Using ep0 maxpacket: 32
[  377.596065][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short
[  377.628762][ T5872] usb 2-1: config 7 has an invalid interface number: 128 but max is 0
[  377.660911][ T5872] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  377.669781][ T5872] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  377.757102][ T5872] usb 2-1: config 7 has no interface number 0
[  377.834585][ T5872] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7
[  377.902021][ T5872] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32
[  377.959983][ T5872] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11
[  377.981386][ T5872] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  377.994693][ T5872] usb 2-1: config 7 interface 128 has no altsetting 0
[  378.116415][ T5872] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[  378.138822][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.147567][ T5872] usb 2-1: Product: syz
[  378.151768][ T5872] usb 2-1: Manufacturer: syz
[  378.156525][ T5872] usb 2-1: SerialNumber: syz
[  378.194690][ T9164] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  379.373877][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.403819][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.463298][ T5872] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  379.475180][ T5872] usb 2-1: MIDIStreaming interface descriptor not found
[  379.599462][ T5872] usb 2-1: USB disconnect, device number 34
[  379.928086][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  380.308326][ T9199] fuse: Unknown parameter ''
[  380.860524][ T9211] loop7: detected capacity change from 0 to 16384
[  381.938115][ T9213] loop7: detected capacity change from 16384 to 16383
[  382.076303][ T5907] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  382.094607][ T9225] netlink: 632 bytes leftover after parsing attributes in process `syz.5.871'.
[  382.150713][   T59] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  382.255064][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  382.276789][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  382.321840][   T59] usb 4-1: Using ep0 maxpacket: 8
[  382.329328][   T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.342512][ T5907] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  382.642837][ T5134] Bluetooth: hci5: command 0x0405 tx timeout
[  382.922528][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.930706][   T59] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  383.074980][ T5907] usb 2-1: Product: syz
[  383.079329][   T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.088063][ T5907] usb 2-1: Manufacturer: syz
[  383.096243][ T5907] usb 2-1: SerialNumber: syz
[  383.108920][   T59] usb 4-1: config 0 descriptor??
[  383.588832][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[  383.620328][ T5907] usb 2-1: 0:2 : does not exist
[  383.629600][ T5907] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  383.710785][   T59] hid-alps 0003:044E:121E.0006: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.3-1/input0
[  383.772251][ T5907] usb 2-1: USB disconnect, device number 35
[  384.019991][ T6130] udevd[6130]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  384.072960][   T47] usb 4-1: USB disconnect, device number 20
[  384.611917][ T9255] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  385.501569][ T9266] blk_print_req_error: 768 callbacks suppressed
[  385.501605][ T9266] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[  385.572791][ T9266] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[  385.638307][ T9266] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  385.685896][ T9266] buffer_io_error: 4094 callbacks suppressed
[  385.685948][ T9266] Buffer I/O error on dev loop7, logical block 1792, async page read
[  385.727111][ T9266] I/O error, dev loop7, sector 1793 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  385.737266][ T9266] Buffer I/O error on dev loop7, logical block 1793, async page read
[  385.746318][ T9266] I/O error, dev loop7, sector 1794 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  385.758614][ T9266] Buffer I/O error on dev loop7, logical block 1794, async page read
[  385.777391][ T9266] I/O error, dev loop7, sector 1795 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  385.794589][ T9266] Buffer I/O error on dev loop7, logical block 1795, async page read
[  385.813380][ T9266] I/O error, dev loop7, sector 1796 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  385.825772][ T9266] Buffer I/O error on dev loop7, logical block 1796, async page read
[  385.845369][ T9266] I/O error, dev loop7, sector 1797 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  385.886997][ T9266] Buffer I/O error on dev loop7, logical block 1797, async page read
[  385.957250][ T9266] I/O error, dev loop7, sector 1798 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  386.809443][ T9266] Buffer I/O error on dev loop7, logical block 1798, async page read
[  386.830144][ T9266] I/O error, dev loop7, sector 1799 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  386.982968][ T9266] Buffer I/O error on dev loop7, logical block 1799, async page read
[  387.014998][   T40] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  387.024903][   T40] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  388.141361][ T9293] Option '                             ' to dns_resolver key: bad/missing value
[  388.639549][ T9304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.896'.
[  389.130706][ T9323] loop7: detected capacity change from 0 to 16384
[  389.211309][ T9324] loop7: detected capacity change from 16384 to 16383
[  389.219522][ T9324] Dev loop7: unable to read RDB block 8
[  389.225400][ T9324]  loop7: unable to read partition table
[  389.231530][ T9324] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  389.291072][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'.
[  390.917124][ T5907] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  391.223706][ T5874] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  391.250689][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.260956][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  391.269933][ T5907] usb 6-1: config 1 has no interface number 0
[  391.276815][ T5907] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  391.336543][ T5907] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  391.336626][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.336681][ T5907] usb 6-1: Product: syz
[  391.336698][ T5907] usb 6-1: Manufacturer: syz
[  391.336769][ T5907] usb 6-1: SerialNumber: syz
[  391.405434][ T9352] netlink: 'syz.3.907': attribute type 1 has an invalid length.
[  391.804395][ T5874] usb 1-1: Using ep0 maxpacket: 16
[  391.824515][ T5874] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  391.824599][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.824676][ T5874] usb 1-1: Product: syz
[  391.824784][ T5874] usb 1-1: Manufacturer: syz
[  391.824849][ T5874] usb 1-1: SerialNumber: syz
[  391.889470][ T5874] usb 1-1: config 0 descriptor??
[  391.921248][ T5874] visor 1-1:0.0: Sony Clie 3.5 converter detected
[  392.488072][ T5907] cdc_ncm 6-1:1.1: NCM or ECM functional descriptors missing
[  392.488191][ T5907] cdc_ncm 6-1:1.1: bind() failure
[  392.575422][ T9335] option changes via remount are deprecated (pid=9333 comm=syz.5.900)
[  392.609575][ T5907] usb 6-1: USB disconnect, device number 8
[  392.801569][ T5874] usb 1-1: clie_3_5_startup: get config number failed: -71
[  392.801667][ T5874] visor 1-1:0.0: probe with driver visor failed with error -71
[  393.312108][ T5874] usb 1-1: USB disconnect, device number 27
[  393.365835][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'.
[  393.571013][ T9363] trusted_key: syz.5.909 sent an empty control message without MSG_MORE.
[  393.959177][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  394.371163][ T9380] loop7: detected capacity change from 0 to 16384
[  394.734451][ T9381] loop7: detected capacity change from 16384 to 16383
[  394.738441][ T9381] blk_print_req_error: 320 callbacks suppressed
[  394.738461][ T9381] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 112 prio class 0
[  394.738493][ T9381] buffer_io_error: 1792 callbacks suppressed
[  394.738504][ T9381] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  394.739184][ T9381] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  394.739253][ T9381] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  394.739305][ T9381] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  394.739359][ T9381] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  394.739418][ T9381] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  394.739468][ T9381] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  394.739519][ T9381] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  394.739571][ T9381] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  394.739624][ T9381] Buffer I/O error on dev loop7, logical block 9, lost async page write
[  394.756373][ T9380] I/O error, dev loop7, sector 1152 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 0
[  394.758833][ T9381] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  394.758940][ T9381] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  394.758941][ T9380] I/O error, dev loop7, sector 1408 op 0x0:(READ) flags 0x80700 phys_seg 19 prio class 0
[  394.759028][ T9381] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  394.759073][ T9380] I/O error, dev loop7, sector 1152 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  394.759115][ T9381] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  394.759194][ T9381] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  394.759351][ T9381] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  394.759549][ T9381] ldm_validate_partition_table(): Disk read failed.
[  394.759802][ T9381] Dev loop7: unable to read RDB block 0
[  394.760144][ T9381]  loop7: unable to read partition table
[  394.760294][ T9381] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  395.377310][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'.
[  395.460520][ T6043] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  395.623081][ T6043] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  395.623117][ T6043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.809054][ T5907] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  395.809314][ T6043] usb 6-1: config 0 descriptor??
[  395.857055][ T6043] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  395.858380][ T6043] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  396.403802][  T978] usb 6-1: USB disconnect, device number 9
[  396.882728][ T5907] usb 1-1: Using ep0 maxpacket: 16
[  396.892847][ T5907] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  396.892881][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.893002][ T5907] usb 1-1: Product: syz
[  396.893018][ T5907] usb 1-1: Manufacturer: syz
[  396.893031][ T5907] usb 1-1: SerialNumber: syz
[  396.895040][ T5907] usb 1-1: config 0 descriptor??
[  396.898639][ T5907] visor 1-1:0.0: Sony Clie 3.5 converter detected
[  397.487992][ T9414] syz.1.924 (9414) used greatest stack depth: 17168 bytes left
[  398.258938][ T5907] usb 1-1: clie_3_5_startup: get interface number failed: -71
[  398.259168][ T5907] visor 1-1:0.0: probe with driver visor failed with error -71
[  398.307384][ T5907] usb 1-1: USB disconnect, device number 28
[  401.101374][ T9438] ISOFS: Unable to identify CD-ROM format.
[  401.853912][ T5907] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  402.026302][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.046130][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  402.164099][ T5907] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  402.173257][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  402.270613][ T5907] usb 4-1: SerialNumber: syz
[  402.521840][ T5907] usb 4-1: 0:2 : does not exist
[  402.526828][ T5907] usb 4-1: unit 5 not found!
[  402.578743][ T5907] usb 4-1: USB disconnect, device number 21
[  402.902528][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  402.960174][ T9470] FAULT_INJECTION: forcing a failure.
[  402.960174][ T9470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.973590][ T9470] CPU: 1 UID: 0 PID: 9470 Comm: syz.0.940 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  402.984393][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  402.994491][ T9470] Call Trace:
[  402.997796][ T9470]  <TASK>
[  403.000755][ T9470]  dump_stack_lvl+0x241/0x360
[  403.005463][ T9470]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.010675][ T9470]  ? __pfx__printk+0x10/0x10
[  403.015323][ T9470]  ? __pfx_lock_release+0x10/0x10
[  403.020363][ T9470]  should_fail_ex+0x3b0/0x4e0
[  403.025054][ T9470]  _copy_from_user+0x2f/0xc0
[  403.029669][ T9470]  lo_ioctl+0x7b5/0x1f50
[  403.033934][ T9470]  ? validate_chain+0x11e/0x5920
[  403.038892][ T9470]  ? __pfx_lo_ioctl+0x10/0x10
[  403.043590][ T9470]  ? mark_lock+0x9a/0x360
[  403.047934][ T9470]  ? __lock_acquire+0x1397/0x2100
[  403.052974][ T9470]  ? validate_chain+0x11e/0x5920
[  403.057934][ T9470]  ? __pfx_lock_acquire+0x10/0x10
[  403.062963][ T9470]  ? is_bpf_text_address+0x26/0x2a0
[  403.068175][ T9470]  ? __pfx_validate_chain+0x10/0x10
[  403.073397][ T9470]  ? preempt_count_add+0x93/0x190
[  403.078472][ T9470]  ? 0xffffffffa0003b40
[  403.082630][ T9470]  ? 0xffffffffa0003b40
[  403.086812][ T9470]  ? is_bpf_text_address+0x285/0x2a0
[  403.092208][ T9470]  ? is_bpf_text_address+0x26/0x2a0
[  403.097425][ T9470]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  403.103602][ T9470]  ? kernel_text_address+0xa7/0xe0
[  403.108734][ T9470]  ? __kernel_text_address+0xd/0x40
[  403.113939][ T9470]  ? unwind_get_return_address+0x4d/0x90
[  403.119583][ T9470]  ? arch_stack_walk+0xfd/0x150
[  403.124450][ T9470]  ? mark_lock+0x9a/0x360
[  403.128797][ T9470]  ? __lock_acquire+0x1397/0x2100
[  403.134012][ T9470]  ? do_vfs_ioctl+0xf07/0x2e40
[  403.138792][ T9470]  ? __pfx_lock_acquire+0x10/0x10
[  403.143833][ T9470]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  403.148965][ T9470]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  403.154992][ T9470]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  403.161333][ T9470]  ? do_raw_spin_unlock+0x13c/0x8b0
[  403.166566][ T9470]  ? finish_task_switch+0x1e5/0x870
[  403.171793][ T9470]  ? lockdep_hardirqs_on+0x99/0x150
[  403.177094][ T9470]  ? finish_task_switch+0x1e5/0x870
[  403.182302][ T9470]  ? __schedule+0x1803/0x4be0
[  403.186995][ T9470]  ? tomoyo_path_number_perm+0x679/0x860
[  403.192638][ T9470]  ? blkdev_common_ioctl+0xfb2/0x2460
[  403.198121][ T9470]  ? __lock_acquire+0x1397/0x2100
[  403.203156][ T9470]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  403.208797][ T9470]  ? tomoyo_path_number_perm+0x206/0x860
[  403.214463][ T9470]  ? __pfx___schedule+0x10/0x10
[  403.219439][ T9470]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  403.225563][ T9470]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  403.231558][ T9470]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  403.237901][ T9470]  ? file_to_blk_mode+0xcc/0x140
[  403.242848][ T9470]  ? __pfx_lo_ioctl+0x10/0x10
[  403.247638][ T9470]  blkdev_ioctl+0x57d/0x6a0
[  403.252164][ T9470]  ? __pfx_blkdev_ioctl+0x10/0x10
[  403.257201][ T9470]  ? __se_sys_ioctl+0x51/0x170
[  403.261984][ T9470]  ? __pfx_blkdev_ioctl+0x10/0x10
[  403.267023][ T9470]  __se_sys_ioctl+0xf5/0x170
[  403.271663][ T9470]  do_syscall_64+0xf3/0x230
[  403.276175][ T9470]  ? clear_bhb_loop+0x35/0x90
[  403.280886][ T9470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.286808][ T9470] RIP: 0033:0x7fd0cc985d29
[  403.291244][ T9470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.311219][ T9470] RSP: 002b:00007fd0cd866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  403.319666][ T9470] RAX: ffffffffffffffda RBX: 00007fd0ccb76080 RCX: 00007fd0cc985d29
[  403.327648][ T9470] RDX: 0000000020000300 RSI: 0000000000004c02 RDI: 0000000000000004
[  403.335671][ T9470] RBP: 00007fd0cd866090 R08: 0000000000000000 R09: 0000000000000000
[  403.343657][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.351636][ T9470] R13: 0000000000000000 R14: 00007fd0ccb76080 R15: 00007ffc5ba26978
[  403.359806][ T9470]  </TASK>
[  404.004574][ T9472] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  404.019281][ T9472] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  404.037848][ T9472] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  404.043862][ T9472] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  404.061102][ T9472] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  404.072437][ T9472] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  404.083173][ T9472] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  404.886721][ T9494] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  404.893308][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  405.007409][ T9494] vhci_hcd vhci_hcd.0: Device attached
[  405.181756][ T5872] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  405.381980][ T6043] usb 33-1: new low-speed USB device number 3 using vhci_hcd
[  405.413752][ T7219] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  405.652330][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  405.702399][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  405.749161][ T5872] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  405.758531][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.822261][ T5872] usb 5-1: Product: syz
[  405.822295][ T5872] usb 5-1: Manufacturer: syz
[  405.822312][ T5872] usb 5-1: SerialNumber: syz
[  405.865946][ T5872] usb 5-1: config 0 descriptor??
[  405.868444][ T5872] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  405.869212][ T5872] usb 5-1: Detected SIO
[  405.876514][ T5872] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  406.090512][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.948'.
[  406.090569][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.948'.
[  406.090603][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.948'.
[  406.090655][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.948'.
[  406.091422][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.948'.
[  406.091442][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.948'.
[  406.091459][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.948'.
[  406.091487][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.948'.
[  406.094151][ T9499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.214188][ T5823] Bluetooth: hci1: command 0x0406 tx timeout
[  406.598118][ T7219] usb 1-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d
[  406.598154][ T7219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.309129][ T5823] Bluetooth: hci5: command 0x0405 tx timeout
[  412.309217][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  412.309293][ T5823] Bluetooth: hci1: command 0x0406 tx timeout
[  412.411530][ T9497] vhci_hcd: connection reset by peer
[  412.446725][ T7219] usb 1-1: config 0 descriptor??
[  412.451961][ T7219] usb 1-1: can't set config #0, error -71
[  412.452743][ T7360] vhci_hcd: stop threads
[  412.452782][ T7360] vhci_hcd: release socket
[  412.454815][ T7360] vhci_hcd: disconnect device
[  412.502212][ T7219] usb 1-1: USB disconnect, device number 29
[  412.587704][ T6043] vhci_hcd: vhci_device speed not set
[  414.499940][ T5134] Bluetooth: hci3: command 0x0406 tx timeout
[  414.499996][ T5134] Bluetooth: hci5: command 0x0405 tx timeout
[  414.732378][ T9525] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  415.321092][   T47] usb 5-1: USB disconnect, device number 23
[  415.544195][ T5874] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  415.835138][   T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  415.872825][   T47] ftdi_sio 5-1:0.0: device disconnected
[  415.879642][ T5874] usb 6-1: Using ep0 maxpacket: 8
[  416.094915][ T5874] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  416.104529][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.112557][ T5874] usb 6-1: Product: syz
[  416.175060][ T5874] usb 6-1: Manufacturer: syz
[  416.202523][ T5874] usb 6-1: SerialNumber: syz
[  416.269424][ T5874] usb 6-1: config 0 descriptor??
[  416.309795][ T5874] gspca_main: se401-2.14.0 probing 047d:5003
[  417.184672][ T5823] Bluetooth: hci5: command 0x0405 tx timeout
[  417.190949][ T5823] Bluetooth: hci5: unexpected event for opcode 0x080e
[  529.520627][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  529.527642][    C1] rcu: 	0-...!: (0 ticks this GP) idle=62ac/1/0x4000000000000000 softirq=32528/32528 fqs=0
[  529.539239][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7364/1:b..l P5830/1:b..l
[  529.548329][    C1] rcu: 	(detected by 1, t=10505 jiffies, g=31365, q=316 ncpus=2)
[  529.556077][    C1] Sending NMI from CPU 1 to CPUs 0:
[  529.556112][    C0] NMI backtrace for cpu 0
[  529.556126][    C0] CPU: 0 UID: 0 PID: 9571 Comm: syz.4.967 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[  529.556146][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  529.556157][    C0] RIP: 0010:__lock_acquire+0xe8f/0x2100
[  529.556183][    C0] Code: cf 49 89 fd 48 c7 c7 40 4d 80 8e 48 89 ee e8 08 1b 78 03 4c 89 ef eb 8a 89 d8 25 ff 1f 00 00 c1 eb 03 81 e3 00 60 00 00 09 c3 <4c> 89 f0 48 c1 e8 20 29 c3 89 c1 c1 c1 04 31 d9 44 01 f0 41 29 ce
[  529.556198][    C0] RSP: 0018:ffffc90000007930 EFLAGS: 00000046
[  529.556213][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88805dbf64e0
[  529.556225][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000
[  529.556236][    C0] RBP: ffff88805dbf6530 R08: ffffffff94270887 R09: 1ffffffff284e110
[  529.556249][    C0] R10: dffffc0000000000 R11: fffffbfff284e111 R12: ffff88805dbf5a00
[  529.556262][    C0] R13: ffff88805dbf5a00 R14: fb268dbe5ff7dd64 R15: 0000000000000000
[  529.556274][    C0] FS:  00007f394a90b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  529.556290][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  529.556302][    C0] CR2: 0000001b2fb1cff8 CR3: 000000007f834000 CR4: 00000000003526f0
[  529.556317][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  529.556327][    C0] DR3: 0000000000000016 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  529.556338][    C0] Call Trace:
[  529.556345][    C0]  <NMI>
[  529.556354][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  529.556377][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  529.556395][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  529.556420][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  529.556443][    C0]  ? nmi_handle+0x14f/0x5a0
[  529.556460][    C0]  ? nmi_handle+0x2a/0x5a0
[  529.556478][    C0]  ? __lock_acquire+0xe8f/0x2100
[  529.556495][    C0]  ? default_do_nmi+0x63/0x160
[  529.556513][    C0]  ? exc_nmi+0x123/0x1f0
[  529.556529][    C0]  ? end_repeat_nmi+0xf/0x53
[  529.556548][    C0]  ? __lock_acquire+0xe8f/0x2100
[  529.556565][    C0]  ? __lock_acquire+0xe8f/0x2100
[  529.556583][    C0]  ? __lock_acquire+0xe8f/0x2100
[  529.556599][    C0]  </NMI>
[  529.556605][    C0]  <IRQ>
[  529.556617][    C0]  lock_acquire+0x1ed/0x550
[  529.556633][    C0]  ? debug_object_deactivate+0x158/0x390
[  529.556661][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  529.556679][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  529.556705][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  529.556727][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[  529.556745][    C0]  ? debug_object_deactivate+0x158/0x390
[  529.556769][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  529.556792][    C0]  debug_object_deactivate+0x158/0x390
[  529.556817][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[  529.556842][    C0]  ? timerqueue_add+0x260/0x290
[  529.556855][    C0]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  529.556872][    C0]  debug_deactivate+0x1b/0x220
[  529.556894][    C0]  __hrtimer_run_queues+0x305/0xd30
[  529.556922][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  529.556942][    C0]  ? handle_softirqs+0x7e0/0x9b0
[  529.556965][    C0]  ? read_tsc+0x9/0x20
[  529.556986][    C0]  ? ktime_get_update_offsets_now+0x393/0x3b0
[  529.557005][    C0]  hrtimer_interrupt+0x403/0xa40
[  529.557034][    C0]  __sysvec_apic_timer_interrupt+0x110/0x420
[  529.557054][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  529.557076][    C0]  </IRQ>
[  529.557081][    C0]  <TASK>
[  529.557087][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  529.557123][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[  529.557144][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 7e c5 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 f7 a9 f5 65 8b 05 44 49 40 74 85 c0 74 43 48 c7 04 24 0e 36
[  529.557158][    C0] RSP: 0018:ffffc9000c03f920 EFLAGS: 00000206
[  529.557172][    C0] RAX: 99962237b651fb00 RBX: 1ffff92001807f28 RCX: ffffffff817b274a
[  529.557184][    C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000001
[  529.557196][    C0] RBP: ffffc9000c03f9b0 R08: ffffffff94270887 R09: 1ffffffff284e110
[  529.557208][    C0] R10: dffffc0000000000 R11: fffffbfff284e111 R12: dffffc0000000000
[  529.557221][    C0] R13: 1ffff92001807f24 R14: ffffc9000c03f940 R15: 0000000000000246
[  529.557236][    C0]  ? mark_lock+0x9a/0x360
[  529.557256][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  529.557277][    C0]  ? read_tsc+0x9/0x20
[  529.557300][    C0]  clock_was_set+0x686/0x810
[  529.557322][    C0]  ? __pfx_clock_was_set+0x10/0x10
[  529.557342][    C0]  ? timekeeping_inject_offset+0x3b7/0x520
[  529.557357][    C0]  ? timekeeping_update_from_shadow+0x308/0x3b0
[  529.557375][    C0]  timekeeping_inject_offset+0x3d2/0x520
[  529.557394][    C0]  ? __pfx_timekeeping_inject_offset+0x10/0x10
[  529.557410][    C0]  ? __pfx_add_device_randomness+0x10/0x10
[  529.557429][    C0]  ? bpf_lsm_capable+0x9/0x10
[  529.557446][    C0]  do_adjtimex+0x5b1/0xb10
[  529.557465][    C0]  ? __pfx_do_adjtimex+0x10/0x10
[  529.557481][    C0]  ? __pfx___might_resched+0x10/0x10
[  529.557505][    C0]  ? __might_fault+0xaa/0x120
[  529.557523][    C0]  ? __pfx_lock_release+0x10/0x10
[  529.557543][    C0]  ? __might_fault+0xc6/0x120
[  529.557564][    C0]  __x64_sys_clock_adjtime+0x1e1/0x290
[  529.557582][    C0]  ? __pfx___x64_sys_clock_adjtime+0x10/0x10
[  529.557609][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  529.557627][    C0]  ? do_syscall_64+0x100/0x230
[  529.557651][    C0]  ? do_syscall_64+0xb6/0x230
[  529.557673][    C0]  do_syscall_64+0xf3/0x230
[  529.557696][    C0]  ? clear_bhb_loop+0x35/0x90
[  529.557711][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.557734][    C0] RIP: 0033:0x7f3949b85d29
[  529.557749][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.557763][    C0] RSP: 002b:00007f394a90b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[  529.557779][    C0] RAX: ffffffffffffffda RBX: 00007f3949d75fa0 RCX: 00007f3949b85d29
[  529.557792][    C0] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000000
[  529.557802][    C0] RBP: 00007f3949c01b08 R08: 0000000000000000 R09: 0000000000000000
[  529.557813][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  529.557823][    C0] R13: 0000000000000000 R14: 00007f3949d75fa0 R15: 00007ffd5e85d458
[  529.557841][    C0]  </TASK>
[  529.558106][    C1] task:syz-executor    state:R  running task     stack:18872 pid:5830  tgid:5830  ppid:5814   flags:0x00004000
[  530.186912][    C1] Call Trace:
[  530.190202][    C1]  <TASK>
[  530.193146][    C1]  __schedule+0x17fb/0x4be0
[  530.197701][    C1]  ? __pfx___schedule+0x10/0x10
[  530.202578][    C1]  ? mark_lock+0x9a/0x360
[  530.206936][    C1]  ? preempt_schedule+0xe1/0xf0
[  530.211808][    C1]  preempt_schedule_common+0x84/0xd0
[  530.217114][    C1]  preempt_schedule+0xe1/0xf0
[  530.221812][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  530.227228][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  530.233167][    C1]  ? __page_table_check_ptes_set+0x30f/0x410
[  530.239179][    C1]  ? copy_pmd_range+0x6d6d/0x77a0
[  530.244246][    C1]  preempt_schedule_thunk+0x1a/0x30
[  530.249482][    C1]  _raw_spin_unlock+0x3e/0x50
[  530.254178][    C1]  copy_pmd_range+0x6dc8/0x77a0
[  530.259080][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  530.264297][    C1]  ? mark_lock+0x9a/0x360
[  530.268663][    C1]  ? __lock_acquire+0x1397/0x2100
[  530.273754][    C1]  copy_page_range+0x99f/0xe90
[  530.278559][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  530.283871][    C1]  ? __pfx_up_write+0x10/0x10
[  530.288565][    C1]  ? __asan_memset+0x23/0x50
[  530.293171][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  530.299965][    C1]  ? vma_interval_tree_insert_after+0x259/0x2b0
[  530.306236][    C1]  copy_mm+0x1126/0x1fd0
[  530.310523][    C1]  ? __pfx_copy_mm+0x10/0x10
[  530.315147][    C1]  ? __init_rwsem+0x122/0x160
[  530.319845][    C1]  ? copy_signal+0x51c/0x640
[  530.324467][    C1]  copy_process+0x1845/0x3d50
[  530.329181][    C1]  ? copy_process+0x9fa/0x3d50
[  530.333968][    C1]  ? __lock_acquire+0x1397/0x2100
[  530.339014][    C1]  ? __pfx_copy_process+0x10/0x10
[  530.344076][    C1]  kernel_clone+0x223/0x870
[  530.348596][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  530.353656][    C1]  __x64_sys_clone+0x258/0x2a0
[  530.358435][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  530.363736][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  530.369745][    C1]  ? exc_page_fault+0x590/0x8b0
[  530.374794][    C1]  ? do_syscall_64+0xb6/0x230
[  530.379505][    C1]  do_syscall_64+0xf3/0x230
[  530.384040][    C1]  ? clear_bhb_loop+0x35/0x90
[  530.388730][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.394656][    C1] RIP: 0033:0x7fe564b7c593
[  530.399084][    C1] RSP: 002b:00007fff8ca06288 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  530.407521][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe564b7c593
[  530.415505][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  530.423488][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  530.431475][    C1] R10: 0000555571f3a7d0 R11: 0000000000000246 R12: 0000000000000000
[  530.439458][    C1] R13: 0000000000061842 R14: 00007fff8ca06410 R15: 00000000000000ca
[  530.447462][    C1]  </TASK>
[  530.450489][    C1] task:kworker/u8:14   state:R  running task     stack:20152 pid:7364  tgid:7364  ppid:2      flags:0x00004000
[  530.462262][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  530.470099][    C1] Call Trace:
[  530.473384][    C1]  <TASK>
[  530.476330][    C1]  __schedule+0x17fb/0x4be0
[  530.480859][    C1]  ? __pfx_validate_chain+0x10/0x10
[  530.486077][    C1]  ? mark_lock+0x9a/0x360
[  530.490427][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  530.496432][    C1]  ? __pfx___schedule+0x10/0x10
[  530.501305][    C1]  ? mark_lock+0x9a/0x360
[  530.505659][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  530.512003][    C1]  ? batadv_iv_ogm_schedule+0x41e/0x10a0
[  530.517664][    C1]  preempt_schedule_notrace+0x100/0x140
[  530.523230][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  530.529324][    C1]  ? batadv_iv_ogm_schedule+0x41e/0x10a0
[  530.534982][    C1]  preempt_schedule_notrace_thunk+0x1a/0x30
[  530.540896][    C1]  ? lock_release+0xb0/0xa30
[  530.545507][    C1]  rcu_is_watching+0x7e/0xb0
[  530.550117][    C1]  lock_release+0xbf/0xa30
[  530.554551][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  530.559593][    C1]  ? batadv_iv_ogm_schedule+0x41e/0x10a0
[  530.565337][    C1]  ? __pfx_lock_release+0x10/0x10
[  530.570392][    C1]  batadv_iv_ogm_schedule+0x6f3/0x10a0
[  530.575887][    C1]  ? batadv_iv_ogm_schedule+0x41e/0x10a0
[  530.581559][    C1]  ? __pfx_batadv_iv_ogm_schedule+0x10/0x10
[  530.587475][    C1]  ? batadv_send_skb_packet+0x439/0x690
[  530.593058][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810
[  530.600117][    C1]  ? process_scheduled_works+0x976/0x1840
[  530.605866][    C1]  process_scheduled_works+0xa66/0x1840
[  530.611470][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  530.617505][    C1]  ? assign_work+0x364/0x3d0
[  530.622127][    C1]  worker_thread+0x870/0xd30
[  530.626757][    C1]  ? __kthread_parkme+0x169/0x1d0
[  530.631805][    C1]  ? __pfx_worker_thread+0x10/0x10
[  530.636932][    C1]  kthread+0x2f0/0x390
[  530.641031][    C1]  ? __pfx_worker_thread+0x10/0x10
[  530.646156][    C1]  ? __pfx_kthread+0x10/0x10
[  530.650767][    C1]  ret_from_fork+0x4b/0x80
[  530.655202][    C1]  ? __pfx_kthread+0x10/0x10
[  530.659811][    C1]  ret_from_fork_asm+0x1a/0x30
[  530.664612][    C1]  </TASK>
[  530.667645][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g31365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  530.679984][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=32004
[  530.687880][    C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g31365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  530.699262][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  530.709241][    C1] rcu: RCU grace-period kthread stack dump:
[  530.715136][    C1] task:rcu_preempt     state:I stack:25296 pid:17    tgid:17    ppid:2      flags:0x00004000
[  530.725338][    C1] Call Trace:
[  530.728631][    C1]  <TASK>
[  530.731606][    C1]  __schedule+0x17fb/0x4be0
[  530.736156][    C1]  ? __pfx___schedule+0x10/0x10
[  530.741032][    C1]  ? __pfx_lock_release+0x10/0x10
[  530.746080][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  530.752431][    C1]  ? schedule+0x90/0x320
[  530.756693][    C1]  schedule+0x14b/0x320
[  530.760874][    C1]  schedule_timeout+0x15a/0x290
[  530.765751][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  530.771151][    C1]  ? __pfx_process_timeout+0x10/0x10
[  530.776466][    C1]  ? prepare_to_swait_event+0x330/0x350
[  530.782032][    C1]  rcu_gp_fqs_loop+0x2df/0x1330
[  530.786903][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  530.792135][    C1]  ? rcu_gp_init+0x1256/0x1630
[  530.796923][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  530.801876][    C1]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  530.807787][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  530.813087][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  530.819005][    C1]  ? finish_swait+0xd4/0x1e0
[  530.823614][    C1]  rcu_gp_kthread+0xa7/0x3b0
[  530.828227][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  530.833441][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  530.839360][    C1]  ? __kthread_parkme+0x169/0x1d0
[  530.844405][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  530.849621][    C1]  kthread+0x2f0/0x390
[  530.853711][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  530.858939][    C1]  ? __pfx_kthread+0x10/0x10
[  530.863549][    C1]  ret_from_fork+0x4b/0x80
[  530.867982][    C1]  ? __pfx_kthread+0x10/0x10
[  530.872592][    C1]  ret_from_fork_asm+0x1a/0x30
[  530.877389][    C1]  </TASK>