last executing test programs:

11.988774043s ago: executing program 3 (id=736):
socket$kcm(0x10, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', '', [{0x20, 'blkio.bfq.io_wait_time_recursive\x00'}, {0x20, '#! '}, {0x20, '*\\\'$'}, {0x20, '#! '}]}, 0x33)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x12, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000002c0)={0x4, 0x0, r2, 0xb0b0b0b0})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000140)={0x0, 0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0b06c9"], 0xe)

11.610010888s ago: executing program 3 (id=738):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000af00)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006ec0)="61bbdafca822c911b304738006db7b15e0e2831a336f514684b2d6c8a9f3293cca8de24cbdc1d41ab778ac721c42bb6d1f2977dd3bdf4d21260c365cc5eb18be1199bfab890f84bcc26b7c5a86a92b95c03d6533c22f6c114d681c9f24ee22edc8c54e455f222370d0783240373804bc927ec9ad5980a30186dc5c862e8e525a3266e170f08b51a39a7dd0df10e6232561c7cebb178e6150f02031d77244d36f1f75d3c2425aaf0905dfafd7895d0bcf774e69b3b059cd7886d7759d6b30bf7161e6a70d3d9d4c3e8fe0e74d5b45a7eb25d2602506a15ddb22eeddd997d357577e0f570885eacd5ae6f659c8dfd8110bec6afee802658657f3dfe9b713cfacdbf107c541ddbca7ab30d4de95c16364dc24500a433c22bd046a640ca7ebb3cbb2bb6a34408c48c8da3dadfdc0f285fcbfcb52328ca584931cc6c3aec022f70f38904912b448f08634478687a24b06a99b19779048db6907d03e0659d8c5a3ad0c0d7878591224c4a746b00cb022b8539c4e4913c2d68ab86c5efc118dcdd8eb325194b0f581ac2b94244268dcefa94cad95540815b92aff0921d2002f52a3e3e754421a5d15f683e813281e5ea092146cd8dbc61d66f3908e66f521e538ffa88d9ffadcd93068dba8fb80ec38e4fbf1e6a86d16c5ea1928318f0ee3ce2d34d2944b5f78d268eebe95ec40cc6b09fc6337625a0c4e72326407e853bc02b4b617efbac2187bfa6ad99f1dba5e1dda79be8a7e01c2d81ddc99995a269b6c241d24039d223722052d519a2a2377bf1e0192c4f5ed88cf511437079c312e0d2dd4fba061ecabcca57956513da8e1aa17776737372afd2f4c519916d7d30e48d3c0fe0b57f374396aa57abbd4b18660b441b98eef9092abc9646b49591c79b6a44cf51e2a3095d184aaa46fe40a6f2dcf89460b5cc971ebd4cfce52a15b9e2ec808685d4754ff91243ee7c1759d2d86d87d38a424b976dd8d8208d15130c7424dc27fdc3227202640896360079935591e3cbb3b0b69a73559d369618557061ac63655244c89de07503bbcc2ae5feef4b55059335c1a1a9060ca3fafb51e173fb0dc6b82ac361d4ea9223c69e6972a4660bf868e3e2475c9d4c7e260769357ca4d99eb1f71250eff75691b297a4173f7b1cb0949d6fd483ec46209738808fd0f93765811d44df60db91e6e1dfef5f90ee63edfe70a5fd4ae322bd04a312760f47ac452593ffd6bdaebf3fdc9eab668d0ab389d225c6136b15c27a9e520e05972137ff374f823d01ff3913fa8f657dd6c3ba00bc0705cbd3a5517c76b3293ca9124dfc1d6546f7eb9dc5a0316d929fde93471a381d5d89cdbfb2b0e25c8ce76f32a868a461d9c13890152294e825de0eafba15fce2645eaf7b0f8f6c25d182603310a6f0dcfbc5e29e285688da3ee34f6c412e4ea78559e98324f45dd95ae8f41979937ae7677783087e4b252d7d37db8d1c449445d7354834139b1a35e087d6345084d26891afda531af70dde063cb3bc53f7f938d88ebf8189d9baa385d10a12b835f55a94ecfb02c83f7f6b35474060bf6adba6ce09c68401d255670baf8aec4fd2e9aa923dbce180bcbee0490443a6e384fd15a01d588b6858d57ef86238ceed03c3a4594843bdfadc2d40897a07873a643e96280f221332a99dcda25650a4036406cac1c2962b4ac690514133de2098c17f901519eca0b7571dbe9e771d1a9337dfa744911068176e7e3d74e2f2a34e31479d6b048dced6c9b836bfc138436f0bf89ffbc176ea15567dacdcc46f68c7815ccd741a732f8b0d809e8421cfcfe2c702b3f78e7c3d61911ba7ac23568bed03e5c68ec5405b28fb603829f16cb7a51a17c6c7e99940da59ab83c94619ca00143598f305057799b11f535e77d92721b63cc1d6c903b34d560490a2751c5f185b7bb6fc3df307a6b32ad15cb9424e3777859f1892e458a7d860bee9b00586d4b8c6cbe1fecaf96fb6c42815c5a92d35a58c0f768014bf2d2af0798637dd558f71a12378dd2499ee9214add06a634eeccb71736588dac40a24897d1d4344b48201e4bcc81ca5b8e84f69a2c7408b8a65ce656f76c2b8abe083e5c9252b81d094656da5cabfb6d2e2b5b07c431c143aa27580c9da6cf3b6e2c1592da48684f2442b030e6bcf76c8669c09a6d975e6ad64e4e6a3b55fb848dfcc7b132e52b516da2ad4503dc54e3efe53fd989f1b660ee48165bf97c765558dcdd38616289126cda1fc7c25675498c0367f7d0639793a60f0e1315ed5a32dce128b5e369dd42a45606dc22bc04c28a79b2f5f89968e95e29332e32e7f466152cbe0981928365e82dbcd6cc450d707f3b20e5146bfe4561bb711586bbc41e5f06d94da64d9820d153eee649e2611ae98e7ce765a804a858b84cc361073dfecc96dfd59f510db22a9b8724f7d2c1cdc966f9b952ca82f84977bac76fa74fe3675a73fb2a71ae77f0f62d4057cdf5e2104b5f2ee2b5dfa6ed45819c6ee0e7da1bf1ff649f64a935e9ed10ba8c8fc803650808efb84052a88665af5d4d0f1fab19ef6fd5aeab7a67f7ed4750bbda2007f9fed8b199a4b7d585eb9d228f15e3d559d6c81628b91cea4403c2ec0b415963c2f35f493475e7c0022c631f83d9c5179ef4dd34c41759240bbbdce554bd2052e3b5eb11f70065dc6e14824654097fdbdc9c342db82e0226b99c859c1a87eda7f5cb3040a9985dfeb68aa9285466d91a151af35c7975079f46a4150046d7123eba71fc0e3424df0a3c34200b52d91d95ef49d7860eb66df62e1074bb874138b86aff43f5a03375f129a3f578ad26184b4a5071e7545223f043d5e378e65c57e6ded39cf557850382d149b624a95918e8b4bf52f892608b379e0758b82a402985c33d3bdc6b46999701a10547131a3b09a5aea0dac4ec8b9bc8a4b17cde186aad300f8a9b49b76321c3dd433fbce765de0f385b6b0351c1c01cdbc5f9cd8a831100b5de8c47e9fcc6129c0f5f93db7dc790d7863a919dc40c03b35c49db7a454b815f8f4bcc228130725926173b5041ad4faa671ef72251d37e1c5a8622a9ec6fc01b75be1f6e8ef06fd0f87f1990dd4583d30491a333aacad8d6516b7ecaaf661d7c11c4bf1108aeae55b82aeda009ef1fe326e07712668461421042c8579ba80fa23fd02077a0cc1f623ea6a37ca74ee42909c58724995e1fe579c1bebb9698876a368653539884abb5eb6a34ab7ab7edb7214342efa5d4d6bf2fff070a73017631a7b8a09609e4efeacbb9c0683ff61ca313db2d78f8c33288c5fd1ad4e7056f9f67f2a546e5d412836c20242efbd107a30bb50cf82f5417f01e9b0cb1ca75296f673e21e3f8af069d7834d9b4649e0300197df1f11ee6b423579cef5cdee2d099c73e7ae4454b72b211a958fa265f3bf0343df74789791ebaaae2f25b573bac285b00c2aef8d6be1b3ee99b057f464589329d773b59d2f332bc03c172f49f38e31c39068bf3adf63bf5d54443e14e5bfbb1d5db1935136a8b3b0de80df3eda40bf41de0ddefd599e489654b4832784444cff8fe229e5969a5fe592e90239d191569b25de52250e8c80dce2897d5abb27ac7affc5bf2df29c0b5324146ea3528e9c6566722fae108f6cb82d925a0624a4eb8b56e0e8d37f463a653faf920aaf56098b30fa36a22672701732333203256e186bc45c83629aaf6fb537c7c15daa5a498623a107b019dce15c7f4249a7f357c67f99eac1a96b75e56a275033a27dc3fdd85c48a882087b96a6bb62a65849071748b2a06800ef0232ff0c1c2a8566ec68c7ef55a684c5761f966c9573a677308935f52846f14b284150c741e177ffb23157a8674016b6f039150df3e3a8476be1eaed6cb97f7615285d1508a8f62aeea477ef85d4aa76d90a2765d2abb43980c29eb4032b06ef2f36aab0e38b7f393ba03ef678d130e2a612517ea0bd5a7711ea60de507affb263a348c98d8fef328c43f87c00409a134e1eba2d24b3609184ec93d68cda75b24193893da75ceb0058a1ed92c0fdaac99330a4acfa24705d3fe2520d8a8018908e1e9bf2ebacba79c8c67da0fde4ce2de966030fff7330292c6e7db52e0e451c0cdce1dd1682610b0dc340890a8900a818318170ab4f957cbef1a0afebc4ebba84db785409e30d423f86419d10fda93915c44531ebd94aff97a7b987624af7f3d75fd051894cd64d6da46b4424b3475b22ab9eec1d8bd1a8015a1076ba55ab58ec69f80acbe200a1e3efd99921c1609a972fcdecb76e9ca53e3283ec581d76862177295d2b565686bf40dec9a38086f8930dd05b08e7efd7cc6577b2ac05f0740e665e68adeaa0e8b8e57ad98d9b5a5371c1079d07a2659eeda9a1ba0f618732c70efd4b0c638db140c6caa1a58a3403fad7f84dc0ced13f4d5821cfbcb694452988c39daf23f601a3db08205fbf8ea5216af125704667e22643c633502bd76a393c8a176e92c5beb581c4efe4cc2ed478c50a74272cb715e6992a3161ddf846e27d613102b5eeeb763a329ad68dfb6e3a9c1dbb960d087b6aab4a9e1083885898db0c1cf3498395492dcb6a8f1254d4d533cf22ab21303e03ed4e4605de1ebd408cc2ef1fb0099595d9a6592f4c5e26ff93156ab1242b17b92c9279f132a062dd862bea173cc5890df621d992dce2eca5b7e3ced0c1cd870ff545f70094dbbf49e3d5223c80d79219240deef2b2bce0ad2374524c46321cda93c2e7830d016f8bced60045fddd54335589278eb9d8603cfe74cfe6c09d1e73ef8addccbc69534aa598dbc930081cdf8c4e9a90fd993a577b07744b09ab17fc04a958ab4f61f2487a248ea55f78f4262ebfd683ea4f2588f369bedacf345aab596851ca5a8e60680202a1c1122d0fb7d42bfb3f1c979b87872a5b5573032eddd837bd2aff2e797cd68ef9585086d131d84c4872eeb171beabdafb803362aff3b6e2e968d43e61a1b700e5a51c3c4df1546648df167626eec1fd7e2eb52cb8973679822e1b06e2f267f72f4dce766aadfab9b377aa6bc63722c817c3523c6d20c77d84248ad0ca3c76196d0bb70f2b3b7b496aaa47fffe5ad8dfe2ae1e28e8fc29aab834ae1ba95aa53e30345ce8260ca42cf4a8e3a7989f59ab9d6ee2a30b96b731e144f53ff9e7665b90263d575c5f42a92e5e53a50c612af0a1b3b907d472573eea9091619790b5d3a56efbe253fd76ee36f3f5a2d3c340073c311aee56add7d8cf380b2d1624763e761258708511760b1ddc0e6e8948504fc37092417a57e9a3e8a1c361c1245b14c98f5b84a6f9d5f8876cb9944fd47dfbff3fc032bd15081b9c645a58eaae38b3499e55e22821c8a6c7a587a8b726ac3b38025c2222d71b95d816d76d58a45002f0241da0a2f2c9d150102979418f00138d2c5639d115e898da470ff2f4a1333fbb5146f7758afc220ca6895fa5fdfb98b49e3be5131879b15f48c905307b2dc7ffa2b7b3ceb29282ca0492c50b4c701fef646f74a1429f2e1e275946852ebb33b2da347bb0f1b890d4ce37e1d5b1cb252c61e3c46751a539a9c33a12eee0364d3d229b5b21087036219d5d821ebb05082feba108bce7b05e6143f5553ea2a9404d2a0e6f21bc36ff6779107b5a1499462536bf76f464ac43d7ca3561a92ee13c190378af20f6967444d63afdb94c2bcf6fd32a6370bba33ea3d6deabdcba090ca15eb8b468dbd4de9f86b37fd1ee07e78e18c2a09d819a1a712223f810b9394dfc4a2f5be9f6f316c4f4be62e4efceab5873373c7e7b2a86fc5f4e92f6281e097bddb3276bb952211bc8f871a1907c3ecfeec3e6eb3c7dd58ae0e4eb016d0ed14dd0ca79d6777eb29065befff3f278abf6a4df704af53c24b0e50b85c773339f6daddaca12ac0c5295b8832f7da7e6d2f7151691ac787f4cb56f9ef21e5bcb3820d3711f0fd29b0fe3f1b3286dc7c028fb4b4b74474aa3387acfb906dcc3e9453c7cd3c7156114a50744eb9de4884e46bf3fcd0a05e8fe18445ca91a52c060396c529e1bd6370dcaa23b6f31c2d41f82ffd20b4d1178257114d647c29e7f1fd13e5bb58e50e799ea229989b27f2cc1353dbc4d0f5230b49416aaa3c994482c8df9e69957c2038ca7e68f80bd407108fcbe9e9b99a3c39adbb888567f873004983ab3f7ee364473b1f3a5e38e7774241d493c00704c73c4fe956611e32fda53b5cd25d0ec18b3e3458b12899c11bd9846d399f2fd50f21d56d967c317a443f578d00455726304d69c44da6e5d04d786b0cbb3d7bbdffb44d69995bb87c0b0e7a2343e0c9c2c98aa8be33ebf44f019f48fc66cb884278993ea58bd06e3a39b8fbfcba2ff0a36e9dd7d3d0d94b4435cd3d8a9abe18509a48f22dc509b60bcafbc0110e3ab8e0bbe79c2d67c3e8ecc1de58cab4026f56d7b70b78ddc4e5e2209115ca59b2d2c4591ae471e7268568da3774fccdf64727611460b2e17feb855187d1e6f3c2b6ebb99301c1d27160dee3d9e41b4b96d8dbc6e4764622be139dc21bd21f0373dbc804a37dfb1f3860fbbb30f646b652778a9d9831798c251c0488070c56bf1f0794c2152648548d5f3c137c1e1ce9fd67e6da2ce6467bf1aaa454afb948102e5ece44408d24b87cab80772ff5dec0740c3fd9d8bd2eb837d547512d1028e7eeb4365321c50af92175d183cefa790f824f7c89a7e356cd829c0a20eeb325090e69f0b964c244007bcfae61c4786649b234a0f630e9e5248835c2786ec31868465f421060724eb5f701918a382b316378547f67afb3f22656e5cda874616601c5f36d7f88b64b940f4bc25e2221ca7e11f7476f8ca1916c779452a76e8b3bc909679d38ac64d4009a5e330a35f2c4e3c462147a9a17478b64178ce4e76faa452c533b4ca38e99fd15da41dfba4bcf40b845f24a5cb5cb5f9b6148edb943dc020e3885043b3a5b12274c0ed19c5be71a90152aa00b5691f39127a3bedb5cbd857e79871fa5ab4e3f86c5b2b5e37ba232cac99a07f2fc16a920751e80c0b2a11e3f57718715f7f78cf11f4c899202a4e9eff37c73a20b1b6b17537377bf2bccd61d43dabbbdff947f6644b7e4a45cecc538e378118ed158c132f514edb85178aca1d964ee5ff5378b0a58823be37a7f55e3045ff75eca0caa6d740c9f055b6e112c3a1e0a106ee7de1aa5e66df171c7328a076b06be2d411b0249847b5a1edcfa6fb565e54660726bb8bcc91fe4f925fae15a02e62bd929deb7a6282fcb4701fe9ba51dfc17c77f0b7450d86b3db124acb4832af2581c6c5de3f8fbd3f484a582137d9e0c2fcd9cf1e5043b7f61b510d249359a9a64ed1cdafdac9e95a2824ea9d17ccebea1cc290353700b7da3f7a7535d5a406c95ecce0d532488cd87037f160d92cd3e85ee1b4e0a1b314f770768f495c9f50ab88f841da8f6a85495e9c2c4f084b5919aeb60a9ca5466ef95dc15c93e041e06a1047b862a0b98679ded6d1b230628b99fb28ad56cb26c43e39712edb8e1b33dab8dad6f6151aab04c0c626e0a195881bc68c32d1f3ff7db997e6bf061a9c4c5ed673b6a7a25c6d520177ad69b7ac1d0c8032dbcebb0aa48f3c1688e2e10ab96cf2c85faa07b3437e3fc616c5a246b62587a8f21df4831615afcaa79531b0dccaf0aeed5f042f94dcca3b2eaa02102b2a8a3b07ba8a6571df4bf03b7795bec2baec13a148538aba90a9d7f1a3ae76d46fe39eeb73831b7d3886766130be5f769d6e8588d1ae054f2ed4d3cd4a699a7e3fb2ee9e3e7950342185743375bffdd29f3514eb7af5209ea925309772c1bce304513a1ab69b7c745af7d0353d91b24c1e82bdef2d16e13414b53629343c523c3b2f044024bdcc07ce3401f37e5be0e1bb6b65caa4b8b332df585b551452a68c835a31a9e8faedb3db3f0f55162868dfb8cd8d4db8193b7b706665588343b6581c582e6a1ae320a6a310ddcb2ba148c50a121c460b1ff9e639a6c6d0a6893fe0b8b06b88f5323b717b263524471b91bc92c6424fd95ece736bcc80ed7b371251d3a97e8097bd6afeabe94d53df20c28c0dfe9bfb2c42d21b23cd0b9736cdf40338c202cf3d04e578fa32f9761743cce981f2817a55e6160821b896601b829e20e3055f3ccdef24c91a311faf157d08bff00678ccddce368f8c7bed956b4fa0c0df7904234bbebd16aa0a32653acc6b5321e61ee9e58084c6ac8fe27d4cfa8dac58e122e3262dcecb639f3a6c0ee8332b9b080fd9826d4a9487f62562cc9b3fc9409d10566c67cdaaa345e794a1b3a342057b9c0c3943702702676b5e5d5171827e6ec829f2fe8824d931b30938d53420686410810ad4799a7579f2900b9e2ce2c032cf630121e4281faac5a26eb1bd0a999387619e1fed4042315d25d5ec93ad832ef92443c8dc781b428b96f80783712847601632e41abcf01386b71b8b4dcf1c30da6aa636f761573a55fe7831876105f111bcd6f04863b8c049bf185df9f2612ae4af6ee8fc3ba7ec603b91cc6f691191f2be40ed83f183556fc9a125a8333a3b0e3357433005cb7cb7553b1a125bace32a4c86c6794dc081fbe603a1a0cb36c0d1927d00fdcd4d12e1233bac711b0aee69f4812b6ced90375c74d5995672ee79a64e52d2916c29fc399b12ca7ddf0e55789b5b8cf676dfd3ed5a566ea6a7934f9652a7a5c7db2ee29c98f01fad90052c4df530e432acea0f5af7459b017f4f7ca4353ec6dc37de777d60ebec7fd84e25fd642bc454b3807b0fe9f5053e3064cb4d705c7bc3b87f5196734e4ebc4c7b007cb13d7f344cee70ab0eeabe6f9fc946b18af9638acdddddeeb258545047e12886d58a901d31182e1afc77b8223011717a16ef1261c399fde480caba1a9cb8b37abe0e3d5c67f838d9db72b41e331280128a7bbbdc2fead0a94efa63b1b621d6263a76395e53d2c703ee133f2d4b2dafb267417c4f7370c9f80329c08b32cdb83b277893091f75e382fcb5c9cd64206a2b37e3b5f4872ebfd661f1ee4956796746740c89521de80791a4eac38b4d480288c45a08a3a08112391826c1b1d89db2398bd32c6c645b115fe9937dbbf671281f6412ffaf963c247b59ef88c69c775f462692896b643df3da4a0c1bb5c0756e7c59cbf96ef7f9780fa1ad985743bbf0d776c3dca2d61fdaaff3d4cfc13abb433a7fafb5a41d8ea189d3d41edec803d9c7cc5f62fe0047d06dea408547107aa09b98076ec83cebedc089be24c2bbd3a8d31826dc52b404e713ba7d6e679dcbb1d7be86daa567ba73dfd1e2f625468a72a6557e9678dc436187c4ca3822cde70c40cc617d9ab59e38c58c2f9a90334c3f5c995799d00833ca89106123c2fc6db257aa1074ceb10bd61f24b91522eef613286c1567b777dc8e7987979a118381879a9db74c9f1d8a9f6cdccf0d2f3830725f0f8ac35664227cf84cc9d79cf8996f44b68cc0e9b9873c349b960498c6e4eb2c909f8fdd3fdd889940e335fba5161dada90923e59550779efd0479fab415fdf9d7d6b2604edbd6d26600544fea9342537f1c8ba7d1b8bc739003725fd656f9386b53d2528e1cd998cf6ee58e2e44b80f06933baadc87b53159d6c05d85467804b75c5c1258a7ebc7c59eec65278711293f83ea84c205ab5a520929bad2ae3863152dcb2783e85582ba804285fe8d3bfd9fb8f95456aa3213e0291a8013e67dd1cb6c8ebea2e3b9253d3441dab1a4c6564babc96d69f6285b53ca7bb07bbfd87065d76cdcc6e9d5b181d8d748457f08ada427f197925885cd63fb49404369a7b210d715a071e49e8d700bec584cd7f2d9a07bda46d72e1a80221d550a6aa0d496cd4985d06fad0a28ea555368b921001310468406fbefb3fa9b3f3c9c750c6c81ba325b41ddacf21c79b09fc742c69eb253d08a52f15114ff0927c22cdd9cccce269b88fff2e318a6070dcf78d10e666d5b5af3788ea2883378482581f58d9aeea18ffe9fe8c061ff3d758c80d2f3c2c1c0a0bb541bc0a79d755de62021285e97ed0c36b094aca59f3f11ca646625e8b812dac1d8a635722966d96f1a99d854f84d02b7099c27182c6465602b0ab48205d93a24bb9a80a432d351f70dae5a77de8d17fe7d625109e2c8b222198c3d878707308cd4874ab9b7a4780e1dc2b8156e1c3a90ddeb03e04a97ac2e17374faa64239e61db3eaaaa1aad1a9c1f948c349c313a4bd28a91a72ae145d051681d087ea7320836dc45bc2ee20f88425edc597c3877fe0bd38a693b822550b01e0ca70a48f6c178cc7d09dedb86dfc807b5259e4d2726ee856e5951c8d0c4bab64ce1735ae78542872f17a43c0ba6865dbc2b06fcdb383346174bd916be43da98032b33e7d57593f0505f5ef3b76040a6d0fd9aa883110a3ff2931dadc9add0c3737bcda478b40879511035a2a17190bb6f6e440bf53d5ff58fce41985c578d6f41e76b8b78ad8381515861f324c2e56172b94952354c7d63765869d1cfc72e84cf83a762679cc0730dbb6bebf27d04c7c4a0acb4c26810ccdcdd7437f70dfcab0eb5b517159ee7881d17c063a22c31fda52165c0a24d14bef7dfe75eeee54dc46ad270380a97b5c8b2ecfaf56d065c01409d6e56141ecf20b1f74e07c957cdb16789fd943a1f90646957dd26db659419c5beb7d16e97436d6afa89dac7df1c9ffa9ec61a176dfe1caffe7b6f1deb2f6b8ad3aeccd0c7e4ef915802099f645fb76dcf4b5d80d234130a01d708535ac8e70494d56633175330e26cd91f838ea3173593416b32e6025b54e19c356ff67b7d803192693d68a6eb81f72743621a429f21dcb9aeff6dcc027db34699bdde5d1afa2088eb8a188643e34095d77fb595e9344489ea1d99683e1b03ddc7c7ffe846e35760b39928317d28acea8db656d32aa07cc38776ab0e464f06344da70197d50ff702c7de1f3b0e90398c25c3dd26e68fbb0a9ff56dd7a5633ab34955ec93a84c395f9836780a16d295b5bd1786828998c794aed2f89619ea69abb615e72a85d6c596383507fa9444b3ff7944e2ace3b439e2463339d5ee0785979476e773a8d486dff065e9e89fc3dadfc14f6f534c74098ae0c517a42aabc04a0191e1c33c00e9f7b35b8cb5ce8c35940c590368c58e0edddc37abe3c04ab1385fef4b86583cd3d06892116b70a4a6aa7cfa1aacc85f038c89ee7fefd603363322e9e8780eca38d994d722b3d35e56da04dd987660362e085e611e08e6a342444d37c05c66d6cefd0d0b17d95ad128a1a76598b35bb2b10bd967a1a1929d5e4f9bff57124288f478b8b4d6909e14809e90a53460d9bc6b727b6551a08c67023ca0e8b94ea99fc90d4fec62c14e0ddd0c73007471632be3abc73506fb17c23e81a82a1c4e473a358c6706f3c572e75ea192c41282293b8becbbc71c8017ac151791a576e052152a0a948357e8ddbdfed47689c4abde8b54ceda982bb29b7ccec04cc79b7093d9e25f9eff94386621e9c803596f932ab60e8e31c2ebf11f16596c6f71fd2d2e8435d03c637b094ebac49c002f0beb80f6f2fdf7d6803e0b6f2015c8582976379c0dc06d51c35f712e053fd29749afe5ce05865a670b45bde5356f2d5fa67f7af50b944b65b44efb437c51c7cbdad791fa282a2fe31d732e4c7d5e1", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000340)={0x0, 0x0, 0x3013})
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

9.243561223s ago: executing program 3 (id=745):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000280)={'some', 0x20, 0x7, 0x20, 0x10000}, 0x2f)

8.877434464s ago: executing program 3 (id=750):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x80000000001})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
r1 = syz_io_uring_setup(0x3bd8, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x3001}, 0x10, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file7\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x1, r5}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)='\v', 0x1}], 0x1, 0x0, 0x0)

7.505009476s ago: executing program 1 (id=752):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800", @ANYRES32=r3, @ANYBLOB], 0x50}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

7.231138588s ago: executing program 2 (id=753):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0x23d)

7.222418937s ago: executing program 3 (id=754):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f000058f000/0x3000)=nil, 0x3000, 0xd)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000140)='user\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0)
getpid()
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x388, 0x1cc, 0x260, 0x138, 0x260, 0x138, 0x2f4, 0x2f4, 0x2f4, 0x2f4, 0x2f4, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0xffffff00, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00', {}, {0xff}}, 0x0, 0x70, 0x94}, @inet=@DSCP={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3e4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)

7.148961205s ago: executing program 2 (id=755):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x10a, 0x0, 0xbb7}]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000380)='contention_end\x00', r5}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r8 = socket(0x2, 0x2, 0x0)
r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r10, 0x89e8)
r11 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r11, 0x4b45, 0x3)
r12 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x129a00)
ioctl$NBD_SET_SOCK(r12, 0xab00, r8)
ioctl$NBD_DO_IT(r9, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x6)
ioctl$NBD_DISCONNECT(r9, 0xab08)
ioctl$NBD_CLEAR_SOCK(r7, 0x125f)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x8}, 0x8)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="01030000fe230000000005000000"], 0x14}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r4, 0x21eae}}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000000faff04ff091f0000", @ANYRES32=r4, @ANYBLOB="140006000100000022000000030000000000008014000100fc010000000000000000000000000001"], 0x40}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0)

7.036040308s ago: executing program 1 (id=757):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x10001)
syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280), 0x6)
write(r0, &(0x7f0000000340)="05000000", 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02400000050000000000000000000000000000000e00000000000000"], 0x48)

5.979430209s ago: executing program 1 (id=759):
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1014, 0xffffffffffffffff, 0x14, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000001d00)=""/4096, &(0x7f0000000100)=0x1000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

5.879437749s ago: executing program 2 (id=760):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="710394e087a424856f5b5026be9facabe0a02ef98678b2a6b1c6629367c0536b69dad8e6c614fa996edae027938c7140530d7ffc0ef62811cb90e5aee9dbaddeda7ea3db021116d03bfc55"]}, {0x71, &(0x7f0000000340)=ANY=[@ANYBLOB="7103a8af03e62f144437ea3fa09330609122d058844222297400ac0d1b3dfb937389337c17931fcfbad9e1a4f783295709341274a0d51ab336a2286ef15502a14a5085e413051efbcd76346ddc4549a888f1432f0fb96811fdc2df81122abcf8121925c66e7136927de5efed6368bbb53e"]}]})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.993755486s ago: executing program 4 (id=762):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2)
bind$inet6(r0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x4, 0x8}, {0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x1b, 0x4000)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c)
getsockname$unix(r3, &(0x7f00000004c0)=@abs, &(0x7f0000000300)=0x6e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xffff, 0x9}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000080)='./file1\x00')

4.958664338s ago: executing program 0 (id=763):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ff030000000000030000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

3.892830606s ago: executing program 0 (id=764):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x80000000001})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
r1 = syz_io_uring_setup(0x3bd8, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)
timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x3001}, 0x10, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file7\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x1, r5}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)='\v', 0x1}], 0x1, 0x0, 0x0)

3.892148061s ago: executing program 4 (id=765):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0x23d)

3.810103159s ago: executing program 1 (id=766):
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8=0x0, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYBLOB="4dd79d8c760578ea0fe4f0fc5fac67e076affc47339d922aee9c4ae0d84ae628a7d40e13e1354b5d6f5c864ea790acfd623b063b5e49a40c428acfd7011078ace5fb5345e69a1989154bb51b4fb1a88fa12b16958ab31d9a19a0ffa155c54f4acad240849cca0df810926034bcf3bd7c41fbe34f5037b3a68a958e862054aa3a3a09d78545ca79767113bee576e28332b76b12bb311824351c56e0a85334dd6cfeb7e432f9f46dd92198eb16e788d1dd7962b1f0b23ae76d0d635966375091526dc9024005c40b6acf2bee669df7ceaa43f08c"], 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)

3.809913836s ago: executing program 2 (id=767):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x12, 0x2})

3.656901121s ago: executing program 2 (id=768):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000af00)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, 0x0)
write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000340)={0x0, 0x0, 0x3013})
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

3.656490618s ago: executing program 4 (id=769):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x10001)
syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280), 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02400000050000000000000000000000000000000e00000000000000"], 0x48)

3.109526471s ago: executing program 4 (id=770):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f0000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
getpid()
munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000)

2.883952046s ago: executing program 4 (id=771):
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x36, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x124, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x110, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x124}}, 0x0)

2.532398921s ago: executing program 2 (id=772):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x5)

2.435060699s ago: executing program 0 (id=773):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x4, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280), 0x6)
write(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r5 = socket$inet(0x2b, 0x80000, 0x4)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x8905, &(0x7f0000000000))
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xedd55e3d3949e4f9, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRESOCT=r1, @ANYRES8=r1])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0)
write$FUSE_INIT(r1, 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'hsr0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xf53, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)

999.333239ms ago: executing program 4 (id=774):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000200b06010000000000000109022400010000000009040000010300000009210000000122050009058103a00000000efb78bc108f02"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_io_uring_setup(0x5c4, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)

916.819425ms ago: executing program 1 (id=775):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ff030000000000030000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

789.706507ms ago: executing program 0 (id=776):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000003c0)={{0x8, 0x67}, 0x1, 0x0, 0x7fff, {0xc, 0x6}, 0x9, 0xfd05})

735.770537ms ago: executing program 1 (id=777):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xb4}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60)

663.022365ms ago: executing program 0 (id=778):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x7d243a6ea807936d, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x3}]}, 0x1c}}, 0x0)

472.606188ms ago: executing program 0 (id=779):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1)

0s ago: executing program 3 (id=780):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x10001)
syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02400000050000000000000000000000000000000e00000000000000"], 0x48)

kernel console output (not intermixed with test programs):

G: The mand mount option has been deprecated and
[   69.726752][ T5323]          and is ignored by this kernel. Remove the mand
[   69.726752][ T5323]          option from the mount to silence this warning.
[   69.726752][ T5323] =======================================================
[   69.738036][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.782243][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.792850][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.802806][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.813452][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.823649][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.834744][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.846654][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.855907][ T5323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.857182][ T5233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.877618][ T5233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.878637][ T5323] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.886533][ T5233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.886571][ T5233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.974293][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.995574][   T54] Bluetooth: hci4: command tx timeout
[   70.003776][ T5248] Bluetooth: hci0: command tx timeout
[   70.004119][ T5236] Bluetooth: hci3: command tx timeout
[   70.026626][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.065525][ T5248] Bluetooth: hci2: command tx timeout
[   70.068071][ T5236] Bluetooth: hci1: command tx timeout
[   70.093539][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.113857][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.127715][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.139474][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.162607][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.170547][ T5329] Process accounting resumed
[   70.178871][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.196693][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.218782][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.249089][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.252522][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.344006][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.385088][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.408972][ T5244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.419191][ T5244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.428202][ T5244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.438322][ T5244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.482974][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.525914][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.639141][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.662333][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.825472][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.842043][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.924459][ T5325] loop2: detected capacity change from 0 to 32768
[   70.941383][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.022498][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.172549][ T5325] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   71.281797][ T5356] loop4: detected capacity change from 0 to 256
[   71.293095][ T5356] vfat: Unknown parameter 'c‡øaIòã-Ó‚umask'
[   71.345779][   T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   71.419095][ T5325] XFS (loop2): Ending clean mount
[   71.488124][ T5325] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 
[   71.510602][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[   71.513303][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[   71.517403][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[   71.544779][ T5325] XFS (loop2): Unmount and run xfs_repair
[   71.549414][   T46] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[   71.550559][ T5325] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   71.550604][ T5325] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   71.550623][ T5325] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   71.550641][ T5325] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   71.604283][ T5325] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   71.612962][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.613430][ T5325] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   71.633249][ T5325] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   71.642601][ T5325] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   71.652962][ T5325] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   71.692029][   T46] usb 1-1: config 0 descriptor??
[   71.693247][ T5325] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74
[   71.729651][ T5325] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   71.757065][ T5325] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   71.785594][ T5325] loop2: writeback error on inode 9286, offset 0, sector 18692
[   71.828417][ T5325] syz.2.6 (5325) used greatest stack depth: 17752 bytes left
[   71.869047][ T5240] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   72.079112][ T5236] Bluetooth: hci0: command tx timeout
[   72.079595][   T54] Bluetooth: hci4: command tx timeout
[   72.154663][   T54] Bluetooth: hci1: command tx timeout
[   72.157144][ T5236] Bluetooth: hci2: command tx timeout
[   72.160186][   T54] Bluetooth: hci3: command tx timeout
[   72.373456][ T5353] loop1: detected capacity change from 0 to 32768
[   72.453647][ T5358] loop4: detected capacity change from 0 to 32768
[   72.500723][ T5353] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   72.527575][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   72.555741][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   72.586086][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.595491][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.603862][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.613879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.622824][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.632817][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   72.690876][ T5358] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   72.708435][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   72.720635][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   72.844936][ T5358] XFS (loop4): Ending clean mount
[   72.916809][ T5358] XFS (loop4): Quotacheck needed: Please wait.
[   73.014286][ T5353] XFS (loop1): Ending clean mount
[   73.052765][ T5353] XFS (loop1): Quotacheck needed: Please wait.
[   73.077125][ T5358] XFS (loop4): Quotacheck: Done.
[   73.099215][ T5353] XFS (loop1): Quotacheck: Done.
[   73.149797][ T5360] loop3: detected capacity change from 0 to 32768
[   73.199703][ T5360] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.256199][ T5360] XFS (loop3): Ending clean mount
[   73.380297][ T5231] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   73.393640][ T5235] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.411534][ T5390] Cannot find add_set index 0 as target
[   73.630774][ T5392] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.842600][ T5400] fuse: Bad value for 'user_id'
[   73.865710][ T5400] fuse: Bad value for 'user_id'
[   73.910501][ T5403] loop3: detected capacity change from 0 to 128
[   73.934249][ T5403] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[   73.977861][   T25] usb 1-1: USB disconnect, device number 2
[   74.065437][ T5403] syz.3.15: attempt to access beyond end of device
[   74.065437][ T5403] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128
[   74.082528][ T5405] geneve0: entered allmulticast mode
[   74.089443][ T5403] syz.3.15: attempt to access beyond end of device
[   74.089443][ T5403] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128
[   74.303959][ T5410] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.428362][ T5244] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   74.684723][   T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   74.765699][ T5401] loop2: detected capacity change from 0 to 32768
[   74.854691][   T25] usb 1-1: Using ep0 maxpacket: 32
[   74.863532][   T25] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   74.872968][   T25] usb 1-1: config 0 has no interface number 0
[   74.884104][   T25] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   74.893944][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.904678][   T25] usb 1-1: Product: syz
[   74.910108][   T25] usb 1-1: Manufacturer: syz
[   74.919157][ T5401] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.920780][   T25] usb 1-1: SerialNumber: syz
[   74.937199][   T25] usb 1-1: config 0 descriptor??
[   74.946561][   T25] smsc95xx v2.0.0
[   74.978117][ T5429] loop4: detected capacity change from 0 to 512
[   75.085603][ T5429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.104436][ T5429] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.253041][ T5244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.361773][   T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   75.396896][   T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   75.493215][ T5401] XFS (loop2): Ending clean mount
[   75.546350][   T46] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 
[   75.566408][   T46] XFS (loop2): Unmount and run xfs_repair
[   75.594950][   T46] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   75.613473][   T46] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   75.628524][   T46] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   75.650192][   T46] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   75.671839][   T46] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   75.704648][   T46] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   75.713630][   T46] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   75.754651][   T46] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   75.757877][ T5439] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.763588][   T46] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   75.772696][ T5439] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.791204][ T5439] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.800896][ T5439] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.820574][ T5401] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74
[   75.846617][ T5401] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   75.860736][ T5426] loop1: detected capacity change from 0 to 32768
[   75.868004][ T5439] vxlan0: entered promiscuous mode
[   75.878386][ T5439] vxlan0: entered allmulticast mode
[   75.894749][ T5401] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   75.926258][ T5439] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.935347][ T5439] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.944293][ T5439] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.953385][ T5439] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.975878][ T5240] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.976476][ T5426] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[   76.252625][   T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[   76.273109][   T25] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61
[   76.351239][ T5426] XFS (loop1): Ending clean mount
[   76.360337][ T5426] XFS (loop1): Quotacheck needed: Please wait.
[   76.397122][ T5426] XFS (loop1): Quotacheck: Done.
[   76.417717][ T5426] XFS (loop1): User initiated shutdown received.
[   76.424283][ T5426] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457).  Shutting down filesystem.
[   76.445567][ T5426] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   76.504916][ T5231] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[   76.655044][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.744676][  T938] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.846724][    T8] usb 3-1: Using ep0 maxpacket: 32
[   76.865829][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.883550][    T8] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[   76.913570][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.942097][  T938] usb 5-1: Using ep0 maxpacket: 8
[   76.957523][  T938] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   76.967060][  T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.979107][    T8] usb 3-1: config 0 descriptor??
[   76.993170][  T938] usb 5-1: Product: syz
[   77.007474][  T938] usb 5-1: Manufacturer: syz
[   77.020878][  T938] usb 5-1: SerialNumber: syz
[   77.031907][  T938] usb 5-1: config 0 descriptor??
[   77.196855][ T5449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.232057][ T5449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.247192][ T5449] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.28'.
[   77.297827][  T938] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   77.317227][    T8] usbhid 3-1:0.0: can't add hid device: -71
[   77.338911][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   77.376317][    T8] usb 3-1: USB disconnect, device number 2
[   77.404780][ T5287] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   77.519984][   T46] usb 1-1: USB disconnect, device number 3
[   77.581122][ T5287] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   77.606060][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.619973][ T5287] usb 2-1: Product: syz
[   77.632837][ T5287] usb 2-1: Manufacturer: syz
[   77.641102][ T5287] usb 2-1: SerialNumber: syz
[   77.655926][ T5287] usb 2-1: config 0 descriptor??
[   77.806603][ T5465] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   78.242736][ T5476] loop3: detected capacity change from 0 to 256
[   78.320107][ T5476] FAT-fs (loop3): Directory bread(block 64) failed
[   78.333731][ T5476] FAT-fs (loop3): Directory bread(block 65) failed
[   78.347219][ T5476] FAT-fs (loop3): Directory bread(block 66) failed
[   78.354924][ T5476] FAT-fs (loop3): Directory bread(block 67) failed
[   78.361640][ T5476] FAT-fs (loop3): Directory bread(block 68) failed
[   78.369103][ T5476] FAT-fs (loop3): Directory bread(block 69) failed
[   78.375954][ T5476] FAT-fs (loop3): Directory bread(block 70) failed
[   78.382587][ T5476] FAT-fs (loop3): Directory bread(block 71) failed
[   78.390039][ T5476] FAT-fs (loop3): Directory bread(block 72) failed
[   78.396844][ T5476] FAT-fs (loop3): Directory bread(block 73) failed
[   78.474817][ T5287] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   78.674635][ T5287] usb 3-1: Using ep0 maxpacket: 32
[   78.683961][ T5287] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   78.704798][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   78.734553][ T5287] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   78.743751][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.777208][ T5287] usb 3-1: config 0 descriptor??
[   78.798191][ T5287] hub 3-1:0.0: bad descriptor, ignoring hub
[   78.804222][ T5287] hub 3-1:0.0: probe with driver hub failed with error -5
[   78.829870][ T5472] loop0: detected capacity change from 0 to 32768
[   78.842127][ T5287] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   78.891016][ T5472] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.044647][ T5472] XFS (loop0): Ending clean mount
[   79.065834][ T5472] XFS (loop0): Quotacheck needed: Please wait.
[   79.103371][ T5472] XFS (loop0): Quotacheck: Done.
[   79.187858][ T5491] fuse: Bad value for 'group_id'
[   79.193361][ T5491] fuse: Bad value for 'group_id'
[   79.212491][ T5233] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.332998][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'.
[   79.643553][  T938] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[   79.666502][ T5502] loop3: detected capacity change from 0 to 512
[   79.688447][ T5502] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.707399][ T5502] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   79.737159][ T5502] EXT4-fs (loop3): 1 truncate cleaned up
[   79.744135][ T5502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.818318][ T5502] EXT4-fs (loop3): shut down requested (0)
[   79.890407][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.124373][ T5498] loop0: detected capacity change from 0 to 32768
[   80.143932][ T5498] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.179718][   T25] usb 2-1: USB disconnect, device number 2
[   80.230397][ T5498] XFS (loop0): Ending clean mount
[   80.907737][  T938] usb 5-1: USB disconnect, device number 2
[   81.124593][ T5317] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   81.305326][ T5287] usb 3-1: USB disconnect, device number 3
[   81.314715][ T5317] usb 2-1: Using ep0 maxpacket: 32
[   81.325386][ T5317] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   81.339817][ T5317] usb 2-1: config 0 has no interface number 0
[   81.358966][ T5317] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   81.380396][ T5317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.399965][ T5317] usb 2-1: Product: syz
[   81.418776][ T5317] usb 2-1: Manufacturer: syz
[   81.423446][ T5317] usb 2-1: SerialNumber: syz
[   81.445724][ T5317] usb 2-1: config 0 descriptor??
[   81.459174][ T5317] smsc95xx v2.0.0
[   81.752121][    T9] cfg80211: failed to load regulatory.db
[   81.864700][ T5317] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   81.884715][ T5317] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   81.932622][ T5546] netlink: 'syz.4.55': attribute type 1 has an invalid length.
[   82.100396][ T5498] syz.0.41 (5498) used greatest stack depth: 17464 bytes left
[   82.241867][ T5233] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   82.584838][ T5287] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   82.669404][ T5557] netlink: 'syz.0.57': attribute type 21 has an invalid length.
[   82.716782][ T5317] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[   82.728276][ T5317] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61
[   82.749509][ T5287] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   82.758899][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.767124][ T5287] usb 3-1: Product: syz
[   82.771395][ T5287] usb 3-1: Manufacturer: syz
[   82.776145][ T5287] usb 3-1: SerialNumber: syz
[   82.782685][ T5287] usb 3-1: config 0 descriptor??
[   83.192438][   T29] audit: type=1326 audit(1729298959.316:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f017dff9 code=0x7ffc0000
[   83.356003][   T29] audit: type=1326 audit(1729298959.316:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff1f017dff9 code=0x7ffc0000
[   83.379559][   T29] audit: type=1326 audit(1729298959.316:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f017dff9 code=0x7ffc0000
[   83.401779][   T29] audit: type=1326 audit(1729298959.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff1f017dff9 code=0x7ffc0000
[   83.408293][ T5566] overlayfs: failed to resolve './file1': -2
[   83.480319][   T29] audit: type=1326 audit(1729298959.366:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f017dff9 code=0x7ffc0000
[   83.509450][   T29] audit: type=1326 audit(1729298959.376:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f017dff9 code=0x7ffc0000
[   83.592227][ T5571] loop0: detected capacity change from 0 to 1024
[   83.618574][ T5571] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   83.654811][ T5571] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[   83.673098][ T5571] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   83.690775][ T5571] EXT4-fs (loop0): mount failed
[   83.874988][ T5317] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   83.964307][   T46] usb 2-1: USB disconnect, device number 3
[   84.051377][ T5317] usb 5-1: Using ep0 maxpacket: 32
[   84.059341][ T5586] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET)
[   84.061235][ T5317] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   84.082017][ T5317] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   84.104296][ T5317] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   84.121612][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.138488][ T5317] usb 5-1: config 0 descriptor??
[   84.215219][ T5317] hub 5-1:0.0: bad descriptor, ignoring hub
[   84.262922][ T5317] hub 5-1:0.0: probe with driver hub failed with error -5
[   84.315038][ T5317] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   84.734167][ T5593] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.162943][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.277508][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.343900][  T938] usb 3-1: USB disconnect, device number 4
[   85.692022][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.918274][ T5617] No control pipe specified
[   93.917038][ T5248] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   94.056612][   T25] usb 5-1: USB disconnect, device number 3
[   94.115945][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.125594][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.135448][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.148445][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.220428][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   94.229156][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.519062][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.692767][ T5248] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   94.730306][ T5248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   94.738740][ T5248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   94.858196][ T5248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   94.890634][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   94.898294][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   96.103049][ T5613] chnl_net:caif_netlink_parms(): no params data found
[   96.186099][ T5631] loop2: detected capacity change from 0 to 65536
[   96.275227][ T5631] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   96.311743][ T5236] Bluetooth: hci0: command tx timeout
[   96.462862][ T5631] XFS (loop2): Ending clean mount
[   96.525195][ T5631] XFS (loop2): Quotacheck needed: Please wait.
[   96.603540][ T5631] XFS (loop2): Quotacheck: Done.
[   96.725594][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.743224][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.753513][ T5613] bridge_slave_0: entered allmulticast mode
[   96.768076][ T5613] bridge_slave_0: entered promiscuous mode
[   96.781911][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.790534][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.800170][ T5613] bridge_slave_1: entered allmulticast mode
[   96.808191][ T5613] bridge_slave_1: entered promiscuous mode
[   96.835810][ T1893] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.861865][ T5633] chnl_net:caif_netlink_parms(): no params data found
[   96.902416][ T5240] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   96.920640][   T11] bridge_slave_1: left allmulticast mode
[   96.930599][   T11] bridge_slave_1: left promiscuous mode
[   96.946138][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.955086][ T5236] Bluetooth: hci5: command tx timeout
[   96.975555][   T11] bridge_slave_0: left allmulticast mode
[   97.002694][ T1893] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[   97.011372][ T1893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.015120][   T11] bridge_slave_0: left promiscuous mode
[   97.026532][ T1893] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   97.036013][ T1893] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   97.044048][ T1893] usb 4-1: Manufacturer: syz
[   97.044806][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.051413][ T1893] usb 4-1: config 0 descriptor??
[   98.397776][ T1893] rc_core: IR keymap rc-hauppauge not found
[   98.403756][ T1893] Registered IR keymap rc-empty
[   98.408742][ T5236] Bluetooth: hci0: command tx timeout
[   98.418876][ T1893] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[   98.430549][ T1893] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5
[   99.037900][ T5236] Bluetooth: hci5: command tx timeout
[   99.821258][ T5648] Falling back ldisc for ptm0.
[   99.862568][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.936425][ T5317] usb 4-1: USB disconnect, device number 2
[   99.968803][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.038193][   T11] bond0 (unregistering): Released all slaves
[  100.129238][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.286961][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.428830][ T5613] team0: Port device team_slave_0 added
[  100.464893][ T5236] Bluetooth: hci0: command tx timeout
[  101.599514][ T5236] Bluetooth: hci5: command tx timeout
[  101.781370][ T5613] team0: Port device team_slave_1 added
[  101.825029][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.841125][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.849043][ T5633] bridge_slave_0: entered allmulticast mode
[  101.860441][ T5633] bridge_slave_0: entered promiscuous mode
[  101.921051][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.930575][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.941016][ T5633] bridge_slave_1: entered allmulticast mode
[  101.951067][ T5633] bridge_slave_1: entered promiscuous mode
[  102.036455][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.073585][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.099646][    C1] vkms_vblank_simulate: vblank timer overrun
[  102.130961][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.299513][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.323761][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.349732][    C1] vkms_vblank_simulate: vblank timer overrun
[  102.372996][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.404190][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.420782][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.484781][   T11] hsr_slave_0: left promiscuous mode
[  102.494041][   T11] hsr_slave_1: left promiscuous mode
[  102.505536][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.523783][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.544948][ T5236] Bluetooth: hci0: command tx timeout
[  102.552752][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.569674][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.649902][   T11] veth1_macvtap: left promiscuous mode
[  102.672331][   T11] veth0_macvtap: left promiscuous mode
[  102.714171][   T11] veth1_vlan: left promiscuous mode
[  102.745360][   T11] veth0_vlan: left promiscuous mode
[  103.175744][ T5734] unsupported nlmsg_type 40
[  103.680039][ T5734] orangefs_mount: mount request failed with -4
[  103.695949][ T5236] Bluetooth: hci5: command tx timeout
[  104.504931][ T5746] process 'syz.2.101' launched './file2' with NULL argv: empty string added
[  104.569536][   T11] team0 (unregistering): Port device team_slave_1 removed
[  104.689392][   T11] team0 (unregistering): Port device team_slave_0 removed
[  106.317095][ T5761] Zero length message leads to an empty skb
[  106.426382][ T5633] team0: Port device team_slave_0 added
[  106.458741][ T5761] netlink: 'syz.3.102': attribute type 10 has an invalid length.
[  106.483674][ T5761] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  106.530020][ T5633] team0: Port device team_slave_1 added
[  106.626800][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.633807][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.697388][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.741753][ T5613] hsr_slave_0: entered promiscuous mode
[  106.765144][ T5613] hsr_slave_1: entered promiscuous mode
[  106.796114][ T5613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.803752][ T5613] Cannot create hsr debugfs directory
[  106.861345][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.879899][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.934643][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.355263][ T5633] hsr_slave_0: entered promiscuous mode
[  107.426367][ T5633] hsr_slave_1: entered promiscuous mode
[  107.449535][ T5633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.786940][ T5633] Cannot create hsr debugfs directory
[  108.472704][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.711324][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.733112][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'.
[  108.865252][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'.
[  108.888217][ T5797] netlink: 52 bytes leftover after parsing attributes in process `syz.0.109'.
[  109.576926][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.769896][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.006286][   T11] bridge_slave_1: left allmulticast mode
[  111.065591][   T11] bridge_slave_1: left promiscuous mode
[  111.113533][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.216924][   T11] bridge_slave_0: left allmulticast mode
[  111.279769][   T11] bridge_slave_0: left promiscuous mode
[  111.323998][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.096748][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.136230][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.147349][   T11] bond0 (unregistering): Released all slaves
[  113.380438][ T5863] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  113.390293][ T5863] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  113.768706][   T11] hsr_slave_0: left promiscuous mode
[  113.798332][   T11] hsr_slave_1: left promiscuous mode
[  113.810811][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.842283][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.857485][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.887251][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.946276][   T11] veth1_macvtap: left promiscuous mode
[  113.963431][   T11] veth0_macvtap: left promiscuous mode
[  113.985206][   T11] veth1_vlan: left promiscuous mode
[  113.990581][   T11] veth0_vlan: left promiscuous mode
[  115.220904][   T11] team0 (unregistering): Port device team_slave_1 removed
[  115.513800][   T11] team0 (unregistering): Port device team_slave_0 removed
[  115.585095][   T29] audit: type=1326 audit(1729298991.766:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f017dff9 code=0x7ffc0000
[  115.634069][   T29] audit: type=1326 audit(1729298991.776:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f017dff9 code=0x7ffc0000
[  116.281085][ T5906] netlink: 52 bytes leftover after parsing attributes in process `syz.2.130'.
[  116.290214][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'.
[  116.300775][ T5906] netlink: 52 bytes leftover after parsing attributes in process `syz.2.130'.
[  116.601081][ T5896] netlink: 'syz.0.126': attribute type 21 has an invalid length.
[  117.060123][ T5923] binder_alloc: 5919: binder_alloc_buf, no vma
[  117.072182][ T5923] binder: 5919:5923 ioctl 1276 0 returned -22
[  117.128733][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  117.211552][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  117.288431][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  117.308058][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  117.335386][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'.
[  117.344197][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.135'.
[  117.602748][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  117.624319][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  117.652292][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  117.696815][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  117.882366][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.938236][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[  118.032441][  T728] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.040216][  T728] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.119989][  T728] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.127155][  T728] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.361428][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.440145][ T5633] 8021q: adding VLAN 0 to HW filter on device team0
[  118.485556][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.492691][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.536173][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.543354][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.815553][ T5286] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  118.880120][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.995186][ T5286] usb 1-1: Using ep0 maxpacket: 32
[  119.019563][ T5286] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  119.034679][ T5286] usb 1-1: config 0 has no interface number 0
[  119.043574][ T5286] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  119.063033][ T5317] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  119.067884][ T5613] veth0_vlan: entered promiscuous mode
[  119.076572][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.093357][ T5286] usb 1-1: Product: syz
[  119.111171][ T5317] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  119.111470][ T5613] veth1_vlan: entered promiscuous mode
[  119.127033][ T5286] usb 1-1: Manufacturer: syz
[  119.131681][ T5286] usb 1-1: SerialNumber: syz
[  119.176219][ T5286] usb 1-1: config 0 descriptor??
[  119.182929][ T5317] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  119.197501][ T5286] smsc95xx v2.0.0
[  119.243176][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.360504][ T5613] veth0_macvtap: entered promiscuous mode
[  119.410055][ T5613] veth1_macvtap: entered promiscuous mode
[  119.551555][ T5613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.583422][ T5613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.601495][ T5613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.621568][ T5613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.652126][ T5286] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  119.679947][ T5286] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  119.713042][ T5613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.747259][ T5613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.788372][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.860817][ T5613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.879865][ T5613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.891168][ T5613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.902541][ T5613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.914283][ T5613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.926737][ T5613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.958277][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.006999][ T5613] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.016530][ T5613] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.031193][ T5613] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.083948][ T5613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.367506][ T5716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.402764][ T5716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.515871][ T5735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.554104][ T5286] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  120.604887][ T5735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.605837][ T5286] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61
[  120.670521][ T5633] veth0_vlan: entered promiscuous mode
[  120.761252][ T5633] veth1_vlan: entered promiscuous mode
[  120.922053][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'.
[  120.965553][ T5633] veth0_macvtap: entered promiscuous mode
[  120.973798][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'.
[  120.982884][ T5633] veth1_macvtap: entered promiscuous mode
[  121.073162][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.124760][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.173215][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.206087][ T6017] capability: warning: `syz.2.145' uses deprecated v2 capabilities in a way that may be insecure
[  121.223271][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.238620][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.280516][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.332879][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.380925][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.393267][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.431464][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.462862][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.512079][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.529870][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.540436][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.551393][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.562807][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.573741][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.585940][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.624052][ T5633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.655918][ T5633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.690548][ T5633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.714530][ T5633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.771323][ T6032] pimreg: entered allmulticast mode
[  121.827170][ T6032] pimreg: left allmulticast mode
[  121.839044][ T5317] usb 1-1: USB disconnect, device number 4
[  121.986013][ T6036] bridge0: port 3(syz_tun) entered blocking state
[  121.992963][ T6036] bridge0: port 3(syz_tun) entered disabled state
[  122.003166][ T6036] syz_tun: entered allmulticast mode
[  122.012660][ T6036] syz_tun: entered promiscuous mode
[  122.019178][ T6036] bridge0: port 3(syz_tun) entered blocking state
[  122.026143][ T6036] bridge0: port 3(syz_tun) entered forwarding state
[  122.466620][ T5236] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  122.475367][ T5236] Bluetooth: hci3: Injecting HCI hardware error event
[  122.486147][ T5236] Bluetooth: hci3: hardware error 0x00
[  123.043710][ T5735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.043739][ T5735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.146855][ T5735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.146882][ T5735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.374934][ T6082] warning: `syz.2.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  124.794661][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  124.894794][ T5317] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  125.657467][ T6113] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[  125.681645][ T6113] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.161'.
[  125.960240][ T5317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.975192][ T5317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.031667][ T5317] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  126.100713][ T5317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.188808][ T5317] usb 4-1: config 0 descriptor??
[  126.518844][ T6125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'.
[  126.837012][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'.
[  126.846158][ T6125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'.
[  126.901686][ T6125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'.
[  126.962860][ T5317] usbhid 4-1:0.0: can't add hid device: -71
[  126.969608][ T5317] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  126.993385][ T5317] usb 4-1: USB disconnect, device number 3
[  127.644608][ T5317] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  127.804864][ T5317] usb 3-1: Using ep0 maxpacket: 16
[  127.817436][ T5317] usb 3-1: config 0 has no interfaces?
[  127.834886][ T5317] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  127.850404][ T5317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.859259][ T5317] usb 3-1: Product: syz
[  127.863476][ T5317] usb 3-1: Manufacturer: syz
[  127.874304][ T5317] usb 3-1: SerialNumber: syz
[  127.889299][ T5317] usb 3-1: config 0 descriptor??
[  128.831324][ T6188] fuse: Unknown parameter 'group_id00000000000000000000'
[  129.155946][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'.
[  129.183495][ T5317] usb 3-1: USB disconnect, device number 5
[  129.348094][ T6197] netlink: 44 bytes leftover after parsing attributes in process `syz.0.192'.
[  129.365055][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'.
[  129.375717][ T6197] netlink: 44 bytes leftover after parsing attributes in process `syz.0.192'.
[  129.425081][ T5236] Bluetooth: hci5: command tx timeout
[  129.532203][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'.
[  129.555882][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.610693][ T6206] bridge_slave_0 (unregistering): left allmulticast mode
[  129.620994][ T6206] bridge_slave_0 (unregistering): left promiscuous mode
[  129.632541][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.095787][ T6232] kvm: emulating exchange as write
[  133.162525][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  133.169581][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  133.261346][ T6264] netlink: 'syz.0.209': attribute type 1 has an invalid length.
[  133.269508][ T6264] __nla_validate_parse: 1 callbacks suppressed
[  133.269553][ T6264] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.209'.
[  133.738290][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.212'.
[  133.839052][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'.
[  134.306489][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.212'.
[  134.400043][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.212'.
[  134.519388][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'.
[  134.549860][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'.
[  134.587023][ T6276] netlink: 'syz.3.215': attribute type 1 has an invalid length.
[  135.093212][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'.
[  136.324569][ T5317] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  136.486719][ T5317] usb 3-1: Using ep0 maxpacket: 8
[  136.563778][ T5317] usb 3-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[  136.610067][ T5317] usb 3-1: config 167 has 1 interface, different from the descriptor's value: 202
[  136.622625][ T5317] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[  136.631837][ T5317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.640004][ T5317] usb 3-1: Product: syz
[  136.644216][ T5317] usb 3-1: Manufacturer: syz
[  136.648904][ T5317] usb 3-1: SerialNumber: syz
[  136.703836][ T5317] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[  136.917627][ T5317] dvb-usb: bulk message failed: -22 (3/0)
[  136.948205][ T5317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.961208][ T5317] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[  136.973766][ T5317] usb 3-1: media controller created
[  136.993223][ T5317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  137.421696][ T5317] dvb-usb: bulk message failed: -22 (6/0)
[  137.430462][ T5317] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[  137.444077][ T5317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  137.457870][ T5317] dvb-usb: schedule remote query interval to 150 msecs.
[  137.467160][ T5317] dvb-usb: bulk message failed: -22 (3/0)
[  137.494573][ T5317] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[  137.521603][ T5317] usb 3-1: USB disconnect, device number 6
[  137.741037][ T5317] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[  137.895019][ T6325] random: crng reseeded on system resumption
[  138.280037][ T6325] Restarting kernel threads ... done.
[  138.717750][ T6344] 9pnet_virtio: no channels available for device syz
[  138.813209][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.242'.
[  138.878491][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.242'.
[  138.914883][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.242'.
[  139.017564][ T6349] block nbd0: shutting down sockets
[  139.073533][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.247'.
[  139.211693][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'.
[  139.224544][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'.
[  139.233381][ T6365] netlink: 'syz.4.248': attribute type 1 has an invalid length.
[  141.644630][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  141.805315][    T8] usb 1-1: Using ep0 maxpacket: 8
[  141.839257][    T8] usb 1-1: unable to read config index 0 descriptor/start: -61
[  141.871578][    T8] usb 1-1: can't read configurations, error -61
[  142.014332][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.259'.
[  142.326095][    T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.515544][    T8] usb 1-1: Using ep0 maxpacket: 8
[  142.534289][    T8] usb 1-1: unable to read config index 0 descriptor/start: -61
[  142.571925][    T8] usb 1-1: can't read configurations, error -61
[  142.607277][    T8] usb usb1-port1: attempt power cycle
[  142.975553][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  142.996870][    T8] usb 1-1: Using ep0 maxpacket: 8
[  143.004438][    T8] usb 1-1: unable to read config index 0 descriptor/start: -61
[  143.012236][    T8] usb 1-1: can't read configurations, error -61
[  143.192471][ T5236] Bluetooth: hci1: link tx timeout
[  143.236853][ T5236] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.289815][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  144.120873][    T8] usb 1-1: Using ep0 maxpacket: 8
[  144.135531][    T8] usb 1-1: unable to read config index 0 descriptor/start: -61
[  144.143193][    T8] usb 1-1: can't read configurations, error -61
[  144.150197][    T8] usb usb1-port1: unable to enumerate USB device
[  144.904662][   T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  145.154556][   T46] usb 1-1: Using ep0 maxpacket: 8
[  145.915658][   T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.926059][   T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  145.935435][   T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  145.946909][   T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18277, setting to 1024
[  145.958370][   T46] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  145.967686][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.264596][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  146.364849][ T6444] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  146.373363][   T46] hub 1-1:1.0: bad descriptor, ignoring hub
[  146.379971][   T46] hub 1-1:1.0: probe with driver hub failed with error -5
[  146.403476][   T46] cdc_wdm 1-1:1.0: skipping garbage
[  146.414961][   T46] cdc_wdm 1-1:1.0: skipping garbage
[  146.432471][   T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  146.439036][   T46] cdc_wdm 1-1:1.0: Unknown control protocol
[  147.830386][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'.
[  147.861910][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'.
[  147.902525][ T6490] netlink: 'syz.4.286': attribute type 1 has an invalid length.
[  147.910436][ T5317] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  148.065627][ T5317] usb 3-1: Using ep0 maxpacket: 8
[  148.086031][ T5317] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  148.100979][ T5317] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  148.134977][ T5317] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  148.180506][ T5317] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  148.222606][ T5317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.303974][ T5317] usbtmc 3-1:16.0: bulk endpoints not found
[  149.518125][  T938] usb 3-1: USB disconnect, device number 7
[  150.792027][ T6444] cdc_wdm 1-1:1.0: Error autopm - -16
[  150.887028][    T8] usb 1-1: USB disconnect, device number 9
[  151.484127][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.300'.
[  151.620693][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.300'.
[  151.887722][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.300'.
[  152.211043][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.300'.
[  152.659494][ T6585] netlink: 'syz.2.301': attribute type 1 has an invalid length.
[  152.667335][ T6585] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.301'.
[  155.719827][ T5235] bridge0: port 3(syz_tun) entered disabled state
[  155.739262][ T5317] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  155.806759][ T5235] syz_tun (unregistering): left allmulticast mode
[  155.813260][ T5235] syz_tun (unregistering): left promiscuous mode
[  155.828028][ T5235] bridge0: port 3(syz_tun) entered disabled state
[  155.904128][ T5317] usb 3-1: Using ep0 maxpacket: 32
[  155.905035][ T6648] syz.1.320: attempt to access beyond end of device
[  155.905035][ T6648] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  155.915878][ T5317] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  155.931274][ T6648] MINIX-fs: unable to read superblock
[  155.943599][ T5317] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  155.953317][ T5317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.963006][ T5317] usb 3-1: Product: syz
[  155.968924][ T5317] usb 3-1: Manufacturer: syz
[  155.973572][ T5317] usb 3-1: SerialNumber: syz
[  155.986053][ T5317] usb 3-1: config 0 descriptor??
[  155.994805][ T6620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  156.005200][ T5317] hub 3-1:0.0: bad descriptor, ignoring hub
[  156.011166][ T5317] hub 3-1:0.0: probe with driver hub failed with error -5
[  156.022012][ T5317] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[  156.215532][   T25] usb 3-1: USB disconnect, device number 8
[  156.215850][    C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  156.376870][ T6660] hugetlbfs: Bad value 'p' for mount option 'size'
[  156.376870][ T6660] 
[  157.355181][ T6666] IPVS: length: 95 != 24
[  157.436931][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  157.456271][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  157.477495][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  157.559920][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  157.569214][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  157.577226][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  157.753463][ T6676] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  158.538176][ T6667] chnl_net:caif_netlink_parms(): no params data found
[  158.654044][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.662363][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.670058][   T29] audit: type=1326 audit(1729299034.866:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc26057dff9 code=0x0
[  158.670109][ T6667] bridge_slave_0: entered allmulticast mode
[  158.697957][    T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  158.709287][ T6667] bridge_slave_0: entered promiscuous mode
[  158.718008][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.726920][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.734992][ T6667] bridge_slave_1: entered allmulticast mode
[  158.742507][ T6667] bridge_slave_1: entered promiscuous mode
[  158.779467][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.801226][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.855391][    T8] usb 3-1: too many configurations: 183, using maximum allowed: 8
[  158.865951][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  158.873826][    T8] usb 3-1: can't read configurations, error -61
[  159.052800][ T6667] team0: Port device team_slave_0 added
[  159.061009][ T6667] team0: Port device team_slave_1 added
[  159.084810][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.091929][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.806106][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  159.822757][   T54] Bluetooth: hci2: command tx timeout
[  159.878078][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.891487][ T6696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  159.901334][ T6696] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  159.998026][    T8] usb 3-1: too many configurations: 183, using maximum allowed: 8
[  160.018315][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  160.031243][    T8] usb 3-1: can't read configurations, error -61
[  160.040959][    T8] usb usb3-port1: attempt power cycle
[  160.103935][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.113283][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.139489][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.203512][ T6667] hsr_slave_0: entered promiscuous mode
[  160.368449][ T6667] hsr_slave_1: entered promiscuous mode
[  160.566262][    T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  160.911081][    T8] usb 3-1: too many configurations: 183, using maximum allowed: 8
[  160.919510][ T6667] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.944044][ T6667] Cannot create hsr debugfs directory
[  160.970935][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  160.985866][    T8] usb 3-1: can't read configurations, error -61
[  161.144648][    T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  161.894419][    T8] usb 3-1: device descriptor read/8, error -71
[  161.904614][ T5236] Bluetooth: hci2: command tx timeout
[  162.034521][    T8] usb usb3-port1: unable to enumerate USB device
[  162.230935][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.340'.
[  162.431198][ T6667] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.580085][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.344'.
[  162.589607][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.344'.
[  162.599098][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.344'.
[  162.609088][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.344'.
[  162.807019][ T6667] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.967848][ T6667] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.833606][ T6667] bond0: (slave netdevsim0): Releasing backup interface
[  163.848796][ T6667] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.076552][ T5236] Bluetooth: hci2: command tx timeout
[  164.471852][ T6667] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  164.548223][ T6667] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  164.597721][ T6667] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  164.608309][ T6667] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  164.857711][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.892586][ T6667] 8021q: adding VLAN 0 to HW filter on device team0
[  164.913283][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.920463][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.960532][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.967771][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.039458][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.356'.
[  165.039504][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'.
[  165.039524][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.356'.
[  165.039556][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.356'.
[  165.050426][ T6667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.578062][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.161694][ T5236] Bluetooth: hci2: command tx timeout
[  166.341878][ T6667] veth0_vlan: entered promiscuous mode
[  166.393885][ T6667] veth1_vlan: entered promiscuous mode
[  166.480284][ T6667] veth0_macvtap: entered promiscuous mode
[  166.487081][ T6667] veth1_macvtap: entered promiscuous mode
[  166.501232][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.514151][ T6786] fuse: Bad value for 'fd'
[  166.517570][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.535650][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.535674][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.535688][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.535703][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.535729][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.535744][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.535758][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.535773][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.537784][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.636008][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.646712][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.646729][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.646753][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.646766][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.646781][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.646802][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.646817][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.646829][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.646843][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.648183][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.668014][ T6667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.668052][ T6667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.668081][ T6667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.668110][ T6667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.685945][ T5317] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  166.809083][ T5716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.809109][ T5716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.834588][ T5317] usb 5-1: Using ep0 maxpacket: 32
[  166.836266][ T5317] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  166.836302][ T5317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  166.836331][ T5317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  166.836372][ T5317] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  166.836398][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.838411][ T5317] usb 5-1: config 0 descriptor??
[  166.839087][ T6782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  166.840428][ T5317] hub 5-1:0.0: USB hub found
[  166.913432][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.913480][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.126080][   T29] audit: type=1326 audit(1729299043.316:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76bf57dff9 code=0x0
[  167.249457][ T5317] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  167.284232][ T6759] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  167.308605][ T6796] block nbd3: shutting down sockets
[  167.566944][ T5317] usbhid 5-1:0.0: can't add hid device: -71
[  167.715765][ T5317] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  169.087146][ T6808] orangefs_mount: mount request failed with -4
[  169.278533][ T5317] usb 5-1: USB disconnect, device number 4
[  169.863178][ T5319] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  170.195310][ T5319] usb 1-1: Using ep0 maxpacket: 8
[  170.216493][ T5319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.238574][ T5319] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  170.250980][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  170.264065][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  170.284262][ T5319] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  170.306136][ T5319] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  170.315601][ T5319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  170.323724][ T5319] usb 1-1: Product: syz
[  170.328716][ T5319] usb 1-1: Manufacturer: syz
[  170.333358][ T5319] usb 1-1: SerialNumber: syz
[  170.352205][ T5319] usb 1-1: config 0 descriptor??
[  170.446320][ T6821] MTD: Attempt to mount non-MTD device "/dev/nbd3"
[  170.479881][ T6821] cramfs: wrong magic
[  170.576090][ T5319] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32
[  170.589361][ T5319] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[  170.663221][ T5319] usb 1-1: USB disconnect, device number 10
[  170.837803][ T6833] vimc link validate: Sensor A:src:16x16 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  172.666707][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  172.714611][    T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  172.864616][    T8] usb 3-1: Using ep0 maxpacket: 32
[  172.871625][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  172.916272][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  173.009619][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  173.092352][    T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  173.111091][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.122401][    T8] usb 3-1: config 0 descriptor??
[  173.128617][ T6844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  173.142035][    T8] hub 3-1:0.0: USB hub found
[  173.796856][    T8] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  173.891698][ T6864] loop3: detected capacity change from 0 to 512
[  173.940886][ T6864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  174.037146][ T6864] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  174.074553][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  174.113569][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  174.117599][ T6864] EXT4-fs (loop3): 1 truncate cleaned up
[  174.139631][ T6864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.345643][    T8] usb 3-1: USB disconnect, device number 13
[  175.161039][ T6667] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.603967][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'.
[  177.336243][ T6921] loop3: detected capacity change from 0 to 512
[  177.353947][ T6923] fuse: Bad value for 'fd'
[  177.408461][ T6921] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  177.470706][ T6921] EXT4-fs (loop3): 1 truncate cleaned up
[  177.478715][ T6921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.555499][ T5287] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  178.579708][ T6667] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.664611][   T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  178.768630][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  178.844562][   T25] usb 5-1: Using ep0 maxpacket: 32
[  178.852259][   T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  178.864583][ T5287] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  178.886147][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.904095][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  178.912362][ T5287] usb 1-1: config 0 descriptor??
[  178.964821][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  179.014162][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  179.061150][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.086929][   T25] usb 5-1: config 0 descriptor??
[  179.108301][ T6922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  179.131214][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'.
[  179.155623][   T25] hub 5-1:0.0: USB hub found
[  179.161622][ T5317] usb 1-1: USB disconnect, device number 11
[  179.180635][ T6948] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  179.189767][ T6948] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  179.199629][ T6948] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  179.210512][ T6948] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  179.573331][   T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  179.726772][ T6955] netlink: 'syz.1.414': attribute type 1 has an invalid length.
[  179.801278][   T25] usbhid 5-1:0.0: can't add hid device: -71
[  179.812304][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  179.847466][   T25] usb 5-1: USB disconnect, device number 5
[  180.604924][   T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  180.784970][   T25] usb 4-1: Using ep0 maxpacket: 8
[  180.827675][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.953318][   T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  181.084382][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  181.111972][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  181.272329][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  181.287731][   T25] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  181.297266][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  181.305509][   T25] usb 4-1: Product: syz
[  181.309757][   T25] usb 4-1: Manufacturer: syz
[  181.397604][   T25] usb 4-1: SerialNumber: syz
[  181.414992][   T25] usb 4-1: config 0 descriptor??
[  181.630175][   T25] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32
[  181.669448][   T25] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[  181.733494][   T25] usb 4-1: USB disconnect, device number 4
[  182.001970][ T6982] sctp: [Deprecated]: syz.4.422 (pid 6982) Use of int in maxseg socket option.
[  182.001970][ T6982] Use struct sctp_assoc_value instead
[  182.234685][   T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  182.508885][   T25] usb 2-1: Using ep0 maxpacket: 8
[  182.607461][   T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  182.663826][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'.
[  182.689244][   T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  182.724705][   T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.747912][   T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.763983][   T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  182.773552][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.825629][ T7004] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  182.840901][ T7004] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  182.852487][ T7004] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  182.861717][ T7004] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  183.004756][   T25] usb 2-1: GET_CAPABILITIES returned 0
[  183.010333][   T25] usbtmc 2-1:16.0: can't read capabilities
[  183.565032][ T7023] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.433'.
[  185.475705][ T7042] nbd2: detected capacity change from 0 to 22
[  185.490580][ T7044] block nbd2: shutting down sockets
[  185.507671][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  185.516974][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  185.525403][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  185.571898][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  185.617256][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  185.665972][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  185.697315][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  185.724657][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  185.747260][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  185.792424][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  185.823593][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  185.855691][   T46] usb 2-1: USB disconnect, device number 4
[  185.895485][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  185.903448][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  185.962898][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  186.054266][ T5236] Bluetooth: hci0: unexpected event for opcode 0x2003
[  186.114601][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.154297][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  186.183147][ T5624] ldm_validate_partition_table(): Disk read failed.
[  186.200316][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.212878][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  186.225705][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.248626][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  186.273173][ T5624] Dev nbd2: unable to read RDB block 0
[  186.289488][ T5624]  nbd2: unable to read partition table
[  186.309311][ T5624] nbd2: partition table beyond EOD, truncated
[  186.346703][ T5624] ldm_validate_partition_table(): Disk read failed.
[  186.376110][ T5624] Dev nbd2: unable to read RDB block 0
[  186.392607][ T5624]  nbd2: unable to read partition table
[  186.419400][ T5624] nbd2: partition table beyond EOD, truncated
[  186.442650][ T7042] ldm_validate_partition_table(): Disk read failed.
[  186.466348][ T7042] Dev nbd2: unable to read RDB block 0
[  186.546381][ T7042]  nbd2: unable to read partition table
[  186.552197][ T7042] nbd2: partition table beyond EOD, truncated
[  188.184833][ T5287] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  188.890707][ T7115] orangefs_mount: mount request failed with -4
[  189.085457][ T5287] usb 3-1: Using ep0 maxpacket: 8
[  189.092400][ T5287] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  189.103826][ T5287] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  189.114552][ T5287] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  189.124630][ T5287] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  189.137956][ T5287] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  189.154997][ T7119] sctp: [Deprecated]: syz.3.464 (pid 7119) Use of int in maxseg socket option.
[  189.154997][ T7119] Use struct sctp_assoc_value instead
[  189.172072][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.462687][ T5287] usb 3-1: GET_CAPABILITIES returned 0
[  189.490880][ T5287] usbtmc 3-1:16.0: can't read capabilities
[  189.665816][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  190.002422][ T7130] KVM: debugfs: duplicate directory 7130-4
[  190.294859][   T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  190.474836][   T25] usb 2-1: Using ep0 maxpacket: 8
[  190.487625][   T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  190.503862][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.542914][   T25] usb 2-1: Product: syz
[  190.549178][   T54] Bluetooth: hci1: unexpected event for opcode 0x2003
[  190.565406][   T25] usb 2-1: Manufacturer: syz
[  190.589812][   T25] usb 2-1: SerialNumber: syz
[  190.768995][   T25] usb 2-1: config 0 descriptor??
[  191.467100][ T7152] orangefs_mount: mount request failed with -4
[  191.554038][   T25] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  191.768185][ T7159] sctp: [Deprecated]: syz.4.476 (pid 7159) Use of int in maxseg socket option.
[  191.768185][ T7159] Use struct sctp_assoc_value instead
[  192.528402][ T7172] KVM: debugfs: duplicate directory 7172-4
[  193.202147][ T7184] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  193.211882][ T7184] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  193.973091][   T25] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  194.002369][   T25] usb 2-1: USB disconnect, device number 5
[  194.114759][   T54] Bluetooth: hci2: unexpected event for opcode 0x2003
[  194.615310][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  194.624909][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  194.634342][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  194.643092][   T54] Bluetooth: hci1: hardware error 0x00
[  194.674322][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  194.973383][ T7192] orangefs_mount: mount request failed with -4
[  196.251647][   T25] usb 3-1: USB disconnect, device number 14
[  196.523580][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'.
[  196.564553][ T5286] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  196.648235][ T7221] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  196.657887][ T7221] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  196.677316][ T7221] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  196.689772][ T7221] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  196.709417][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  196.764657][ T5286] usb 4-1: Using ep0 maxpacket: 8
[  196.945862][ T5286] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  197.758538][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.801906][ T5286] usb 4-1: Product: syz
[  197.823853][ T5286] usb 4-1: Manufacturer: syz
[  197.834813][ T5286] usb 4-1: SerialNumber: syz
[  198.050909][ T5286] usb 4-1: config 0 descriptor??
[  198.308422][   T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  198.317277][   T54] Bluetooth: hci2: Injecting HCI hardware error event
[  198.330107][   T54] Bluetooth: hci2: hardware error 0x00
[  198.779956][ T5286] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  199.023250][ T7249] netlink: 'syz.2.509': attribute type 1 has an invalid length.
[  199.056145][ T7249] netlink: 220 bytes leftover after parsing attributes in process `syz.2.509'.
[  199.310931][   T29] audit: type=1326 audit(1729299075.506:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.2.515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06cd97dff9 code=0x0
[  199.733548][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'.
[  200.141757][ T7274] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  200.947656][ T7274] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  200.964602][ T7274] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  201.107134][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  201.151160][ T7274] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  201.224901][ T5286] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  201.241216][ T5286] usb 4-1: USB disconnect, device number 5
[  201.867191][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'.
[  202.085041][ T7309] can: request_module (can-proto-4) failed.
[  204.356157][ T7334] orangefs_mount: mount request failed with -4
[  204.584569][ T5317] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  204.614655][ T5287] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  204.785302][ T5317] usb 3-1: Using ep0 maxpacket: 8
[  204.804523][ T5287] usb 4-1: Using ep0 maxpacket: 32
[  204.812760][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.835131][ T5287] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  204.851286][ T5317] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  204.869311][ T5317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.937891][ T5317] usb 3-1: Product: syz
[  204.942297][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.956169][ T5317] usb 3-1: Manufacturer: syz
[  204.973381][ T5317] usb 3-1: SerialNumber: syz
[  204.980648][ T5287] usb 4-1: config 0 descriptor??
[  204.994291][ T5317] usb 3-1: config 0 descriptor??
[  205.227597][ T7332] orangefs_mount: mount request failed with -4
[  205.238465][ T5287] usbhid 4-1:0.0: can't add hid device: -71
[  205.257681][ T5287] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  205.276900][ T5287] usb 4-1: USB disconnect, device number 6
[  205.290108][ T5317] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  205.805684][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'.
[  206.078196][ T7346] loop7: detected capacity change from 0 to 16384
[  206.274749][   T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  206.486892][   T25] usb 5-1: Using ep0 maxpacket: 8
[  206.547356][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.594708][   T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  206.606454][ T7353] misc userio: No port type given on /dev/userio
[  207.034652][   T25] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  207.043888][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  207.052066][   T25] usb 5-1: Product: syz
[  207.056338][   T25] usb 5-1: Manufacturer: syz
[  207.061397][   T25] usb 5-1: SerialNumber: syz
[  207.075612][   T25] usb 5-1: config 0 descriptor??
[  207.106959][   T25] radio-si470x 5-1:0.0: could not find interrupt in endpoint
[  207.114661][   T25] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  207.123781][   T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  207.282146][ T7358] fuse: Bad value for 'fd'
[  208.099046][ T5317] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  208.412783][ T7383] mkiss: ax0: crc mode is auto.
[  209.094887][ T5317] usb 5-1: USB disconnect, device number 6
[  209.103122][ T5318] usb 3-1: USB disconnect, device number 15
[  209.295706][ T7387] 9pnet_virtio: no channels available for device syz
[  209.396291][ T7394] fuse: Bad value for 'fd'
[  209.817671][ T7408] KVM: debugfs: duplicate directory 7408-4
[  209.954614][    T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  210.106711][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  210.127244][    T8] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  210.137873][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.151516][    T8] usb 5-1: config 0 descriptor??
[  210.324667][ T5287] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  210.372114][    T8] usb 5-1: USB disconnect, device number 7
[  210.484560][ T5287] usb 2-1: Using ep0 maxpacket: 8
[  210.494716][ T5287] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  210.503920][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.516698][ T5287] usb 2-1: Product: syz
[  210.521054][ T5287] usb 2-1: Manufacturer: syz
[  210.532188][ T5287] usb 2-1: SerialNumber: syz
[  210.695135][ T5287] usb 2-1: config 0 descriptor??
[  210.949045][ T5287] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  211.024908][ T5319] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  211.180543][ T5319] usb 4-1: config 0 has no interfaces?
[  211.200363][ T5319] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  211.226349][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.253131][ T5319] usb 4-1: config 0 descriptor??
[  211.347357][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'.
[  211.356542][ T7418] orangefs_mount: mount request failed with -4
[  211.452373][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'.
[  211.474714][ T7432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.570'.
[  211.495981][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.534823][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.546984][  T938] usb 4-1: USB disconnect, device number 7
[  211.909110][ T5319] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  211.916774][ T5318] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  212.085868][ T5318] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  212.097556][ T5319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.113136][ T5319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.130173][ T5319] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  212.145603][ T5318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  212.164556][ T5319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.173371][ T5318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  212.195289][ T5318] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.203305][ T5318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  212.222549][ T5319] usb 5-1: config 0 descriptor??
[  212.244247][ T5318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  212.257186][ T7450] mkiss: ax0: crc mode is auto.
[  212.263533][ T5318] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.322200][ T5318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  212.339824][ T5318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  212.362221][ T5318] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.372186][ T5318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  212.392916][ T5318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  212.433306][ T5318] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.453610][ T5318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  212.462974][ T5318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  212.474276][ T5318] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.482739][ T5318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  212.496847][ T5318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  212.520586][ T5318] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.542300][ T5318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  212.587924][ T5318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  212.590139][ T5319] usbhid 5-1:0.0: can't add hid device: -71
[  212.637037][ T5318] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.658115][ T5319] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  212.671761][ T5318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  212.686684][ T5318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  212.715799][ T5319] usb 5-1: USB disconnect, device number 8
[  212.737357][ T5318] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.856133][ T5318] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  212.866371][ T5318] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  212.875643][ T5318] usb 3-1: Product: syz
[  212.879860][ T5318] usb 3-1: Manufacturer: syz
[  212.889491][ T5318] usb 3-1: SerialNumber: syz
[  212.897593][ T5318] usb 3-1: config 0 descriptor??
[  212.923273][ T5318] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  213.237341][ T5287] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  213.834519][ T7462] orangefs_mount: mount request failed with -4
[  214.034009][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'.
[  214.050005][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'.
[  214.059240][ T7465] netlink: 36 bytes leftover after parsing attributes in process `syz.4.582'.
[  215.023223][ T7453] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  215.030587][    C1] usb 3-1: yurex_control_callback - control failed: -2
[  215.186871][    T8] usb 3-1: USB disconnect, device number 16
[  215.207358][    T8] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  216.538059][   T29] audit: type=1804 audit(1729299090.626:13): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.583" name="/newroot/120/file0/bus" dev="ramfs" ino=18240 res=1 errno=0
[  216.621884][    T8] usb 2-1: USB disconnect, device number 6
[  217.143258][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[  217.172684][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  217.194599][ T7499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.594'.
[  217.992835][ T7504] futex_wake_op: syz.4.595 tries to shift op by 32; fix this program
[  218.312302][ T7506] binder: 7503:7506 ioctl c0306201 200011c0 returned -14
[  218.342789][   T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  219.070806][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  219.112633][   T25] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  219.134139][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[  219.155423][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.216083][   T25] usb 4-1: config 0 descriptor??
[  219.467050][   T25] usb 4-1: USB disconnect, device number 8
[  221.004622][   T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  221.114645][ T5318] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  221.207370][   T25] usb 2-1: Using ep0 maxpacket: 8
[  221.227926][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.238341][   T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xED, changing to 0x8D
[  221.250181][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 219, changing to 11
[  221.261527][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 34777, setting to 1024
[  221.273250][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  221.302324][   T25] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  221.312113][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  221.326138][   T25] usb 2-1: Product: syz
[  221.331015][   T25] usb 2-1: Manufacturer: syz
[  221.340232][   T25] usb 2-1: SerialNumber: syz
[  221.376250][ T5318] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  221.385408][ T5318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.419463][ T5318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  221.438584][ T5318] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  221.467660][   T25] usb 2-1: config 0 descriptor??
[  221.473504][ T7530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  221.492869][ T5318] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  221.533811][ T5318] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  221.541990][ T5318] usb 3-1: Product: syz
[  221.546387][ T5318] usb 3-1: Manufacturer: syz
[  221.572021][ T5318] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  221.742656][   T25] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32
[  221.752194][   T25] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  221.838190][ T7536] netlink: 'syz.2.604': attribute type 9 has an invalid length.
[  221.871402][   T25] usb 2-1: USB disconnect, device number 7
[  221.908606][ T7536] bond_slave_0: entered promiscuous mode
[  221.914570][ T7536] bond_slave_1: entered promiscuous mode
[  222.054842][ T7536] macvlan2: entered promiscuous mode
[  222.060329][ T7536] bond0: entered promiscuous mode
[  222.065780][ T7542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.606'.
[  222.067333][ T7536] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  222.081761][ T7542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.606'.
[  222.100394][ T5287] usb 3-1: USB disconnect, device number 17
[  222.108761][ T7542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.606'.
[  222.118170][ T7542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.606'.
[  223.234655][ T5287] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  223.674621][ T5287] usb 3-1: Using ep0 maxpacket: 32
[  223.862326][ T7574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'.
[  223.871442][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.619'.
[  223.880853][ T7574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'.
[  223.890240][ T7574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'.
[  223.934954][ T5287] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  223.943564][ T5287] usb 3-1: config 0 has no interface number 0
[  224.066628][ T5287] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  224.076390][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.084834][ T5287] usb 3-1: Product: syz
[  224.089295][ T5287] usb 3-1: Manufacturer: syz
[  224.093935][ T5287] usb 3-1: SerialNumber: syz
[  224.108791][ T5287] usb 3-1: config 0 descriptor??
[  224.136492][ T5287] smsc95xx v2.0.0
[  225.075357][ T5287] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  225.086969][ T5287] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  226.079864][ T7595] orangefs_mount: mount request failed with -4
[  227.368232][ T5287] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  227.380509][ T5287] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61
[  227.589897][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.630'.
[  227.609489][ T7607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.630'.
[  227.625016][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.630'.
[  227.644263][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.630'.
[  227.947758][ T7324] usb 3-1: USB disconnect, device number 18
[  228.051446][ T5287] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  228.214690][ T5287] usb 1-1: Using ep0 maxpacket: 8
[  228.246459][ T5287] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  228.271298][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.294499][ T5287] usb 1-1: Product: syz
[  228.298745][ T5287] usb 1-1: Manufacturer: syz
[  228.331380][ T5287] usb 1-1: SerialNumber: syz
[  228.352629][ T5287] usb 1-1: config 0 descriptor??
[  228.381066][ T7623] sctp: [Deprecated]: syz.2.636 (pid 7623) Use of int in maxseg socket option.
[  228.381066][ T7623] Use struct sctp_assoc_value instead
[  228.584834][ T5287] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  229.396561][ T7630] orangefs_mount: mount request failed with -4
[  229.552716][ T7629] orangefs_mount: mount request failed with -4
[  229.978564][ T5287] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  231.774715][ T5287] usb 1-1: USB disconnect, device number 12
[  232.785626][ T5318] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  232.845956][ T7673] sctp: [Deprecated]: syz.0.648 (pid 7673) Use of int in maxseg socket option.
[  232.845956][ T7673] Use struct sctp_assoc_value instead
[  233.047335][ T5318] usb 4-1: Using ep0 maxpacket: 32
[  233.061968][ T5318] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  233.071004][ T5318] usb 4-1: config 0 has no interface number 0
[  233.359198][ T7687] smc: net device lo applied user defined pnetid SYZ2
[  233.439699][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  233.454395][   T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[  233.464624][   T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  233.474742][   T54] Workqueue: hci5 hci_rx_work
[  233.479500][   T54] Call Trace:
[  233.482802][   T54]  <TASK>
[  233.485759][   T54]  dump_stack_lvl+0x241/0x360
[  233.490475][   T54]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.495703][   T54]  ? __pfx__printk+0x10/0x10
[  233.500344][   T54]  ? __kmalloc_cache_noprof+0x243/0x390
[  233.505930][   T54]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  233.511249][   T54]  sysfs_create_dir_ns+0x2ce/0x3a0
[  233.516416][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  233.522084][   T54]  kobject_add_internal+0x435/0x8d0
[  233.527322][   T54]  kobject_add+0x152/0x220
[  233.531766][   T54]  ? preempt_schedule_thunk+0x1a/0x30
[  233.537167][   T54]  ? device_add+0x3e7/0xbf0
[  233.541714][   T54]  ? __pfx_kobject_add+0x10/0x10
[  233.546769][   T54]  ? _raw_spin_unlock+0x3e/0x50
[  233.551662][   T54]  ? get_device_parent+0x165/0x410
[  233.556813][   T54]  device_add+0x4e5/0xbf0
[  233.561207][   T54]  hci_conn_add_sysfs+0xe8/0x200
[  233.566240][   T54]  le_conn_complete_evt+0xc9f/0x12e0
[  233.571589][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  233.577355][   T54]  ? irqentry_exit+0x63/0x90
[  233.582007][   T54]  ? skb_pull_data+0x112/0x230
[  233.586815][   T54]  hci_le_conn_complete_evt+0x18c/0x420
[  233.592409][   T54]  hci_event_packet+0xa55/0x1540
[  233.597386][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  233.602712][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[  233.608125][   T54]  ? hci_send_to_monitor+0xd8/0x7f0
[  233.613364][   T54]  ? kcov_remote_start+0x97/0x7d0
[  233.618433][   T54]  hci_rx_work+0x3df/0xdd0
[  233.622891][   T54]  ? process_scheduled_works+0x976/0x1850
[  233.628674][   T54]  process_scheduled_works+0xa63/0x1850
[  233.634316][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  233.640358][   T54]  ? assign_work+0x364/0x3d0
[  233.644995][   T54]  worker_thread+0x870/0xd30
[  233.649653][   T54]  ? __kthread_parkme+0x169/0x1d0
[  233.654726][   T54]  ? __pfx_worker_thread+0x10/0x10
[  233.659884][   T54]  kthread+0x2f0/0x390
[  233.663986][   T54]  ? __pfx_worker_thread+0x10/0x10
[  233.669138][   T54]  ? __pfx_kthread+0x10/0x10
[  233.673758][   T54]  ret_from_fork+0x4b/0x80
[  233.678204][   T54]  ? __pfx_kthread+0x10/0x10
[  233.682824][   T54]  ret_from_fork_asm+0x1a/0x30
[  233.687650][   T54]  </TASK>
[  233.808849][   T54] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  233.827602][   T54] Bluetooth: hci5: failed to register connection device
[  233.859955][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'.
[  233.929318][ T5318] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  233.950149][ T5318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.958315][ T5318] usb 4-1: Product: syz
[  233.962505][ T5318] usb 4-1: Manufacturer: syz
[  233.967161][ T5318] usb 4-1: SerialNumber: syz
[  234.007749][ T5318] usb 4-1: config 0 descriptor??
[  234.036526][ T5318] smsc95xx v2.0.0
[  234.450489][ T5318] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  234.471283][ T5318] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  234.594551][   T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  234.784832][   T25] usb 3-1: Using ep0 maxpacket: 8
[  234.798702][   T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  234.814557][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.833111][   T25] usb 3-1: Product: syz
[  234.843267][   T25] usb 3-1: Manufacturer: syz
[  234.853453][   T25] usb 3-1: SerialNumber: syz
[  234.866309][   T25] usb 3-1: config 0 descriptor??
[  235.085012][   T25] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  235.836510][ T5318] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  235.847787][ T5318] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61
[  235.990329][ T7731] orangefs_mount: mount request failed with -4
[  236.106403][   T25] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  236.809750][ T7758] syzkaller0: entered promiscuous mode
[  236.830775][ T7758] syzkaller0: entered allmulticast mode
[  236.936956][   T25] usb 4-1: USB disconnect, device number 9
[  237.461395][ T7324] usb 3-1: USB disconnect, device number 19
[  240.671675][ T7794] Falling back ldisc for ptm0.
[  242.041845][ T7802] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  242.051790][ T7801] netlink: 'syz.1.663': attribute type 10 has an invalid length.
[  242.059672][ T7802] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  242.137622][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'.
[  242.158727][ T7801] team0: entered promiscuous mode
[  242.163793][ T7801] team_slave_0: entered promiscuous mode
[  242.183703][ T7801] team_slave_1: entered promiscuous mode
[  242.204227][ T7801] team0: entered allmulticast mode
[  242.210861][ T7801] team_slave_0: entered allmulticast mode
[  242.217104][ T7801] team_slave_1: entered allmulticast mode
[  242.223585][ T7801] bridge0: port 3(team0) entered blocking state
[  242.264679][ T7801] bridge0: port 3(team0) entered disabled state
[  242.272791][ T7801] bridge0: port 3(team0) entered blocking state
[  242.279563][ T7801] bridge0: port 3(team0) entered forwarding state
[  243.206153][ T7841] 9pnet_virtio: no channels available for device syz
[  243.378399][ T7841] IPVS: stopping master sync thread 7842 ...
[  243.448409][ T7845] ./file0: Can't lookup blockdev
[  243.737889][ T7826] infiniband syz1: set active
[  243.745334][ T7826] infiniband syz1: added bond_slave_1
[  243.752975][ T7826] syz1: rxe_create_cq: returned err = -12
[  243.785687][ T7826] infiniband syz1: Couldn't create ib_mad CQ
[  243.791925][ T7826] infiniband syz1: Couldn't open port 1
[  243.884285][ T7826] RDS/IB: syz1: added
[  243.892027][ T7826] smc: adding ib device syz1 with port count 1
[  243.906757][ T7826] smc:    ib device syz1 port 1 has pnetid 
[  244.193274][ T5318] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  244.380109][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  244.398223][ T5318] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  244.409654][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.437179][ T5318] usb 2-1: config 0 descriptor??
[  244.667897][ T5318] usb 2-1: USB disconnect, device number 8
[  245.648340][   T54] Bluetooth: hci0: unexpected event for opcode 0x0428
[  245.794623][   T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  245.834581][  T938] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  245.967039][   T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  245.982415][   T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  246.015809][  T938] usb 3-1: Using ep0 maxpacket: 8
[  246.024692][   T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  246.041928][  T938] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  246.053537][  T938] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  246.094914][  T938] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  246.145048][  T938] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.163881][   T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  246.173406][   T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  246.194544][   T25] usb 5-1: Product: syz
[  246.198772][   T25] usb 5-1: Manufacturer: syz
[  246.201520][  T938] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  246.244503][  T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.255708][   T25] cdc_wdm 5-1:1.0: skipping garbage
[  246.260967][   T25] cdc_wdm 5-1:1.0: skipping garbage
[  246.266308][   T25] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  246.498304][    T8] usb 5-1: USB disconnect, device number 9
[  246.538828][  T938] usb 3-1: GET_CAPABILITIES returned 0
[  246.558028][  T938] usbtmc 3-1:16.0: can't read capabilities
[  248.836633][ T7901] orangefs_mount: mount request failed with -4
[  249.488751][ T7925] misc userio: No port type given on /dev/userio
[  253.807136][ T5319] usb 3-1: USB disconnect, device number 20
[  254.093150][ T7946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.706'.
[  254.229441][ T7955] SET target dimension over the limit!
[  254.496157][ T7964] KVM: debugfs: duplicate directory 7964-4
[  255.314602][ T5319] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  255.445798][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'.
[  255.484575][ T5319] usb 2-1: Using ep0 maxpacket: 8
[  255.492646][ T5319] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  255.513830][ T5319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  255.524756][ T5319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  255.542158][ T5319] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  255.562872][ T5319] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  255.573954][ T5319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.814775][ T5319] usb 2-1: GET_CAPABILITIES returned 0
[  255.820414][ T5319] usbtmc 2-1:16.0: can't read capabilities
[  255.835796][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  255.842143][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  259.083623][   T25] usb 2-1: USB disconnect, device number 9
[  260.512528][ T8053] netlink: 'syz.2.746': attribute type 4 has an invalid length.
[  260.590317][ T8059] random: crng reseeded on system resumption
[  262.073532][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'.
[  262.101265][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'.
[  262.131778][ T8071] bridge0: port 3(team0) entered disabled state
[  262.161039][ T8071] bridge_slave_1: left allmulticast mode
[  262.173451][ T8071] bridge_slave_1: left promiscuous mode
[  262.197946][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.242304][ T8071] bridge_slave_0: left allmulticast mode
[  262.250676][ T8071] bridge_slave_0: left promiscuous mode
[  262.276030][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.546637][ T8078] nbd2: detected capacity change from 0 to 12
[  262.560540][ T8078] block nbd2: NBD_DISCONNECT
[  262.566082][ T5624] block nbd2: Send control failed (result -89)
[  262.574281][ T5624] block nbd2: Request send failed, requeueing
[  262.580661][ T5318] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  262.593605][ T5624] block nbd2: Disconnected due to user request.
[  262.610636][ T5799] blk_print_req_error: 40 callbacks suppressed
[  262.610663][ T5799] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.626216][ T8078] block nbd2: Send disconnect failed -89
[  262.626552][ T5799] buffer_io_error: 40 callbacks suppressed
[  262.626567][ T5799] Buffer I/O error on dev nbd2, logical block 0, async page read
[  262.648772][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.693297][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  262.752095][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.752422][ T8077] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  262.774871][ T5318] usb 4-1: Using ep0 maxpacket: 8
[  262.801410][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  262.842478][ T5318] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  262.871951][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.894011][ T5318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  262.911081][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  262.919222][ T5318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  262.931934][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.942860][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  262.956362][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.963972][ T5318] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  262.984994][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  262.994274][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  263.004083][ T5318] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  263.016476][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  263.026617][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.036100][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  263.090136][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  263.105033][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  263.115669][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  263.124508][ T5624] ldm_validate_partition_table(): Disk read failed.
[  263.132019][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  263.141763][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  263.154132][ T5624] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  263.164843][ T5624] Buffer I/O error on dev nbd2, logical block 0, async page read
[  263.181665][ T5624] Dev nbd2: unable to read RDB block 0
[  263.190761][ T5624]  nbd2: unable to read partition table
[  263.202876][ T5624] nbd2: partition table beyond EOD, truncated
[  263.234702][ T8084] ldm_validate_partition_table(): Disk read failed.
[  263.251810][ T8084] Dev nbd2: unable to read RDB block 0
[  263.261913][ T8084]  nbd2: unable to read partition table
[  263.275202][ T8084] nbd2: partition table beyond EOD, truncated
[  263.301574][ T5318] usb 4-1: GET_CAPABILITIES returned 0
[  263.323665][ T5318] usbtmc 4-1:16.0: can't read capabilities
[  263.348193][ T5624] ldm_validate_partition_table(): Disk read failed.
[  263.418715][ T5624] Dev nbd2: unable to read RDB block 0
[  263.446501][ T5624]  nbd2: unable to read partition table
[  263.469844][ T5624] nbd2: partition table beyond EOD, truncated
[  263.942789][ T8091] 9pnet_virtio: no channels available for device syz
[  263.944814][ T8093] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0
[  264.051557][ T8091] ./file0: Can't lookup blockdev
[  264.512344][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.761'.
[  264.615312][ T8104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'.
[  264.795823][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'.
[  264.815044][ T8104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'.
[  264.825150][ T8104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'.
[  265.798524][ T8116] random: crng reseeded on system resumption
[  265.940684][ T8122] fuse: Bad value for 'fd'
[  267.774786][ T8137] mkiss: ax0: crc mode is auto.
[  268.533583][ T8136] 9pnet_virtio: no channels available for device syz
[  268.622928][ T8134] ./file0: Can't lookup blockdev
[  268.638455][ T8141] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0
[  268.914618][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  269.064629][    T9] usb 5-1: Using ep0 maxpacket: 32
[  269.072090][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.098809][    T9] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  269.148976][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.184270][    T9] usb 5-1: config 0 descriptor??
[  269.400767][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.486393][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.506098][ T5318] usb 4-1: USB disconnect, device number 10
[  269.542337][ T8140] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.774'.
[  269.611585][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  269.630408][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  269.673754][    T9] usb 5-1: USB disconnect, device number 10
[  269.768283][ T4689] ==================================================================
[  269.776424][ T4689] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0xfa/0x540
[  269.784025][ T4689] Read of size 8 at addr ffff88802f093c18 by task udevd/4689
[  269.791417][ T4689] 
[  269.793765][ T4689] CPU: 0 UID: 0 PID: 4689 Comm: udevd Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[  269.803489][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  269.813549][ T4689] Call Trace:
[  269.816843][ T4689]  <TASK>
[  269.819820][ T4689]  dump_stack_lvl+0x241/0x360
[  269.824520][ T4689]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.829739][ T4689]  ? __pfx__printk+0x10/0x10
[  269.834374][ T4689]  ? _printk+0xd5/0x120
[  269.838552][ T4689]  ? __virt_addr_valid+0x183/0x530
[  269.843666][ T4689]  ? __virt_addr_valid+0x183/0x530
[  269.848797][ T4689]  print_report+0x169/0x550
[  269.853308][ T4689]  ? __virt_addr_valid+0x183/0x530
[  269.858446][ T4689]  ? __virt_addr_valid+0x183/0x530
[  269.863567][ T4689]  ? __virt_addr_valid+0x45f/0x530
[  269.868688][ T4689]  ? __phys_addr+0xba/0x170
[  269.873213][ T4689]  ? bpf_trace_run2+0xfa/0x540
[  269.877983][ T4689]  kasan_report+0x143/0x180
[  269.882496][ T4689]  ? bpf_trace_run2+0xfa/0x540
[  269.887269][ T4689]  bpf_trace_run2+0xfa/0x540
[  269.891863][ T4689]  ? __pfx_lock_release+0x10/0x10
[  269.896892][ T4689]  ? __pfx_bpf_trace_run2+0x10/0x10
[  269.902101][ T4689]  ? syscall_exit_work+0x173/0x210
[  269.907212][ T4689]  ? __might_fault+0xaa/0x120
[  269.911887][ T4689]  ? __might_fault+0xc6/0x120
[  269.916566][ T4689]  ? syscall_exit_work+0x173/0x210
[  269.921678][ T4689]  __bpf_trace_sys_exit+0x38/0x60
[  269.926701][ T4689]  syscall_exit_work+0x1af/0x210
[  269.931640][ T4689]  syscall_exit_to_user_mode+0x279/0x370
[  269.937290][ T4689]  do_syscall_64+0x100/0x230
[  269.941885][ T4689]  ? clear_bhb_loop+0x35/0x90
[  269.946567][ T4689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.952479][ T4689] RIP: 0033:0x7fac423170a8
[  269.956901][ T4689] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
[  269.976520][ T4689] RSP: 002b:00007fffb5988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  269.984938][ T4689] RAX: 0000000000000000 RBX: 00007fac426eeae0 RCX: 00007fac423170a8
[  269.992910][ T4689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[  270.000885][ T4689] RBP: 000000000000000c R08: 00000000ffffffff R09: 0000000000000000
[  270.008855][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  270.016825][ T4689] R13: ffffffffffffffff R14: 00000000ffffffff R15: 00000000ffffffff
[  270.024809][ T4689]  </TASK>
[  270.027830][ T4689] 
[  270.030161][ T4689] Allocated by task 8148:
[  270.034491][ T4689]  kasan_save_track+0x3f/0x80
[  270.039190][ T4689]  __kasan_kmalloc+0x98/0xb0
[  270.043788][ T4689]  __kmalloc_cache_noprof+0x243/0x390
[  270.049177][ T4689]  bpf_raw_tp_link_attach+0x2a0/0x6e0
[  270.054578][ T4689]  bpf_raw_tracepoint_open+0x177/0x1f0
[  270.060049][ T4689]  __sys_bpf+0x3c0/0x810
[  270.064300][ T4689]  __x64_sys_bpf+0x7c/0x90
[  270.068722][ T4689]  do_syscall_64+0xf3/0x230
[  270.073227][ T4689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.079122][ T4689] 
[  270.081448][ T4689] Freed by task 0:
[  270.085163][ T4689]  kasan_save_track+0x3f/0x80
[  270.089855][ T4689]  kasan_save_free_info+0x40/0x50
[  270.094900][ T4689]  __kasan_slab_free+0x59/0x70
[  270.099670][ T4689]  kfree+0x1a0/0x460
[  270.103570][ T4689]  rcu_core+0xaaa/0x17a0
[  270.107812][ T4689]  handle_softirqs+0x2c5/0x980
[  270.112581][ T4689]  __irq_exit_rcu+0xf4/0x1c0
[  270.117189][ T4689]  irq_exit_rcu+0x9/0x30
[  270.121435][ T4689]  sysvec_call_function_single+0xa3/0xc0
[  270.127072][ T4689]  asm_sysvec_call_function_single+0x1a/0x20
[  270.133072][ T4689] 
[  270.135400][ T4689] Last potentially related work creation:
[  270.141112][ T4689]  kasan_save_stack+0x3f/0x60
[  270.145800][ T4689]  __kasan_record_aux_stack+0xac/0xc0
[  270.151180][ T4689]  call_rcu+0x167/0xa70
[  270.155345][ T4689]  bpf_link_release+0x78/0x90
[  270.160025][ T4689]  __fput+0x23c/0xa50
[  270.164015][ T4689]  task_work_run+0x24f/0x310
[  270.168611][ T4689]  syscall_exit_to_user_mode+0x168/0x370
[  270.174254][ T4689]  do_syscall_64+0x100/0x230
[  270.178848][ T4689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.184746][ T4689] 
[  270.187074][ T4689] The buggy address belongs to the object at ffff88802f093c00
[  270.187074][ T4689]  which belongs to the cache kmalloc-128 of size 128
[  270.201128][ T4689] The buggy address is located 24 bytes inside of
[  270.201128][ T4689]  freed 128-byte region [ffff88802f093c00, ffff88802f093c80)
[  270.214839][ T4689] 
[  270.217168][ T4689] The buggy address belongs to the physical page:
[  270.223588][ T4689] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f093
[  270.232347][ T4689] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  270.239822][ T4689] page_type: f5(slab)
[  270.243808][ T4689] raw: 00fff00000000000 ffff88801ac41a00 ffffea0001ed9700 dead000000000003
[  270.252397][ T4689] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[  270.260981][ T4689] page dumped because: kasan: bad access detected
[  270.267400][ T4689] page_owner tracks the page as allocated
[  270.273111][ T4689] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5233, tgid 5233 (syz-executor), ts 65685942405, free_ts 65289020823
[  270.292385][ T4689]  post_alloc_hook+0x1f3/0x230
[  270.297152][ T4689]  get_page_from_freelist+0x3123/0x3270
[  270.302695][ T4689]  __alloc_pages_noprof+0x292/0x710
[  270.307891][ T4689]  alloc_pages_mpol_noprof+0x3e8/0x680
[  270.313358][ T4689]  alloc_slab_page+0x6a/0x120
[  270.318036][ T4689]  allocate_slab+0x5a/0x2f0
[  270.322564][ T4689]  ___slab_alloc+0xcd1/0x14b0
[  270.327242][ T4689]  __slab_alloc+0x58/0xa0
[  270.331580][ T4689]  __kmalloc_cache_noprof+0x27b/0x390
[  270.336959][ T4689]  __hw_addr_add_ex+0x1a8/0x610
[  270.341822][ T4689]  dev_mc_add+0xa3/0x110
[  270.346088][ T4689]  igmp6_group_added+0x1a4/0x710
[  270.351035][ T4689]  __ipv6_dev_mc_inc+0x8bf/0xaa0
[  270.355980][ T4689]  ipv6_add_dev+0xe12/0x1220
[  270.360575][ T4689]  addrconf_notify+0x6a7/0x1020
[  270.365519][ T4689]  notifier_call_chain+0x19f/0x3e0
[  270.370679][ T4689] page last free pid 5231 tgid 5231 stack trace:
[  270.377002][ T4689]  free_unref_page+0xcfb/0xf20
[  270.381787][ T4689]  __put_partials+0xeb/0x130
[  270.386380][ T4689]  put_cpu_partial+0x17c/0x250
[  270.391147][ T4689]  __slab_free+0x2ea/0x3d0
[  270.395570][ T4689]  qlist_free_all+0x9a/0x140
[  270.400166][ T4689]  kasan_quarantine_reduce+0x14f/0x170
[  270.405654][ T4689]  __kasan_slab_alloc+0x23/0x80
[  270.410510][ T4689]  __kmalloc_cache_noprof+0x1d9/0x390
[  270.415891][ T4689]  __netdev_adjacent_dev_insert+0x157/0x8d0
[  270.421791][ T4689]  __netdev_upper_dev_link+0x404/0x670
[  270.427250][ T4689]  netdev_master_upper_dev_link+0xb1/0x100
[  270.433063][ T4689]  bond_master_upper_dev_link+0x299/0x430
[  270.438784][ T4689]  bond_enslave+0x1e62/0x3ab0
[  270.443462][ T4689]  do_setlink+0xe73/0x41f0
[  270.447879][ T4689]  rtnl_newlink+0x180d/0x20a0
[  270.452554][ T4689]  rtnetlink_rcv_msg+0x73f/0xcf0
[  270.457490][ T4689] 
[  270.459825][ T4689] Memory state around the buggy address:
[  270.465455][ T4689]  ffff88802f093b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.473512][ T4689]  ffff88802f093b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  270.481568][ T4689] >ffff88802f093c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.489627][ T4689]                             ^
[  270.494476][ T4689]  ffff88802f093c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  270.502537][ T4689]  ffff88802f093d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.510597][ T4689] ==================================================================
[  270.523716][ T4689] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  270.530951][ T4689] CPU: 0 UID: 0 PID: 4689 Comm: udevd Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[  270.540697][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  270.550782][ T4689] Call Trace:
[  270.554093][ T4689]  <TASK>
[  270.557054][ T4689]  dump_stack_lvl+0x241/0x360
[  270.561765][ T4689]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.567001][ T4689]  ? __pfx__printk+0x10/0x10
[  270.571638][ T4689]  ? lock_release+0xbf/0xa30
[  270.576258][ T4689]  ? vscnprintf+0x5d/0x90
[  270.580623][ T4689]  panic+0x349/0x880
[  270.584575][ T4689]  ? check_panic_on_warn+0x21/0xb0
[  270.589724][ T4689]  ? __pfx_panic+0x10/0x10
[  270.594179][ T4689]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  270.600116][ T4689]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  270.606133][ T4689]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.612510][ T4689]  ? print_report+0x502/0x550
[  270.617234][ T4689]  check_panic_on_warn+0x86/0xb0
[  270.622230][ T4689]  ? bpf_trace_run2+0xfa/0x540
[  270.627037][ T4689]  end_report+0x77/0x160
[  270.631316][ T4689]  kasan_report+0x154/0x180
[  270.635859][ T4689]  ? bpf_trace_run2+0xfa/0x540
[  270.640665][ T4689]  bpf_trace_run2+0xfa/0x540
[  270.645292][ T4689]  ? __pfx_lock_release+0x10/0x10
[  270.650345][ T4689]  ? __pfx_bpf_trace_run2+0x10/0x10
[  270.655584][ T4689]  ? syscall_exit_work+0x173/0x210
[  270.660729][ T4689]  ? __might_fault+0xaa/0x120
[  270.665438][ T4689]  ? __might_fault+0xc6/0x120
[  270.670144][ T4689]  ? syscall_exit_work+0x173/0x210
[  270.675287][ T4689]  __bpf_trace_sys_exit+0x38/0x60
[  270.680344][ T4689]  syscall_exit_work+0x1af/0x210
[  270.685307][ T4689]  syscall_exit_to_user_mode+0x279/0x370
[  270.690980][ T4689]  do_syscall_64+0x100/0x230
[  270.695611][ T4689]  ? clear_bhb_loop+0x35/0x90
[  270.700322][ T4689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.706258][ T4689] RIP: 0033:0x7fac423170a8
[  270.710702][ T4689] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
[  270.730358][ T4689] RSP: 002b:00007fffb5988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  270.738815][ T4689] RAX: 0000000000000000 RBX: 00007fac426eeae0 RCX: 00007fac423170a8
[  270.746823][ T4689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[  270.754830][ T4689] RBP: 000000000000000c R08: 00000000ffffffff R09: 0000000000000000
[  270.762835][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  270.770832][ T4689] R13: ffffffffffffffff R14: 00000000ffffffff R15: 00000000ffffffff
[  270.778816][ T4689]  </TASK>
[  270.782196][ T4689] Kernel Offset: disabled
[  270.786522][ T4689] Rebooting in 86400 seconds..