last executing test programs:

5m26.858688439s ago: executing program 3 (id=201):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x6a802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)

5m26.609647539s ago: executing program 3 (id=205):
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
socket(0x1d, 0x2, 0x6)
io_uring_setup(0x6503, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f0000000580)=""/259, 0x103, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xe4ffffff, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r5, 0x40187013, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x2}})
ptrace$getregset(0x4205, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='ecryptfs\x00', 0x1005b, 0x0)

5m24.134087405s ago: executing program 3 (id=217):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="5000000010003b150000210000", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x2, 0x1})
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)

5m23.016561971s ago: executing program 3 (id=219):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
getpriority(0x2, 0x0)

5m21.031617454s ago: executing program 3 (id=228):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r3 = socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0xa}, &(0x7f0000000080)=0x7fffffff, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x4, 0x8, 0x4}}], 0x58}, 0x0)
ioctl(r1, 0x6, &(0x7f0000000140)="d839d6f6ea3f405d11e89eba714b7010932e9d")
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xffd, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001980)=ANY=[@ANYRESOCT=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r7 = dup2(r4, r4)
connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
r8 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0xa1, 0x16, 0xd, 0x4}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

5m20.929347725s ago: executing program 3 (id=229):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @local}], 0x10)
sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
shutdown(0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002fc0)=""/102400, 0x19000)
socket(0x10, 0x803, 0x0)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c", 0xd, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/72, 0x48, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040))
r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000000))
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x5, 0x1ff})
mknodat(r5, &(0x7f0000000d00)='./file0/file0\x00', 0x2, 0xf)
statx(r5, &(0x7f0000000200)='./file0\x00', 0x400, 0x10, &(0x7f0000000240))
syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140))

5m5.552779299s ago: executing program 32 (id=229):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @local}], 0x10)
sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
shutdown(0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002fc0)=""/102400, 0x19000)
socket(0x10, 0x803, 0x0)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c", 0xd, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/72, 0x48, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040))
r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000000))
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x5, 0x1ff})
mknodat(r5, &(0x7f0000000d00)='./file0/file0\x00', 0x2, 0xf)
statx(r5, &(0x7f0000000200)='./file0\x00', 0x400, 0x10, &(0x7f0000000240))
syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140))

1m31.972244882s ago: executing program 4 (id=913):
fsopen(0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x520, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0xa, 0x1, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd)
r6 = dup(r5)
write$FUSE_INIT(r6, &(0x7f0000002100)={0x50, 0xffffffffffffffda}, 0x50)
read$FUSE(r6, &(0x7f000001aa80)={0x2020}, 0x2020)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040040)

1m27.775827857s ago: executing program 4 (id=916):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, 0x0, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x2)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x1)

1m25.460493335s ago: executing program 4 (id=923):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x100006)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
userfaultfd(0x80001)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, 0x0}, 0x20)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)

1m24.766337511s ago: executing program 4 (id=928):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000040"])

1m19.37138129s ago: executing program 4 (id=942):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
r3 = gettid()
migrate_pages(r3, 0x1000, &(0x7f0000000300)=0x9, &(0x7f0000000500)=0x9)
ioctl$I2C_SMBUS(r2, 0x720, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)={'c', ' *:* ', 'rwm\x00'}, 0xa)

1m18.313722123s ago: executing program 4 (id=945):
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)

1m2.974456965s ago: executing program 33 (id=945):
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)

9.097261241s ago: executing program 0 (id=1112):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xa, 0x42)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000004c0)={{0x9, 0x0, 0x9, 0x58, '\x00', 0x1}, 0x0, [0x0, 0x80000000, 0x81, 0x3, 0x1, 0x10, 0x0, 0x9, 0xfb, 0xf, 0x12b, 0x3, 0x2, 0xff, 0x1ff, 0x3, 0x9, 0xc056, 0xfffffffffffffffd, 0x9, 0x7, 0x5, 0xfff, 0x8000000000000000, 0x3, 0x7, 0xffffffffffffffff, 0xf25, 0x0, 0x3ff, 0x5, 0x12de, 0x6, 0x9, 0xffffffff, 0x8000000000000000, 0x7, 0xffffffffffffffff, 0xa3d8, 0x5, 0x9, 0x9, 0x6, 0xfed, 0x3, 0x10, 0x9, 0x6, 0x9, 0x9, 0x80000000, 0x2, 0x6, 0xffffffff, 0x3, 0x7, 0xf, 0xad7, 0x100, 0x0, 0x3, 0x2, 0xa87, 0x4, 0x1ff, 0x9, 0xed7, 0x7, 0xdcb, 0x9, 0x7, 0x4, 0x2, 0x1, 0x8000000000000000, 0x0, 0x8001, 0x7, 0x58, 0x401, 0x6, 0xca37, 0x2f54, 0x101, 0x5, 0xee, 0x4, 0x8, 0x1ff, 0xa95, 0xd8b, 0x5, 0x7, 0x9, 0x6, 0x6b1f, 0xe1c741d, 0x0, 0x8, 0x1, 0x7, 0x4, 0xc, 0x8000000000000000, 0x40, 0x6, 0x5, 0x1, 0x8, 0x8a4, 0x19e, 0x7, 0xc, 0x0, 0x9a9, 0x9, 0x4, 0x1, 0x7, 0x9, 0x5, 0x3ff, 0x8000000000000000, 0x0, 0x3, 0x800, 0x5, 0x8]})
rseq(0x0, 0x0, 0x0, 0x0)
membarrier(0x4, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r2, 0x4b48, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_mreqsrc(r3, 0x0, 0xf, &(0x7f0000000000)={@remote, @loopback, @local}, 0xc)
bind$inet(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x20, r6, 0x1, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x4000040)

8.501750261s ago: executing program 2 (id=1116):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f000085b000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r0, 0xfffff000)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
open$dir(0x0, 0x6042, 0x80)
ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000040)={0x1900})
keyctl$read(0x1d, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16], 0x48)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {0x0, r4, 0x4}}, 0x18)
socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

8.430868752s ago: executing program 5 (id=1117):
r0 = socket$inet(0x2, 0x2, 0x1)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = fcntl$getown(r0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e1", 0x60}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196", 0xf6}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)}}], 0x3, 0x0)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

8.389479652s ago: executing program 0 (id=1118):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x5a, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)

8.340172651s ago: executing program 6 (id=1119):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12)

8.128856236s ago: executing program 5 (id=1120):
socket$igmp6(0xa, 0x3, 0x2)
socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
socket(0x10, 0x80002, 0x0)
epoll_create(0x3)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pptp(0x18, 0x1, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)

7.516605116s ago: executing program 0 (id=1121):
socket$nl_route(0x10, 0x3, 0x0)
r0 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000003c0)={0x0, "84fd025abfd2a46750d23c738ae3dc0c0c9b6d51b04ca1d812e9b5aea4d2e68f782d23b0c83892d9824fa5b510db070000002963416a106ae451a219686700", 0x4}, 0x48, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000001050500000000000000000a0000003c0002802c00018014000300ff0100feff000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000"], 0x50}}, 0x200080d1)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
sendmsg$inet(0xffffffffffffffff, &(0x7f0000010340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
read$FUSE(r4, &(0x7f0000016600)={0x2020}, 0x2020)

7.2988196s ago: executing program 6 (id=1122):
ioperm(0x0, 0xfffc, 0x8005)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
msgsnd(0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x70)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000007c0), &(0x7f0000000880)=0x8)

7.211960341s ago: executing program 1 (id=1123):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x44}}, 0x0)

7.204779323s ago: executing program 2 (id=1124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
open_by_handle_at(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
write$tun(r0, &(0x7f00000004c0)={@val={0x6}, @void, @eth={@empty, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0xc, 0x4, 0x2, 0xe, 0x3e, 0x68, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, {[@noop, @end, @generic={0x88, 0xb, "766e03465f93d2066a"}, @rr={0x7, 0x7, 0x43, [@private=0xa010101]}, @lsrr={0x83, 0x7, 0x3b, [@empty]}]}}, "587bc4ab87a89b03cbf0bd4ea85e"}}}}}, 0x58)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7f, 0x39, 0x8003, 0x2, 0x10, 0x2, 0x1ff, 0x80000001, <r6=>0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000050000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r8}, &(0x7f00000008c0), &(0x7f0000000900)=r7}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r6, @in={{0x2, 0x4e24, @local}}, 0xfffa, 0x8}, 0x90)
r9 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETSEL(r9, 0x4b68, 0x0)

7.130305513s ago: executing program 5 (id=1125):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00'/15, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRESHEX], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r6 = dup(r5)
write$evdev(r6, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1fe)
fsopen(0x0, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

5.910765227s ago: executing program 0 (id=1126):
fsopen(0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

5.491534799s ago: executing program 0 (id=1127):
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e73"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r0, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]})
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000980)='erofs\x00', 0xc, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)

5.448068142s ago: executing program 6 (id=1128):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0xa}, &(0x7f0000000080)=0x7fffffff, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x4, 0x8, 0x4}}], 0x58}, 0x0)
ioctl(r1, 0x6, &(0x7f0000000140)="d839d6f6ea3f405d11e89eba714b7010932e9d")
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xffd, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r6 = dup2(r3, r3)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
r7 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0xa1, 0x16, 0xd, 0x4}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

5.130453992s ago: executing program 1 (id=1129):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x0)

4.943260683s ago: executing program 6 (id=1130):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)

4.79313012s ago: executing program 2 (id=1131):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb70300000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, r6)

4.765255145s ago: executing program 1 (id=1132):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e8a3785200"/18], 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000003340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}, {{&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x4000804)

4.736984187s ago: executing program 6 (id=1133):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000df03000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.243183129s ago: executing program 2 (id=1134):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

2.128153462s ago: executing program 1 (id=1135):
socket$igmp6(0xa, 0x3, 0x2)
socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
socket(0x10, 0x80002, 0x0)
epoll_create(0x3)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pptp(0x18, 0x1, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)

2.089268113s ago: executing program 5 (id=1136):
socket$nl_route(0x10, 0x3, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000003c0)={0x0, "84fd025abfd2a46750d23c738ae3dc0c0c9b6d51b04ca1d812e9b5aea4d2e68f782d23b0c83892d9824fa5b510db070000002963416a106ae451a219686700", 0x4}, 0x48, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000001050500000000000000000a0000003c0002802c00018014000300ff0100feff000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000"], 0x50}}, 0x200080d1)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
sendmsg$inet(0xffffffffffffffff, &(0x7f0000010340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
read$FUSE(r4, &(0x7f0000016600)={0x2020}, 0x2020)

2.027809068s ago: executing program 6 (id=1137):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
read$msr(r3, &(0x7f0000000400)=""/228, 0xe4)

1.955015471s ago: executing program 2 (id=1138):
ioperm(0x0, 0xfffc, 0x8005)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
msgsnd(0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x70)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000007c0), &(0x7f0000000880)=0x8)

1.76403014s ago: executing program 1 (id=1139):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x1000)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1.048833966s ago: executing program 5 (id=1140):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0xa}, &(0x7f0000000080)=0x7fffffff, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x4, 0x8, 0x4}}], 0x58}, 0x0)
ioctl(r1, 0x6, &(0x7f0000000140)="d839d6f6ea3f405d11e89eba714b7010932e9d")
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xffd, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001980)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r6 = dup2(r3, r3)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
r7 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0xa1, 0x16, 0xd, 0x4}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

392.111886ms ago: executing program 1 (id=1141):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
socket$inet6(0xa, 0x5, 0x0)
inotify_init1(0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_STOP(r4, 0x5403)
ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40186f40, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x6612, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

341.929259ms ago: executing program 5 (id=1142):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
open_by_handle_at(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
write$tun(r0, &(0x7f00000004c0)={@val={0x6}, @void, @eth={@empty, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0xc, 0x4, 0x2, 0xe, 0x3e, 0x68, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, {[@noop, @end, @generic={0x88, 0xb, "766e03465f93d2066a"}, @rr={0x7, 0x7, 0x43, [@private=0xa010101]}, @lsrr={0x83, 0x7, 0x3b, [@empty]}]}}, "587bc4ab87a89b03cbf0bd4ea85e"}}}}}, 0x58)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7f, 0x39, 0x8003, 0x2, 0x10, 0x2, 0x1ff, 0x80000001, <r6=>0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000050000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r8}, &(0x7f00000008c0), &(0x7f0000000900)=r7}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r6, @in={{0x2, 0x4e24, @local}}, 0xfffa, 0x8}, 0x90)
r9 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETSEL(r9, 0x4b68, 0x0)

212.090302ms ago: executing program 2 (id=1143):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)

0s ago: executing program 0 (id=1144):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb70300000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, r6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts.
[   54.630757][ T5817] cgroup: Unknown subsys name 'net'
[   54.738498][ T5817] cgroup: Unknown subsys name 'cpuset'
[   54.747705][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.044320][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.322112][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.356063][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.361464][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.364358][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.371834][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.379815][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.392996][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.401183][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.408901][   T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   58.416478][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.422211][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.424401][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.435500][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.446006][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.451401][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   58.453633][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   58.460509][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.467821][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.551863][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   58.561202][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   58.570618][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   58.579359][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   58.588907][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   58.590036][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   58.603811][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   58.611347][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   58.612209][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   58.626557][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   58.627887][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   58.642354][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   58.918258][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   59.097875][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   59.107485][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   59.179314][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   59.193842][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   59.203260][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.210740][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.218475][ T5827] bridge_slave_0: entered allmulticast mode
[   59.225406][ T5827] bridge_slave_0: entered promiscuous mode
[   59.234321][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.241631][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.248940][ T5827] bridge_slave_1: entered allmulticast mode
[   59.256013][ T5827] bridge_slave_1: entered promiscuous mode
[   59.341536][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.380608][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.403217][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.410548][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.419402][ T5845] bridge_slave_0: entered allmulticast mode
[   59.426277][ T5845] bridge_slave_0: entered promiscuous mode
[   59.459759][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.466972][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.474185][ T5845] bridge_slave_1: entered allmulticast mode
[   59.481134][ T5845] bridge_slave_1: entered promiscuous mode
[   59.495584][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.502761][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.510166][ T5834] bridge_slave_0: entered allmulticast mode
[   59.517064][ T5834] bridge_slave_0: entered promiscuous mode
[   59.552069][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.559844][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.567319][ T5834] bridge_slave_1: entered allmulticast mode
[   59.573912][ T5834] bridge_slave_1: entered promiscuous mode
[   59.592802][ T5827] team0: Port device team_slave_0 added
[   59.610951][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.638280][ T5827] team0: Port device team_slave_1 added
[   59.644307][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.652037][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.659648][ T5842] bridge_slave_0: entered allmulticast mode
[   59.667200][ T5842] bridge_slave_0: entered promiscuous mode
[   59.674018][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.681283][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.688715][ T5831] bridge_slave_0: entered allmulticast mode
[   59.695555][ T5831] bridge_slave_0: entered promiscuous mode
[   59.704868][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.731579][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.738834][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.746208][ T5842] bridge_slave_1: entered allmulticast mode
[   59.752822][ T5842] bridge_slave_1: entered promiscuous mode
[   59.759607][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.767552][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.774756][ T5831] bridge_slave_1: entered allmulticast mode
[   59.781690][ T5831] bridge_slave_1: entered promiscuous mode
[   59.805936][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.853217][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.870870][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.878125][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.904622][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.920015][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.931335][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.944219][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.956893][ T5845] team0: Port device team_slave_0 added
[   59.973800][ T5834] team0: Port device team_slave_0 added
[   59.981251][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.988390][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.015246][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.028013][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.061417][ T5845] team0: Port device team_slave_1 added
[   60.068630][ T5834] team0: Port device team_slave_1 added
[   60.122811][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.130072][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.156701][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.171856][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.180032][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.207846][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.221736][ T5842] team0: Port device team_slave_0 added
[   60.230271][ T5842] team0: Port device team_slave_1 added
[   60.239229][ T5831] team0: Port device team_slave_0 added
[   60.247641][ T5831] team0: Port device team_slave_1 added
[   60.310991][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.320474][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.346723][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.358778][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.365829][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.391911][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.406574][ T5827] hsr_slave_0: entered promiscuous mode
[   60.413099][ T5827] hsr_slave_1: entered promiscuous mode
[   60.420440][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.427581][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.453813][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.465605][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.472586][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.499745][ T5144] Bluetooth: hci1: command tx timeout
[   60.503649][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.518644][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.525966][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.552116][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.565081][ T5144] Bluetooth: hci0: command tx timeout
[   60.575088][ T5144] Bluetooth: hci2: command tx timeout
[   60.595519][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.602514][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.628910][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.659947][ T5845] hsr_slave_0: entered promiscuous mode
[   60.668106][ T5845] hsr_slave_1: entered promiscuous mode
[   60.674616][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.682762][ T5845] Cannot create hsr debugfs directory
[   60.692105][ T5834] hsr_slave_0: entered promiscuous mode
[   60.698585][ T5834] hsr_slave_1: entered promiscuous mode
[   60.704613][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.712415][ T5834] Cannot create hsr debugfs directory
[   60.725284][ T5144] Bluetooth: hci3: command tx timeout
[   60.725291][ T5833] Bluetooth: hci4: command tx timeout
[   60.807392][ T5831] hsr_slave_0: entered promiscuous mode
[   60.813756][ T5831] hsr_slave_1: entered promiscuous mode
[   60.820935][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.829044][ T5831] Cannot create hsr debugfs directory
[   60.856168][ T5842] hsr_slave_0: entered promiscuous mode
[   60.862543][ T5842] hsr_slave_1: entered promiscuous mode
[   60.869040][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.876732][ T5842] Cannot create hsr debugfs directory
[   61.179041][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.192073][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.204549][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.216654][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.267893][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.278929][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.291097][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.304661][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.374806][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.388737][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.400928][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.410163][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.503489][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   61.513614][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   61.537472][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.560668][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   61.573815][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   61.604795][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   61.622080][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   61.632130][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   61.653327][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.664355][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   61.699197][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   61.715408][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   61.755350][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.762609][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.773196][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.780440][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.792110][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.799248][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.813227][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.820569][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.898803][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.980132][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   62.017649][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.024767][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.040886][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.048070][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.082951][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.101592][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.131738][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   62.201818][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.209008][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.219893][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.227096][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.239467][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   62.311554][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.318761][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.334709][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.341989][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.367093][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.469150][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.493281][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.565430][ T5833] Bluetooth: hci1: command tx timeout
[   62.598692][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.623465][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.645261][ T5833] Bluetooth: hci2: command tx timeout
[   62.646422][ T5144] Bluetooth: hci0: command tx timeout
[   62.679943][ T5845] veth0_vlan: entered promiscuous mode
[   62.723453][ T5827] veth0_vlan: entered promiscuous mode
[   62.752150][ T5827] veth1_vlan: entered promiscuous mode
[   62.771761][ T5845] veth1_vlan: entered promiscuous mode
[   62.806464][ T5144] Bluetooth: hci4: command tx timeout
[   62.806695][ T5833] Bluetooth: hci3: command tx timeout
[   62.861364][ T5834] veth0_vlan: entered promiscuous mode
[   62.881396][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.896433][ T5845] veth0_macvtap: entered promiscuous mode
[   62.908148][ T5845] veth1_macvtap: entered promiscuous mode
[   62.917962][ T5827] veth0_macvtap: entered promiscuous mode
[   62.931920][ T5834] veth1_vlan: entered promiscuous mode
[   62.947376][ T5827] veth1_macvtap: entered promiscuous mode
[   62.976642][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.988712][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.011786][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.022266][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.032200][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.041139][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.071978][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.083531][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.095303][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.127881][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.139207][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.150498][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.160698][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.171215][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.180285][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.189375][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.201269][ T5831] veth0_vlan: entered promiscuous mode
[   63.266893][ T5831] veth1_vlan: entered promiscuous mode
[   63.282020][ T5842] veth0_vlan: entered promiscuous mode
[   63.292633][ T5834] veth0_macvtap: entered promiscuous mode
[   63.319800][ T5834] veth1_macvtap: entered promiscuous mode
[   63.341597][ T5842] veth1_vlan: entered promiscuous mode
[   63.360857][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.377669][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.415530][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.431995][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.442422][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.453829][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.467317][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.497377][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.508805][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.518929][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.530017][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.541055][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.553273][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.561899][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.562285][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.570863][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.587030][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.600402][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.611285][ T5831] veth0_macvtap: entered promiscuous mode
[   63.632946][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.641934][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.651229][ T5831] veth1_macvtap: entered promiscuous mode
[   63.664106][ T5842] veth0_macvtap: entered promiscuous mode
[   63.682759][ T5842] veth1_macvtap: entered promiscuous mode
[   63.746622][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.750417][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.771323][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.783394][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.784404][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.800846][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.811389][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.821309][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.831818][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.842996][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.866181][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.876918][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.886848][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.897348][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.907505][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.918322][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.929710][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.939649][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.948617][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.957459][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.966338][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.981055][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.991806][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.001746][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.012339][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.022424][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.032933][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.042842][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.053616][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.065793][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.099910][ T5912] atomic_op ffff888027ef7198 conn xmit_atomic 0000000000000000
[   64.124196][ T5912] usb usb5: usbfs: process 5912 (syz.1.2) did not claim interface 4 before use
[   64.125626][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.152890][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.165742][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.176932][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.192202][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.204654][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.215448][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.226147][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.238201][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.262546][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.276529][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.349805][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.360605][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.370284][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.379533][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.460969][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.474975][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.525828][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   64.557077][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.602084][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.635140][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.646801][ T5833] Bluetooth: hci1: command tx timeout
[   64.654510][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.717811][ T5881] usb 2-1: Using ep0 maxpacket: 16
[   64.764460][ T5833] Bluetooth: hci0: command tx timeout
[   64.775301][ T5833] Bluetooth: hci2: command tx timeout
[   64.957870][ T5833] Bluetooth: hci3: command tx timeout
[   64.978254][ T5833] Bluetooth: hci4: command tx timeout
[   65.237565][ T5881] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[   65.328849][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.337371][ T5881] usb 2-1: Product: syz
[   65.341578][ T5881] usb 2-1: Manufacturer: syz
[   65.347442][ T5881] usb 2-1: SerialNumber: syz
[   65.378834][ T5881] usb 2-1: config 0 descriptor??
[   65.430519][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.439000][ T5881] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[   65.445655][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.482635][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.516651][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.564960][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   65.835795][ T5930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'.
[   65.951639][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   66.156467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   66.188234][ T5881] gp8psk: usb in 128 operation failed.
[   66.223512][ T5881] gp8psk: usb in 137 operation failed.
[   66.229442][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   66.240703][ T5881] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[   66.250548][ T5881] usb 2-1: media controller created
[   66.270449][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   66.358078][ T5881] gp8psk_fe: Frontend revision 1 attached
[   66.366026][ T5881] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[   66.375710][ T5881] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[   66.451360][ T5938] netlink: zone id is out of range
[   66.457518][ T5938] netlink: zone id is out of range
[   66.462671][ T5938] netlink: zone id is out of range
[   66.468702][ T5938] netlink: zone id is out of range
[   66.474631][ T5938] netlink: zone id is out of range
[   66.482904][ T5938] netlink: zone id is out of range
[   66.490462][ T5938] netlink: zone id is out of range
[   66.496282][ T5938] netlink: zone id is out of range
[   66.501720][ T5938] netlink: zone id is out of range
[   66.511822][ T5938] netlink: zone id is out of range
[   66.542023][ T5881] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[   66.553104][ T5881] gp8psk: found Genpix USB device pID = 201 (hex)
[   66.678080][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.725270][ T5144] Bluetooth: hci1: command tx timeout
[   66.768003][ T5940] ipvlan2: entered promiscuous mode
[   66.780172][   T25] usb 2-1: USB disconnect, device number 2
[   66.817809][ T5144] Bluetooth: hci2: command tx timeout
[   66.818117][ T5833] Bluetooth: hci0: command tx timeout
[   66.975626][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   67.056795][ T5833] Bluetooth: hci4: command tx timeout
[   67.062447][ T5833] Bluetooth: hci3: command tx timeout
[   67.078026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   67.101597][   T25] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[   67.783740][ T5957] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET)
[   67.855356][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.204440][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   68.306880][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   68.388794][ T5952] netdevsim netdevsim1: Direct firmware load for printk failed with error -2
[   68.397833][ T5952] netdevsim netdevsim1: Falling back to sysfs fallback for: printk
[   68.885332][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   68.885393][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   69.111217][ T5965] syz.1.15: attempt to access beyond end of device
[   69.111217][ T5965] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[   69.160281][ T5965] syz.1.15: attempt to access beyond end of device
[   69.160281][ T5965] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0
[   69.187101][ T5965] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   69.201088][ T5965] syz.1.15: attempt to access beyond end of device
[   69.201088][ T5965] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0
[   69.244229][ T5965] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   69.256440][ T5965] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[   69.271646][ T5965] UDF-fs: Scanning with blocksize 512 failed
[   69.534144][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.125102][ T5878] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   70.205652][ T5965] syz.1.15: attempt to access beyond end of device
[   70.205652][ T5965] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[   70.220750][ T5965] syz.1.15: attempt to access beyond end of device
[   70.220750][ T5965] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[   70.284660][ T5965] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   70.321246][ T5965] syz.1.15: attempt to access beyond end of device
[   70.321246][ T5965] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[   70.424776][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short
[   70.437013][ T5878] usb 1-1: not running at top speed; connect to a high speed hub
[   70.541251][ T5965] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   70.573285][ T5878] usb 1-1: config 129 has an invalid interface number: 28 but max is 0
[   70.585037][ T5965] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[   71.306752][ T5878] usb 1-1: config 129 has no interface number 0
[   71.316803][ T5878] usb 1-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[   71.329801][ T5878] usb 1-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[   71.341317][ T5878] usb 1-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   71.393885][ T5965] UDF-fs: Scanning with blocksize 1024 failed
[   71.434571][ T5965] syz.1.15: attempt to access beyond end of device
[   71.434571][ T5965] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[   71.491720][ T5965] syz.1.15: attempt to access beyond end of device
[   71.491720][ T5965] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[   71.515499][ T5965] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   71.630908][ T5991] random: crng reseeded on system resumption
[   71.691326][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[   71.745131][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[   71.836341][ T5878] usb 1-1: config 129 interface 28 has no altsetting 0
[   71.902021][ T5965] syz.1.15: attempt to access beyond end of device
[   71.902021][ T5965] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[   71.954055][ T5878] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[   72.025561][ T5965] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   72.071597][ T5965] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[   72.103220][ T5965] UDF-fs: Scanning with blocksize 2048 failed
[   72.105772][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.137812][ T5878] usb 1-1: Product: syz
[   72.138975][ T5965] syz.1.15: attempt to access beyond end of device
[   72.138975][ T5965] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[   72.168166][ T5878] usb 1-1: Manufacturer: syz
[   72.172831][ T5878] usb 1-1: SerialNumber: syz
[   72.216055][ T5965] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   72.245805][ T5878] usb 1-1: can't set config #129, error -71
[   72.266205][ T5965] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   72.314013][ T5965] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[   72.321935][ T5878] usb 1-1: USB disconnect, device number 2
[   72.345640][ T5999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28'.
[   72.354648][ T5965] UDF-fs: Scanning with blocksize 4096 failed
[   72.402159][ T5965] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[   73.757445][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   73.832734][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'.
[   74.202435][ T6014] 8021q: adding VLAN 0 to HW filter on device team1
[   75.393260][ T6029] bridge0: port 3(erspan0) entered blocking state
[   75.399928][ T6029] bridge0: port 3(erspan0) entered disabled state
[   75.406614][ T6029] erspan0: entered allmulticast mode
[   75.412465][ T6029] erspan0: entered promiscuous mode
[   75.418532][ T6029] bridge0: port 3(erspan0) entered blocking state
[   75.425131][ T6029] bridge0: port 3(erspan0) entered forwarding state
[   77.455061][ T5860] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.718727][ T5910] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   78.093671][ T5910] usb 2-1: Using ep0 maxpacket: 16
[   78.099929][ T5910] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.100011][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0
[   78.100110][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[   78.100179][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.604988][ T5860] usb 1-1: Using ep0 maxpacket: 16
[   78.744543][ T5910] usb 2-1: config 0 descriptor??
[   78.970041][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[   78.991415][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[   79.005227][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   79.018579][ T5860] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   79.028786][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.279630][ T5860] usb 1-1: config 0 descriptor??
[   79.534012][ T5910] logitech-djreceiver 0003:046D:C517.0001: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0
[   79.933305][ T5860] microsoft 0003:045E:07DA.0002: unknown main item tag 0x6
[   79.979426][ T5860] microsoft 0003:045E:07DA.0002: unknown main item tag 0x6
[   80.163928][   T25] usb 2-1: USB disconnect, device number 3
[   80.183695][ T5860] microsoft 0003:045E:07DA.0002: unknown main item tag 0x6
[   80.203199][ T5860] microsoft 0003:045E:07DA.0002: unknown main item tag 0x6
[   80.228477][ T5860] microsoft 0003:045E:07DA.0002: unknown main item tag 0x6
[   80.246974][ T5860] microsoft 0003:045E:07DA.0002: No inputs registered, leaving
[   80.289618][ T5860] microsoft 0003:045E:07DA.0002: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   80.331826][ T5860] microsoft 0003:045E:07DA.0002: no inputs found
[   80.352894][ T5860] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[   81.379103][ T5860] usb 1-1: USB disconnect, device number 3
[   82.036822][  T974] cfg80211: failed to load regulatory.db
[   82.086491][    C1] net_ratelimit: 50 callbacks suppressed
[   82.086513][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   84.577363][ T5833] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   84.590519][ T5833] Bluetooth: hci2: Injecting HCI hardware error event
[   84.620548][ T5144] Bluetooth: hci2: hardware error 0x00
[   85.339988][ T6125] netlink: 80 bytes leftover after parsing attributes in process `syz.0.68'.
[   85.455070][  T974] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   85.507417][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.68'.
[   86.172889][  T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.192129][  T974] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   86.236384][  T974] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   86.246817][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.257353][  T974] usb 2-1: config 0 descriptor??
[   86.905172][ T5144] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   87.874118][ T6153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'.
[   89.623136][ T5881] usb 2-1: USB disconnect, device number 4
[   89.644047][ T6182] loop0: detected capacity change from 0 to 1024
[   89.822079][ T6182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.698466][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.286956][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[   91.519146][ T6205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.91'.
[   92.319889][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'.
[   92.384582][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'.
[   92.511874][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.520050][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.568491][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.585820][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.735112][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   92.907389][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.643941][ T5878] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   93.653252][ T5878] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   93.666934][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.677152][ T5878] usb 2-1: config 0 descriptor??
[   93.836310][ T6233] block device autoloading is deprecated and will be removed.
[   93.896259][ T6230] md2: using deprecated bitmap file support
[   93.914880][ T6230] md2: error: failed to get bitmap file
[   93.976065][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.117199][ T6237] atomic_op ffff88807fd03998 conn xmit_atomic 0000000000000000
[   94.129463][ T6237] usb usb5: usbfs: process 6237 (syz.0.105) did not claim interface 4 before use
[   94.198573][ T5878] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   94.227933][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   94.247330][ T5878] usb 3-1: config 1 has no interface number 0
[   94.260991][ T5878] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.333918][ T5878] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   94.353653][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.362721][ T5878] usb 3-1: Product: syz
[   94.370915][ T5878] usb 3-1: Manufacturer: syz
[   94.376156][ T5878] usb 3-1: SerialNumber: syz
[   95.295710][ T5878] usb 3-1: selecting invalid altsetting 1
[   95.919728][ T5878] cdc_ncm 3-1:1.1: SET_CRC_MODE failed
[   95.946355][ T5878] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed
[   95.997061][ T5878] usb 3-1: selecting invalid altsetting 1
[   96.003429][ T6255] ipvlan2: entered promiscuous mode
[   96.015054][ T5878] cdc_ncm 3-1:1.1: bind() failure
[   96.029274][ T6255] bridge0: port 3(ipvlan2) entered blocking state
[   96.031207][ T5878] usb 3-1: USB disconnect, device number 2
[   96.076706][ T6255] bridge0: port 3(ipvlan2) entered disabled state
[   96.111745][ T6255] ipvlan2: entered allmulticast mode
[   96.117770][ T6255] bridge0: entered allmulticast mode
[   96.145513][ T6255] ipvlan2: left allmulticast mode
[   96.157974][ T6255] bridge0: left allmulticast mode
[   96.372966][ T5878] usb 2-1: USB disconnect, device number 5
[   97.485771][ T6274] rtc_cmos 00:00: Alarms can be up to one day in the future
[   97.762006][ T6284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.117'.
[   98.445069][ T5879] rtc_cmos 00:00: Alarms can be up to one day in the future
[   98.455275][ T5879] rtc_cmos 00:00: Alarms can be up to one day in the future
[   98.462837][ T5879] rtc_cmos 00:00: Alarms can be up to one day in the future
[   98.470499][ T5879] rtc_cmos 00:00: Alarms can be up to one day in the future
[   98.478200][ T5879] rtc rtc0: __rtc_set_alarm: err=-22
[   99.558918][ T6306] Zero length message leads to an empty skb
[   99.576289][ T6306] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  100.441334][ T6317] capability: warning: `syz.3.128' uses deprecated v2 capabilities in a way that may be insecure
[  100.940579][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  101.230254][ T5882] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  101.241134][ T5882] usb 4-1: config 0 has no interface number 0
[  101.250261][ T5882] usb 4-1: config 0 interface 153 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  101.265816][ T5882] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=68.18
[  101.277605][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.288859][ T5882] usb 4-1: Product: syz
[  101.293128][ T5882] usb 4-1: Manufacturer: syz
[  101.303115][ T5882] usb 4-1: SerialNumber: syz
[  101.317006][ T5882] usb 4-1: config 0 descriptor??
[  101.777242][ T5882] hdpvr 4-1:0.153: Could not find bulk-in endpoint
[  101.784130][ T5882] hdpvr 4-1:0.153: probe with driver hdpvr failed with error -12
[  101.834983][ T5882] usb 4-1: USB disconnect, device number 2
[  106.486482][ T6381] loop3: detected capacity change from 0 to 1024
[  106.582744][ T6381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.030076][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.330879][ T5144] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  108.341260][ T5144] CPU: 0 UID: 0 PID: 5144 Comm: kworker/u9:1 Not tainted 6.12.0-next-20241128-syzkaller #0
[  108.351253][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  108.361326][ T5144] Workqueue: hci1 hci_rx_work
[  108.366055][ T5144] Call Trace:
[  108.369334][ T5144]  <TASK>
[  108.372260][ T5144]  dump_stack_lvl+0x241/0x360
[  108.376946][ T5144]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.382141][ T5144]  ? __pfx__printk+0x10/0x10
[  108.386728][ T5144]  ? __kmalloc_cache_noprof+0x243/0x390
[  108.392271][ T5144]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  108.397575][ T5144]  sysfs_create_dir_ns+0x2ce/0x3a0
[  108.402720][ T5144]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  108.408363][ T5144]  kobject_add_internal+0x435/0x8d0
[  108.413584][ T5144]  kobject_add+0x152/0x220
[  108.418008][ T5144]  ? do_raw_spin_unlock+0x13c/0x8b0
[  108.423202][ T5144]  ? device_add+0x3e7/0xbf0
[  108.427731][ T5144]  ? __pfx_kobject_add+0x10/0x10
[  108.432665][ T5144]  ? _raw_spin_unlock+0x28/0x50
[  108.437642][ T5144]  ? get_device_parent+0x165/0x410
[  108.442776][ T5144]  device_add+0x4e5/0xbf0
[  108.447134][ T5144]  hci_conn_add_sysfs+0xe8/0x200
[  108.452111][ T5144]  hci_sync_conn_complete_evt+0x789/0xaa0
[  108.457840][ T5144]  hci_event_packet+0xac2/0x1540
[  108.462783][ T5144]  ? __pfx_hci_sync_conn_complete_evt+0x10/0x10
[  108.469022][ T5144]  ? __pfx_hci_event_packet+0x10/0x10
[  108.474389][ T5144]  ? do_raw_spin_unlock+0x13c/0x8b0
[  108.479758][ T5144]  ? hci_send_to_monitor+0xd8/0x7f0
[  108.484960][ T5144]  ? kcov_remote_start+0x97/0x7d0
[  108.489980][ T5144]  hci_rx_work+0x3f3/0xdb0
[  108.494435][ T5144]  ? process_scheduled_works+0x976/0x1840
[  108.500180][ T5144]  process_scheduled_works+0xa66/0x1840
[  108.505783][ T5144]  ? __pfx_process_scheduled_works+0x10/0x10
[  108.511776][ T5144]  ? assign_work+0x364/0x3d0
[  108.516369][ T5144]  worker_thread+0x870/0xd30
[  108.520964][ T5144]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  108.526949][ T5144]  ? __kthread_parkme+0x169/0x1d0
[  108.531989][ T5144]  ? __pfx_worker_thread+0x10/0x10
[  108.537110][ T5144]  kthread+0x2f0/0x390
[  108.541187][ T5144]  ? __pfx_worker_thread+0x10/0x10
[  108.546311][ T5144]  ? __pfx_kthread+0x10/0x10
[  108.550907][ T5144]  ret_from_fork+0x4b/0x80
[  108.555323][ T5144]  ? __pfx_kthread+0x10/0x10
[  108.559949][ T5144]  ret_from_fork_asm+0x1a/0x30
[  108.564717][ T5144]  </TASK>
[  108.569027][ T5144] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  108.583716][ T5144] Bluetooth: hci1: failed to register connection device
[  109.315048][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  109.445946][ T6416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.159'.
[  109.455215][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.159'.
[  109.466916][ T6416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.159'.
[  109.476697][ T6416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.159'.
[  109.655166][ T5882] usb 1-1: Using ep0 maxpacket: 8
[  109.672023][ T5882] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  109.687909][ T5882] usb 1-1: config 0 has no interface number 0
[  109.709442][ T5882] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  109.754006][ T5882] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  109.826019][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.968082][ T6425] mkiss: ax0: crc mode is auto.
[  110.336167][ T5144] Bluetooth: hci1: command tx timeout
[  110.613547][ T5882] usb 1-1: config 0 descriptor??
[  110.630945][ T5882] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  111.165094][   T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  111.349814][   T25] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  111.359140][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.381456][   T25] usb 4-1: Product: syz
[  111.390407][   T25] usb 4-1: Manufacturer: syz
[  111.402452][   T25] usb 4-1: SerialNumber: syz
[  111.405033][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  111.435807][   T25] usb 4-1: config 0 descriptor??
[  111.442143][   T25] ch341 4-1:0.0: ch341-uart converter detected
[  111.467768][ T5919] usb 1-1: USB disconnect, device number 4
[  111.625123][ T5882] usb 5-1: Using ep0 maxpacket: 16
[  111.634335][ T5882] usb 5-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config
[  112.064778][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 214, changing to 11
[  112.076067][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 33201, setting to 1024
[  112.115005][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.333324][ T5882] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  112.355406][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.413872][ T5882] usb 5-1: Product: syz
[  112.425589][ T5882] usb 5-1: Manufacturer: syz
[  112.435617][   T25] usb 4-1: failed to receive control message: -71
[  112.444703][ T5882] usb 5-1: SerialNumber: syz
[  112.463274][   T25] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  112.463813][ T5882] usb 5-1: config 0 descriptor??
[  112.507113][ T5882] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  112.515257][   T25] usb 4-1: USB disconnect, device number 3
[  112.792336][   T25] ch341 4-1:0.0: device disconnected
[  113.665429][ T6453] nvme_fabrics: missing parameter 'transport=%s'
[  113.675715][ T6453] nvme_fabrics: missing parameter 'nqn=%s'
[  113.832725][ T5882] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110
[  113.839801][ T5882] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  114.094611][ T6446] vivid-000: =================  START STATUS  =================
[  114.102918][ T6446] vivid-000: Generate PTS: true
[  114.107961][ T6446] vivid-000: Generate SCR: true
[  114.112824][ T6446] tpg source WxH: 640x360 (Y'CbCr)
[  114.117952][ T6446] tpg field: 1
[  114.121309][ T6446] tpg crop: 640x360@0x0
[  114.125481][ T6446] tpg compose: 640x360@0x0
[  114.129880][ T6446] tpg colorspace: 8
[  114.133666][ T6446] tpg transfer function: 0/0
[  114.138337][ T6446] tpg Y'CbCr encoding: 0/0
[  114.142736][ T6446] tpg quantization: 0/0
[  114.146910][ T6446] tpg RGB range: 0/2
[  114.150848][ T6446] vivid-000: ==================  END STATUS  ==================
[  114.415157][ T5881] usb 5-1: USB disconnect, device number 2
[  115.022702][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'.
[  115.051703][ T6469] netlink: 228 bytes leftover after parsing attributes in process `syz.4.176'.
[  115.097410][ T6469] netlink: 64 bytes leftover after parsing attributes in process `syz.4.176'.
[  115.805283][ T5860] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  116.315784][ T5860] usb 5-1: Using ep0 maxpacket: 16
[  116.323058][ T5860] usb 5-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config
[  116.360648][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 214, changing to 11
[  116.413876][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 33201, setting to 1024
[  116.460274][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.526521][ T5860] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  116.562373][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.579119][ T5860] usb 5-1: Product: syz
[  116.613753][ T5860] usb 5-1: Manufacturer: syz
[  116.626285][ T5860] usb 5-1: SerialNumber: syz
[  116.642727][ T5860] usb 5-1: config 0 descriptor??
[  116.679312][ T5860] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  116.945104][ T5882] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  117.409762][ T5860] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110
[  117.892509][ T5860] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  117.893797][ T5882] usb 1-1: config 0 has an invalid interface number: 153 but max is 0
[  117.937632][ T5882] usb 1-1: config 0 has no interface number 0
[  117.943877][ T5882] usb 1-1: config 0 interface 153 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.004122][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=68.18
[  118.014170][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.024334][ T5882] usb 1-1: Product: syz
[  118.043125][ T5882] usb 1-1: Manufacturer: syz
[  118.054669][ T5882] usb 1-1: SerialNumber: syz
[  118.082763][ T5882] usb 1-1: config 0 descriptor??
[  118.317579][ T5882] hdpvr 1-1:0.153: Could not find bulk-in endpoint
[  118.449091][ T5882] hdpvr 1-1:0.153: probe with driver hdpvr failed with error -12
[  118.493912][ T5882] usb 1-1: USB disconnect, device number 5
[  118.942873][  T974] usb 5-1: USB disconnect, device number 3
[  119.502716][ T6546] =======================================================
[  119.502716][ T6546] WARNING: The mand mount option has been deprecated and
[  119.502716][ T6546]          and is ignored by this kernel. Remove the mand
[  119.502716][ T6546]          option from the mount to silence this warning.
[  119.502716][ T6546] =======================================================
[  119.538150][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.548306][ T6546] Device name cannot be null; rc = [-22]
[  120.775091][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  121.006545][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.655037][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  121.685065][ T5881] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  121.830713][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.058814][ T6576] netlink: 48 bytes leftover after parsing attributes in process `syz.3.217'.
[  122.762299][ T5881] usb 3-1: config 0 descriptor??
[  123.068046][ T5881] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  124.045750][ T6594] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.267060][ T6594] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.472895][ T6594] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.580605][ T6594] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.754415][ T6605] atomic_op ffff888027d2e998 conn xmit_atomic 0000000000000000
[  124.766519][ T6605] usb usb5: usbfs: process 6605 (syz.3.228) did not claim interface 4 before use
[  124.821247][ T6594] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.871040][ T6594] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.952357][ T6594] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.964720][ T5860] usb 3-1: USB disconnect, device number 3
[  124.982930][ T6594] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.218352][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  133.269311][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  133.948656][ T6691] xt_hashlimit: size too large, truncated to 1048576
[  134.095558][ T6696] vlan0: entered promiscuous mode
[  134.155493][ T6696] team0: Port device vlan0 added
[  140.370952][ T6731] rtc_cmos 00:00: Alarms can be up to one day in the future
[  140.998333][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  141.033279][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  141.041416][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  141.050650][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  141.058465][ T5144] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  141.065960][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  142.300803][ T6750] chnl_net:caif_netlink_parms(): no params data found
[  142.780536][ T6774] netlink: 48 bytes leftover after parsing attributes in process `syz.4.273'.
[  143.479747][ T5144] Bluetooth: hci5: command tx timeout
[  145.212248][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'.
[  145.526462][ T5144] Bluetooth: hci5: command tx timeout
[  145.549033][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.660406][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.718397][ T6750] bridge_slave_0: entered allmulticast mode
[  145.731755][ T6750] bridge_slave_0: entered promiscuous mode
[  145.787071][   T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.050018][   T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.066889][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.289851][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.477388][ T6750] bridge_slave_1: entered allmulticast mode
[  147.096068][ T6750] bridge_slave_1: entered promiscuous mode
[  147.493641][ T6804] IPVS: Error connecting to the multicast addr
[  147.796571][ T5144] Bluetooth: hci5: command tx timeout
[  147.981358][   T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.646426][   T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.036072][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.107827][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.846654][ T5144] Bluetooth: hci5: command tx timeout
[  149.934742][ T6750] team0: Port device team_slave_0 added
[  150.002327][ T6750] team0: Port device team_slave_1 added
[  150.252253][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.325121][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.431916][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.466111][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.473073][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.556571][ T6851] netlink: 48 bytes leftover after parsing attributes in process `syz.4.297'.
[  151.196292][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.874674][   T53] bridge_slave_1: left allmulticast mode
[  151.881456][   T53] bridge_slave_1: left promiscuous mode
[  151.888845][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.063578][   T53] bridge_slave_0: left allmulticast mode
[  152.104990][   T53] bridge_slave_0: left promiscuous mode
[  152.129951][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.997353][ T6891] netlink: 48 bytes leftover after parsing attributes in process `syz.2.308'.
[  157.142436][ T6902] rtc_cmos 00:00: Alarms can be up to one day in the future
[  157.165449][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.192964][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.208198][   T53] bond0 (unregistering): Released all slaves
[  157.450732][ T6750] hsr_slave_0: entered promiscuous mode
[  157.504297][ T6750] hsr_slave_1: entered promiscuous mode
[  157.545003][ T6750] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.556374][ T6750] Cannot create hsr debugfs directory
[  158.309137][   T29] audit: type=1800 audit(1732790132.813:2): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.314" name="/" dev="9p" ino=2 res=0 errno=0
[  158.552575][ T6918] Device name cannot be null; rc = [-22]
[  158.617554][   T29] audit: type=1800 audit(1732790133.103:3): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.316" name="/newroot/63/file0" dev="tmpfs" ino=338 res=0 errno=0
[  159.212190][ T6929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.319'.
[  160.115154][   T53] hsr_slave_0: left promiscuous mode
[  160.370925][   T53] hsr_slave_1: left promiscuous mode
[  160.588012][ T6954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.326'.
[  161.291928][   T53] veth1_macvtap: left promiscuous mode
[  161.305288][   T53] veth0_macvtap: left promiscuous mode
[  161.312255][   T53] veth1_vlan: left promiscuous mode
[  161.594798][   T53] veth0_vlan: left promiscuous mode
[  163.013620][ T6980] atomic_op ffff888058b41998 conn xmit_atomic 0000000000000000
[  163.033824][ T6980] usb usb5: usbfs: process 6980 (syz.4.331) did not claim interface 4 before use
[  163.899134][   T53] team0 (unregistering): Port device team_slave_1 removed
[  164.115461][ T6989] Device name cannot be null; rc = [-22]
[  164.146170][   T53] team0 (unregistering): Port device team_slave_0 removed
[  168.402567][ T6750] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  168.464629][ T6750] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  168.722378][ T6750] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  169.816823][ T6750] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  170.192924][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.216486][ T7043] Unsupported ieee802154 address type: 0
[  172.174253][ T6750] 8021q: adding VLAN 0 to HW filter on device team0
[  172.389285][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.396525][ T6922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.865828][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.872987][ T6922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.988149][ T6750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  173.043673][ T6750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.062387][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.745133][ T6750] veth0_vlan: entered promiscuous mode
[  178.066993][ T6750] veth1_vlan: entered promiscuous mode
[  179.049288][ T6750] veth0_macvtap: entered promiscuous mode
[  179.060418][ T6750] veth1_macvtap: entered promiscuous mode
[  179.075997][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.086555][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.096420][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.107250][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.117755][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.129043][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.138950][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.149454][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.160576][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.170462][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.180968][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.190843][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.201360][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.223305][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.235032][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.237526][ T7118] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7118]
[  179.244844][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.265526][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.278647][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.364353][ T6750] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.373722][ T6750] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.382939][ T6750] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.405016][ T6750] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.222009][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.235507][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.284466][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.292661][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.324123][ T5839] Bluetooth: hci3: command tx timeout
[  181.330109][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  181.791228][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'.
[  182.898177][ T7178] tty tty31: ldisc open failed (-12), clearing slot 30
[  183.391677][ T7190] erofs (device erofs): cannot find valid erofs superblock
[  185.268700][ T7224] rtc_cmos 00:00: Alarms can be up to one day in the future
[  185.395135][ T5950] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  186.460423][ T5950] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  186.469554][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.478083][ T5950] usb 6-1: Product: syz
[  186.482261][ T5950] usb 6-1: Manufacturer: syz
[  186.487164][ T5950] usb 6-1: SerialNumber: syz
[  187.371400][ T5950] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  187.557001][ T5860] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  187.878080][ T7267] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[7267]
[  188.086191][ T5910] usb 6-1: USB disconnect, device number 2
[  188.917298][ T5860] usb 6-1: Service connection timeout for: 256
[  188.923539][ T5860] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  188.934725][ T5860] ath9k_htc: Failed to initialize the device
[  189.171539][ T5910] usb 6-1: ath9k_htc: USB layer deinitialized
[  189.411218][ T7298] erofs (device erofs): cannot find valid erofs superblock
[  189.872278][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'.
[  190.225031][ T5881] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  190.584091][ T5881] usb 1-1: Using ep0 maxpacket: 16
[  190.623129][ T7296] kvm: kvm [7291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000
[  190.867918][ T5910] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  191.100567][ T5910] usb 2-1: Using ep0 maxpacket: 16
[  191.127411][ T5910] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.213455][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0
[  191.235606][ T5881] usb 1-1: config 0 has an invalid interface number: 11 but max is 0
[  191.243742][ T5881] usb 1-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config
[  191.254152][ T5881] usb 1-1: config 0 has no interface number 0
[  191.261293][ T5881] usb 1-1: too many endpoints for config 0 interface 11 altsetting 19: 177, using maximum allowed: 30
[  191.272392][ T5881] usb 1-1: config 0 interface 11 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 177
[  191.285905][ T5881] usb 1-1: config 0 interface 11 has no altsetting 0
[  191.297266][ T5881] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  191.312336][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  191.329530][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.359782][ T5910] usb 2-1: config 0 descriptor??
[  191.367824][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.386258][ T5881] usb 1-1: Product: syz
[  191.390482][ T5881] usb 1-1: Manufacturer: syz
[  191.418038][ T5881] usb 1-1: SerialNumber: syz
[  191.455681][ T5881] usb 1-1: config 0 descriptor??
[  191.760526][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  191.772590][ T5881] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  191.780234][ T5881] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  192.532330][ T5881] gspca_pac7302 1-1:0.11: probe with driver gspca_pac7302 failed with error -71
[  192.561672][ T5910] logitech-djreceiver 0003:046D:C517.0003: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0
[  192.598033][ T5881] usb 1-1: USB disconnect, device number 6
[  192.813644][ T7337] netlink: 40 bytes leftover after parsing attributes in process `syz.5.411'.
[  193.284510][    T9] usb 2-1: USB disconnect, device number 6
[  193.410010][ T7321] syz.2.407 (7321): drop_caches: 2
[  193.927247][ T7352] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[7352]
[  194.045564][ T7353] binder: 7348:7353 ioctl c0306201 0 returned -14
[  194.216281][ T7355] binder: 7348:7355 ioctl c0306201 0 returned -14
[  194.282428][ T7364] netlink: 'syz.1.418': attribute type 3 has an invalid length.
[  194.530513][ T7369] fuse: Bad value for 'fd'
[  194.537504][ T7369] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  194.668611][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'.
[  194.769215][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  195.209730][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  195.707566][ T7364] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  195.713761][ T7364] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  197.082769][ T7364] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  197.096444][ T7364] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  197.219779][ T7364] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  197.225910][ T7364] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  197.236270][ T7364] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  197.247022][ T7364] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  197.252968][ T7364] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  197.265430][ T7364] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  197.291710][ T7385] loop2: detected capacity change from 0 to 512
[  197.378320][ T7385] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  197.390692][ T7385] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  197.401382][ T7385] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.422: Corrupt directory, running e2fsck is recommended
[  197.463504][ T7385] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  197.472595][ T7385] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.422: corrupted in-inode xattr: invalid ea_ino
[  197.489578][ T7385] EXT4-fs (loop2): Remounting filesystem read-only
[  197.499889][ T7385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.623081][ T5833] Bluetooth: hci0: command 0x0406 tx timeout
[  197.667123][ T5860] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  197.682415][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  197.875214][ T5880] usb 6-1: Using ep0 maxpacket: 8
[  197.891113][ T7412] batadv1: entered promiscuous mode
[  197.892073][ T5880] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  197.933228][ T5880] usb 6-1: config 0 has no interface number 0
[  197.940156][ T5860] usb 1-1: Using ep0 maxpacket: 16
[  197.957950][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv1
[  198.010627][ T5880] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  198.056884][ T5880] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  198.110814][ T5880] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  198.158255][ T5880] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  198.217667][ T5880] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  198.260105][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.354932][ T5860] usb 1-1: config 0 has an invalid interface number: 11 but max is 0
[  198.363167][ T5860] usb 1-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config
[  198.373669][ T5860] usb 1-1: config 0 has no interface number 0
[  198.380794][ T5860] usb 1-1: too many endpoints for config 0 interface 11 altsetting 19: 177, using maximum allowed: 30
[  198.392004][ T5860] usb 1-1: config 0 interface 11 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 177
[  198.400296][ T6922] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  198.405302][ T5860] usb 1-1: config 0 interface 11 has no altsetting 0
[  198.406652][ T5880] usb 6-1: config 0 descriptor??
[  198.450767][ T5860] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  198.460415][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.468886][ T5860] usb 1-1: Product: syz
[  198.482848][ T5860] usb 1-1: Manufacturer: syz
[  198.487411][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.497955][ T5880] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  198.560358][ T5860] usb 1-1: SerialNumber: syz
[  198.575803][ T5860] usb 1-1: config 0 descriptor??
[  198.838226][ T5880] usb 6-1: USB disconnect, device number 3
[  198.838264][    C0] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  198.849437][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  198.858480][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  198.866979][ T5880] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  198.880739][ T5860] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  198.892814][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  198.900367][ T5860] gspca_pac7302: reg_w() failed i: ff v: 01 error -32
[  198.908911][ T5860] gspca_pac7302 1-1:0.11: probe with driver gspca_pac7302 failed with error -32
[  198.922067][ T5860] usb 1-1: USB disconnect, device number 7
[  199.123904][ T7431] ldusb: No device or device unplugged -19
[  199.216483][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  200.228495][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout
[  200.234671][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  200.448180][ T5833] Bluetooth: hci0: command 0x0406 tx timeout
[  201.540444][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout
[  201.944160][ T7460] ip6gre0: Master is either lo or non-ether device
[  202.903339][ T5144] Bluetooth: hci4: command 0x0405 tx timeout
[  202.909487][ T5144] Bluetooth: hci5: command 0x0c1a tx timeout
[  202.992911][ T7475] Unsupported ieee802154 address type: 0
[  204.795001][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  205.055136][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout
[  205.061434][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  205.724067][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.735501][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.745796][ T5880] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  205.755332][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.826354][ T5880] usb 5-1: config 0 descriptor??
[  206.847239][ T7502] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[7502]
[  206.882013][ T5880] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[  206.933434][ T5880] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device
[  206.940687][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.452'.
[  206.943404][ T5880] pyra 0003:1E7D:2CF6.0004: couldn't install mouse
[  206.959941][ T5880] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -32
[  208.155657][ T5881] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  208.315614][ T5881] usb 2-1: Using ep0 maxpacket: 16
[  208.360635][ T5881] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  208.407334][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.440207][ T5881] usb 2-1: Product: syz
[  208.477993][ T5881] usb 2-1: Manufacturer: syz
[  208.499163][ T5881] usb 2-1: SerialNumber: syz
[  208.519844][ T5881] usb 2-1: config 0 descriptor??
[  208.548073][ T5881] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  208.754022][ T5881] gp8psk: usb in 128 operation failed.
[  208.770897][ T5881] gp8psk: usb in 137 operation failed.
[  208.783365][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  208.796620][ T5881] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  208.807228][ T5881] usb 2-1: media controller created
[  208.840637][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  208.880994][ T5881] gp8psk_fe: Frontend revision 1 attached
[  208.887682][ T5881] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  208.899025][ T5881] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  208.929363][ T5919] usb 5-1: USB disconnect, device number 4
[  209.027711][ T5881] gp8psk: usb in 138 operation failed.
[  209.036335][ T5881] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  209.047852][ T5881] gp8psk: found Genpix USB device pID = 201 (hex)
[  209.075317][ T5881] usb 2-1: USB disconnect, device number 7
[  209.254312][ T7545] netlink: 48 bytes leftover after parsing attributes in process `syz.4.458'.
[  209.288252][ T5881] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  210.651259][ T7562] sd 0:0:1:0: device reset
[  211.677995][ T7568] nvme_fabrics: missing parameter 'transport=%s'
[  211.684423][ T7568] nvme_fabrics: missing parameter 'nqn=%s'
[  211.723749][ T7574] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[7574]
[  213.694750][ T7586] atomic_op ffff888059bf8998 conn xmit_atomic 0000000000000000
[  213.855163][ T7589] netlink: 64 bytes leftover after parsing attributes in process `syz.0.470'.
[  213.958212][ T7593] usb usb5: usbfs: process 7593 (syz.4.469) did not claim interface 4 before use
[  215.300977][ T7618] rtc_cmos 00:00: Alarms can be up to one day in the future
[  215.433775][ T7622] No such timeout policy "syz0"
[  216.727458][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'.
[  220.211035][ T7701] overlayfs: failed to resolve './file1': -2
[  221.119420][ T7719] Device name cannot be null; rc = [-22]
[  221.140508][ T7722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.502'.
[  221.164676][ T7722] netlink: 228 bytes leftover after parsing attributes in process `syz.1.502'.
[  221.192967][ T7722] netlink: 64 bytes leftover after parsing attributes in process `syz.1.502'.
[  222.946096][ T5910] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  223.125096][ T5910] usb 2-1: Using ep0 maxpacket: 16
[  223.138321][ T5910] usb 2-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config
[  223.321912][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  224.049276][ T5910] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  224.059144][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.067218][ T5910] usb 2-1: Product: syz
[  224.071436][ T5910] usb 2-1: Manufacturer: syz
[  224.076989][ T5910] usb 2-1: SerialNumber: syz
[  224.083573][ T5910] usb 2-1: config 0 descriptor??
[  224.338108][ T5910] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  224.368624][ T5910] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  224.375767][ T5910] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  224.410402][ T5910] usb 2-1: USB disconnect, device number 8
[  225.582807][ T7799] nvme_fabrics: missing parameter 'transport=%s'
[  225.590632][ T7799] nvme_fabrics: missing parameter 'nqn=%s'
[  228.095128][ T5860] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  228.469776][ T5860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.480900][ T5860] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  228.539243][ T5860] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  229.225753][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.233810][ T5860] usb 6-1: Product: syz
[  229.245087][ T5860] usb 6-1: Manufacturer: syz
[  229.253096][ T5860] usb 6-1: SerialNumber: syz
[  229.592601][ T7825] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  229.994992][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  230.205530][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  230.229291][ T5910] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  230.249013][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.251852][ T7825] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  230.295220][ T5910] usb 5-1: Product: syz
[  230.309068][ T5910] usb 5-1: Manufacturer: syz
[  230.313769][ T5910] usb 5-1: SerialNumber: syz
[  230.367387][ T5910] usb 5-1: config 0 descriptor??
[  230.388220][ T5910] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  230.513390][ T5860] cdc_ncm 6-1:1.0: failed to get mac address
[  230.526724][ T5860] cdc_ncm 6-1:1.0: bind() failure
[  230.588594][ T5860] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  230.599495][ T5910] gp8psk: usb in 128 operation failed.
[  230.625084][ T5910] gp8psk: usb in 137 operation failed.
[  230.631947][ T5860] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  230.642070][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  230.666263][ T5860] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[  230.683118][ T5910] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  230.714416][ T5860] usb 6-1: USB disconnect, device number 4
[  230.760051][ T5910] usb 5-1: media controller created
[  230.847377][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  230.985073][ T5910] gp8psk_fe: Frontend revision 1 attached
[  230.990946][ T5910] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  231.372803][ T5910] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  232.906581][ T5910] gp8psk: usb in 138 operation failed.
[  232.912223][ T5910] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  232.924938][ T5910] gp8psk: found Genpix USB device pID = 201 (hex)
[  232.971140][ T5910] usb 5-1: USB disconnect, device number 5
[  233.014098][ T5910] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  233.088617][ T7875] syz.1.536 (7875): drop_caches: 2
[  234.394543][ T7933] No such timeout policy "syz0"
[  235.695186][ T7912] Device name cannot be null; rc = [-22]
[  236.025522][ T5860] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  236.924904][ T5860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  237.328719][ T5860] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  237.358293][ T5860] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  237.395586][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.443238][ T5860] usb 6-1: Product: syz
[  237.449561][ T5860] usb 6-1: Manufacturer: syz
[  237.455745][ T5860] usb 6-1: SerialNumber: syz
[  237.680765][ T7939] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  238.556807][ T5860] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS
[  238.563209][ T5860] cdc_ncm 6-1:1.0: bind() failure
[  238.572194][ T5860] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  238.580010][ T5860] cdc_ncm 6-1:1.1: bind() failure
[  238.684975][  T974] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  238.823291][  T974] usb 3-1: device descriptor read/64, error -71
[  239.415128][  T974] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  239.580595][  T974] usb 3-1: device descriptor read/64, error -71
[  239.743959][  T974] usb usb3-port1: attempt power cycle
[  240.307302][  T974] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  240.526868][  T974] usb 3-1: device descriptor read/8, error -71
[  240.574031][ T5882] usb 6-1: USB disconnect, device number 5
[  240.724897][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.560'.
[  240.734080][ T7994] netlink: 228 bytes leftover after parsing attributes in process `syz.1.560'.
[  240.743349][ T7994] netlink: 56 bytes leftover after parsing attributes in process `syz.1.560'.
[  240.915538][  T974] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  241.420697][  T974] usb 3-1: device descriptor read/8, error -71
[  241.452736][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.5.562'.
[  241.510791][ T8007] atomic_op ffff888058f1a198 conn xmit_atomic 0000000000000000
[  241.558604][  T974] usb usb3-port1: unable to enumerate USB device
[  242.138541][ T8007] usb usb5: usbfs: process 8007 (syz.2.563) did not claim interface 4 before use
[  243.732841][ T8041] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[8041]
[  244.049161][ T5882] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  244.215397][ T5882] usb 2-1: device descriptor read/64, error -71
[  244.744108][ T5882] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  245.077884][ T8056] No such timeout policy "syz0"
[  245.131683][ T5882] usb 2-1: device descriptor read/64, error -71
[  245.247215][ T5882] usb usb2-port1: attempt power cycle
[  245.595062][ T5882] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  245.744943][  T974] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  245.805655][ T5882] usb 2-1: device descriptor read/8, error -71
[  245.905240][  T974] usb 5-1: Using ep0 maxpacket: 16
[  245.913791][  T974] usb 5-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config
[  245.953326][  T974] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  245.990827][  T974] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  246.170699][ T8060] netlink: 48 bytes leftover after parsing attributes in process `syz.2.581'.
[  246.212674][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.212707][  T974] usb 5-1: Product: syz
[  246.212723][  T974] usb 5-1: Manufacturer: syz
[  246.212739][  T974] usb 5-1: SerialNumber: syz
[  246.214778][  T974] usb 5-1: config 0 descriptor??
[  246.219084][  T974] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  246.235767][ T5882] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  246.275527][ T5882] usb 2-1: device descriptor read/8, error -71
[  246.445280][ T5882] usb usb2-port1: unable to enumerate USB device
[  246.532596][ T8069] ax25_connect(): syz.2.583 uses autobind, please contact jreuter@yaina.de
[  246.857166][ T8073] erofs (device erofs): cannot find valid erofs superblock
[  247.453430][  T974] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  247.729960][  T974] usb 5-1: USB disconnect, device number 6
[  248.709497][ T8090] Device name cannot be null; rc = [-22]
[  248.744997][ T5882] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  249.594996][ T5882] usb 3-1: Using ep0 maxpacket: 16
[  249.603568][ T5882] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  249.613342][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.666307][ T5882] usb 3-1: Product: syz
[  249.672678][ T5882] usb 3-1: Manufacturer: syz
[  249.696311][ T5882] usb 3-1: SerialNumber: syz
[  250.151890][ T5882] usb 3-1: config 0 descriptor??
[  250.190236][ T5882] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  250.298395][ T8101] rtc_cmos 00:00: Alarms can be up to one day in the future
[  250.513747][ T5882] gp8psk: usb in 128 operation failed.
[  250.592491][ T5882] gp8psk: usb in 137 operation failed.
[  250.598725][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  250.748750][ T5882] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  250.785874][ T5882] usb 3-1: media controller created
[  250.895649][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  250.939864][ T5882] gp8psk_fe: Frontend revision 1 attached
[  250.946296][ T5882] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  251.015053][ T5882] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  251.111986][ T5882] gp8psk: usb in 138 operation failed.
[  251.117807][ T5882] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  251.135888][ T5882] gp8psk: found Genpix USB device pID = 201 (hex)
[  251.395098][ T5880] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  251.545119][ T5880] usb 5-1: device descriptor read/64, error -71
[  251.604650][ T5882] usb 3-1: USB disconnect, device number 8
[  251.995201][ T5880] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  252.655865][ T5882] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  252.994926][ T5880] usb 5-1: device descriptor read/64, error -71
[  253.175600][ T5880] usb usb5-port1: attempt power cycle
[  253.438587][ T8142] netlink: 48 bytes leftover after parsing attributes in process `syz.5.607'.
[  255.468193][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'.
[  256.009995][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  256.016448][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  257.237306][ T8169] rtc_cmos 00:00: Alarms can be up to one day in the future
[  257.491981][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  257.907159][ T8185] sd 0:0:1:0: device reset
[  258.351398][ T5882] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  259.035009][ T5882] usb 2-1: device descriptor read/64, error -71
[  259.333671][ T5882] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  260.811129][ T8193] syz.2.623 (8193): drop_caches: 2
[  260.833590][ T5882] usb 2-1: device descriptor read/64, error -71
[  260.949211][ T5882] usb usb2-port1: attempt power cycle
[  261.168823][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'.
[  261.170727][ T8215] binder: BINDER_SET_CONTEXT_MGR already set
[  261.185357][ T8215] binder: 8214:8215 ioctl 4018620d 20000040 returned -16
[  262.522890][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.634'.
[  262.595324][ T8227] netlink: 228 bytes leftover after parsing attributes in process `syz.5.634'.
[  262.615926][ T8231] sd 0:0:1:0: device reset
[  262.627822][ T8227] netlink: 64 bytes leftover after parsing attributes in process `syz.5.634'.
[  264.764993][ T5860] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  265.965388][ T5860] usb 2-1: device descriptor read/64, error -71
[  266.011867][ T8262] block device autoloading is deprecated and will be removed.
[  266.595022][ T5860] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  266.747800][ T5860] usb 2-1: device descriptor read/64, error -71
[  266.942375][ T5860] usb usb2-port1: attempt power cycle
[  267.355059][ T5860] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  267.715007][ T5860] usb 2-1: device descriptor read/8, error -71
[  268.049285][ T8283] No such timeout policy "syz0"
[  269.370695][ T8282] sd 0:0:1:0: device reset
[  270.722116][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  271.037244][ T8303] netlink: 80 bytes leftover after parsing attributes in process `syz.2.656'.
[  271.060599][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'.
[  272.276239][ T8322] sd 0:0:1:0: device reset
[  274.023924][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  275.201457][ T8345] process 'syz.5.665' launched '/dev/fd/5' with NULL argv: empty string added
[  275.886492][ T8355] Cannot find set identified by id 0 to match
[  275.923831][ T8355] netlink: 'syz.5.669': attribute type 4 has an invalid length.
[  277.145161][ T5881] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  277.494912][ T5881] usb 6-1: device descriptor read/64, error -71
[  277.745096][ T5881] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  278.963082][ T5881] usb 6-1: device descriptor read/64, error -71
[  279.313626][ T5881] usb usb6-port1: attempt power cycle
[  279.665763][ T5881] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  279.927909][ T8410] overlayfs: missing 'workdir'
[  279.983386][ T5881] usb 6-1: device descriptor read/8, error -71
[  280.378359][ T8421] ip6gre0: Master is either lo or non-ether device
[  281.960146][ T8453] overlayfs: missing 'workdir'
[  282.291724][ T5919] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  282.542459][ T5919] usb 3-1: device descriptor read/64, error -71
[  283.562206][ T8471] netlink: 80 bytes leftover after parsing attributes in process `syz.0.702'.
[  283.582189][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.702'.
[  284.296769][ T5919] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  284.475663][ T8482] overlayfs: missing 'lowerdir'
[  284.515037][ T5919] usb 3-1: device descriptor read/64, error -71
[  284.625322][ T5919] usb usb3-port1: attempt power cycle
[  291.809596][ T8562] erofs (device erofs): cannot find valid erofs superblock
[  294.717751][ T8592] syz.4.746 (8592): drop_caches: 2
[  294.850319][ T8592] syz.4.746 (8592): drop_caches: 2
[  295.215037][ T5882] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  295.947788][ T8608] erofs (device erofs): cannot find valid erofs superblock
[  296.181952][ T5882] usb 1-1: Using ep0 maxpacket: 16
[  296.189938][ T5882] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.206378][ T5882] usb 1-1: config 0 interface 0 has no altsetting 0
[  296.213299][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  296.222975][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.286428][ T5882] usb 1-1: config 0 descriptor??
[  297.499119][ T5882] logitech-djreceiver 0003:046D:C517.0005: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.0-1/input0
[  297.677697][   T25] usb 1-1: USB disconnect, device number 9
[  300.884945][ T8653] erofs (device erofs): cannot find valid erofs superblock
[  303.434979][   T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  303.824896][   T25] usb 6-1: Using ep0 maxpacket: 16
[  303.832449][   T25] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.843424][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[  303.851796][   T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  303.861460][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.445789][   T25] usb 6-1: config 0 descriptor??
[  305.045571][   T25] logitech-djreceiver 0003:046D:C517.0006: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.5-1/input0
[  305.241608][ T5882] usb 6-1: USB disconnect, device number 10
[  311.258284][ T8753] gfs2: not a GFS2 filesystem
[  311.692497][ T8751] warning: `syz.0.796' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  315.114643][ T8782] ip6gre0: Master is either lo or non-ether device
[  317.052550][ T8807] sd 0:0:1:0: device reset
[  317.461261][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.468191][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  318.243243][ T8818] sd 0:0:1:0: device reset
[  321.157246][ T8830] ip6gre0: Master is either lo or non-ether device
[  323.205056][   T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  323.577722][ T8865] sd 0:0:1:0: device reset
[  324.424932][   T25] usb 5-1: device descriptor read/64, error -71
[  324.804928][   T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  324.968176][   T25] usb 5-1: device descriptor read/64, error -71
[  325.095037][   T25] usb usb5-port1: attempt power cycle
[  325.567547][   T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  325.624892][   T25] usb 5-1: device descriptor read/8, error -71
[  325.865193][   T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  325.885730][   T25] usb 5-1: device descriptor read/8, error -71
[  326.025231][   T25] usb usb5-port1: unable to enumerate USB device
[  326.647539][ T8886] ip6gre0: Master is either lo or non-ether device
[  331.198177][ T5878] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  331.334916][ T5878] usb 5-1: device descriptor read/64, error -71
[  331.554420][ T8934] ip6gre0: Master is either lo or non-ether device
[  331.711916][ T8937] loop2: detected capacity change from 0 to 1024
[  331.765014][ T5878] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  331.796896][ T8937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.894911][ T5878] usb 5-1: device descriptor read/64, error -71
[  332.624133][ T5878] usb usb5-port1: attempt power cycle
[  333.035884][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.128146][ T8956] erofs (device erofs): cannot find valid erofs superblock
[  333.853938][ T8965] sd 0:0:1:0: device reset
[  336.759604][ T8980] ip6gre0: Master is either lo or non-ether device
[  338.469787][ T5878] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  338.675001][ T5878] usb 2-1: device descriptor read/64, error -71
[  338.882248][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'.
[  338.914952][ T5878] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  338.956497][ T5860] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  339.054915][ T5878] usb 2-1: device descriptor read/64, error -71
[  339.167934][ T5878] usb usb2-port1: attempt power cycle
[  339.348950][ T9025] sd 0:0:1:0: device reset
[  339.579307][ T5860] usb 6-1: Using ep0 maxpacket: 16
[  340.245854][ T5878] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  340.455406][ T5860] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.492614][ T5860] usb 6-1: config 0 interface 0 has no altsetting 0
[  340.537656][ T5860] usb 6-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  340.620958][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.624887][ T5878] usb 2-1: device descriptor read/8, error -71
[  340.631099][ T9031] ip6gre0: Master is either lo or non-ether device
[  340.660419][ T5860] usb 6-1: config 0 descriptor??
[  341.201142][ T9038] Cannot find set identified by id 0 to match
[  341.629030][ T5860] logitech-djreceiver 0003:046D:C517.0007: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.5-1/input0
[  342.153860][ T5860] usb 6-1: USB disconnect, device number 11
[  344.500750][ T9074] sd 0:0:1:0: device reset
[  346.502308][ T9087] ip6gre0: Master is either lo or non-ether device
[  347.857517][ T9102] loop0: detected capacity change from 0 to 1024
[  348.074185][ T9102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.965303][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.919369][ T9130] Cannot find set identified by id 0 to match
[  351.675485][ T9131] ip6gre0: Master is either lo or non-ether device
[  353.916793][ T9159] loop2: detected capacity change from 0 to 1024
[  354.151650][ T9159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.162819][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.344375][ T9183] gfs2: not a GFS2 filesystem
[  359.311666][ T9189] netlink: 80 bytes leftover after parsing attributes in process `syz.1.920'.
[  360.246667][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'.
[  360.456267][ T5144] Bluetooth: hci5: unexpected event for opcode 0x0000
[  361.132479][ T9213] loop1: detected capacity change from 0 to 1024
[  361.410157][ T9213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.831579][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.930'.
[  363.360377][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.538433][ T9249] Cannot find set identified by id 0 to match
[  364.489240][ T5144] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  364.499393][ T5144] Bluetooth: hci5: Injecting HCI hardware error event
[  364.512797][ T5833] Bluetooth: hci5: hardware error 0x00
[  365.490780][ T9262] netlink: 80 bytes leftover after parsing attributes in process `syz.5.936'.
[  366.192405][ T9269] ip6gre0: Master is either lo or non-ether device
[  366.471269][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.936'.
[  366.619707][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  372.478084][ T9324] nvme_fabrics: missing parameter 'transport=%s'
[  372.484474][ T9324] nvme_fabrics: missing parameter 'nqn=%s'
[  376.368091][ T5910] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  376.528197][ T9358] nvme_fabrics: missing parameter 'transport=%s'
[  376.534940][ T9358] nvme_fabrics: missing parameter 'nqn=%s'
[  378.415379][ T5880] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  378.595178][ T5880] usb 2-1: Using ep0 maxpacket: 16
[  378.623372][ T5880] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.901983][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.915015][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  379.062029][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0
[  379.213405][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  379.261806][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.426281][ T5880] usb 2-1: config 0 descriptor??
[  380.677819][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  380.931720][ T9403] nvme_fabrics: missing parameter 'transport=%s'
[  380.939163][ T9403] nvme_fabrics: missing parameter 'nqn=%s'
[  381.696458][ T5880] logitech-djreceiver 0003:046D:C517.0008: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0
[  381.874027][ T5880] usb 2-1: USB disconnect, device number 24
[  382.958184][ T9417] netlink: 'syz.0.985': attribute type 4 has an invalid length.
[  383.076651][ T9417] netlink: 'syz.0.985': attribute type 4 has an invalid length.
[  383.468563][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.483487][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.492915][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.504406][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.516198][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  383.523557][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.784954][ T5882] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  383.935391][ T5882] usb 2-1: Using ep0 maxpacket: 16
[  384.024283][ T5882] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  384.101302][ T9424] chnl_net:caif_netlink_parms(): no params data found
[  384.134867][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[  384.151755][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  384.213650][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.296536][ T5882] usb 2-1: config 0 descriptor??
[  385.039061][ T5882] logitech-djreceiver 0003:046D:C517.0009: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0
[  385.767387][ T5882] usb 2-1: USB disconnect, device number 25
[  385.805052][ T5833] Bluetooth: hci1: command tx timeout
[  387.770449][ T9465] netlink: 48 bytes leftover after parsing attributes in process `syz.1.996'.
[  388.347284][ T5144] Bluetooth: hci1: command tx timeout
[  388.521910][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.560387][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.569871][ T9424] bridge_slave_0: entered allmulticast mode
[  388.578979][ T9424] bridge_slave_0: entered promiscuous mode
[  388.586661][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.593769][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.601044][ T9424] bridge_slave_1: entered allmulticast mode
[  388.607947][ T9424] bridge_slave_1: entered promiscuous mode
[  388.695644][ T9473] nvme_fabrics: missing parameter 'transport=%s'
[  388.702041][ T9473] nvme_fabrics: missing parameter 'nqn=%s'
[  390.766923][ T5833] Bluetooth: hci1: command tx timeout
[  391.093630][ T1103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.120230][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.152232][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.238380][ T9424] team0: Port device team_slave_0 added
[  391.275254][ T5882] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  391.533804][ T5881] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  391.553528][ T1103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.572838][ T9424] team0: Port device team_slave_1 added
[  391.640603][ T1103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.704720][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.752211][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.835509][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.848830][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.857449][ T5882] usb 6-1: Using ep0 maxpacket: 16
[  391.864727][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  391.876692][ T5882] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.887742][ T5881] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  391.899736][ T5882] usb 6-1: config 0 interface 0 has no altsetting 0
[  391.913803][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.940151][ T5882] usb 6-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  391.953019][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.956766][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.973521][ T5881] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  391.983015][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.991130][ T5881] usb 2-1: Product: syz
[  392.000116][ T5881] usb 2-1: Manufacturer: syz
[  392.010260][ T5882] usb 6-1: config 0 descriptor??
[  392.016292][ T5881] usb 2-1: SerialNumber: syz
[  392.041462][ T1103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.136349][ T9424] hsr_slave_0: entered promiscuous mode
[  392.167129][ T9424] hsr_slave_1: entered promiscuous mode
[  392.173501][ T9424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  392.182023][ T9424] Cannot create hsr debugfs directory
[  392.244151][ T9490] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  392.385875][ T1103] bridge_slave_1: left allmulticast mode
[  392.394898][ T1103] bridge_slave_1: left promiscuous mode
[  392.408252][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.421618][ T1103] bridge_slave_0: left allmulticast mode
[  392.430065][ T1103] bridge_slave_0: left promiscuous mode
[  392.439177][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.458637][ T5882] logitech-djreceiver 0003:046D:C517.000A: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.5-1/input0
[  392.806130][ T5144] Bluetooth: hci1: command tx timeout
[  393.599820][ T5882] usb 6-1: USB disconnect, device number 12
[  393.922342][ T9511] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  394.191983][ T5881] cdc_ncm 2-1:1.0: failed to get mac address
[  394.199614][ T5881] cdc_ncm 2-1:1.0: bind() failure
[  394.215159][ T5881] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  394.225378][ T5881] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  394.259983][ T5881] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  394.297268][ T9514] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1009'.
[  394.531094][ T5881] usb 2-1: USB disconnect, device number 26
[  395.031968][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  395.070465][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  395.089532][ T1103] bond0 (unregistering): Released all slaves
[  395.102670][ T1103] bond1 (unregistering): Released all slaves
[  396.999542][ T9424] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  397.082780][ T9424] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  397.925268][ T9424] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  398.050422][ T9424] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  398.327506][ T1103] hsr_slave_0: left promiscuous mode
[  398.401324][ T1103] hsr_slave_1: left promiscuous mode
[  398.508685][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.537431][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.576423][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.583975][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.691138][ T1103] veth1_macvtap: left promiscuous mode
[  398.714573][ T1103] veth0_macvtap: left promiscuous mode
[  398.742243][ T1103] veth1_vlan: left promiscuous mode
[  398.762919][ T1103] veth0_vlan: left promiscuous mode
[  399.565429][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  399.780691][ T9583] sd 0:0:1:0: device reset
[  400.409508][ T1103] team0 (unregistering): Port device vlan0 removed
[  400.743302][ T1103] team0 (unregistering): Port device team_slave_1 removed
[  400.792114][ T1103] team0 (unregistering): Port device team_slave_0 removed
[  402.989807][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.023395][ T9608] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1028'.
[  403.039205][ T9424] 8021q: adding VLAN 0 to HW filter on device team0
[  403.084121][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.091318][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.192564][ T9615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1028'.
[  403.223636][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.231786][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.120650][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.987004][ T9662] sd 0:0:1:0: device reset
[  408.423503][ T9424] veth0_vlan: entered promiscuous mode
[  408.440674][ T9424] veth1_vlan: entered promiscuous mode
[  408.503471][ T9424] veth0_macvtap: entered promiscuous mode
[  408.518664][ T9424] veth1_macvtap: entered promiscuous mode
[  408.576810][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.615122][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.634832][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.654564][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.664537][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.675701][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.686199][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.697052][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.708839][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.721249][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.731883][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.743818][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.754559][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.765261][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.776658][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.786783][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.798068][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.819596][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.896823][ T9424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.915235][ T9424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.959480][ T9424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.024846][ T9424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.772466][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.788395][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.862525][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.939047][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.142792][ T9749] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1054'.
[  414.943596][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1054'.
[  415.332754][ T9778] rtc_cmos 00:00: Alarms can be up to one day in the future
[  421.680606][ T9856] No such timeout policy "syz0"
[  421.875923][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'.
[  424.394954][ T9890] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1082'.
[  425.508331][ T9893] netlink: 'syz.2.1083': attribute type 10 has an invalid length.
[  425.757141][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.764454][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.808015][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'.
[  425.865475][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.872758][ T9893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.880235][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.887392][ T9893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.518692][ T9893] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  426.582456][ T9899] bridge_slave_1: left allmulticast mode
[  426.636136][ T9899] bridge_slave_1: left promiscuous mode
[  426.662313][ T9899] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.694322][ T9899] bridge_slave_0: left allmulticast mode
[  426.700562][ T9899] bridge_slave_0: left promiscuous mode
[  426.712590][ T9899] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.158879][ T9899] bond0: (slave bridge0): Releasing backup interface
[  428.555211][ T9920] syz.6.1090 (9920): drop_caches: 2
[  428.707078][ T9920] syz.6.1090 (9920): drop_caches: 2
[  430.700431][ T9948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1096'.
[  434.925411][ T5878] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  435.135616][T10001] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1109'.
[  435.204393][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'.
[  435.217839][T10002] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.217929][T10002] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.217959][T10002] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.217988][T10002] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.218714][T10002] vxlan0: entered promiscuous mode
[  436.270410][ T5878] usb 7-1: Using ep0 maxpacket: 32
[  436.293691][ T5878] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  436.627346][ T5878] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  436.665105][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.727513][ T5878] usb 7-1: Product: syz
[  436.834630][ T5878] usb 7-1: Manufacturer: syz
[  436.868349][T10014] syz.2.1111 (10014): drop_caches: 2
[  436.876683][T10014] syz.2.1111 (10014): drop_caches: 2
[  436.924975][ T5878] usb 7-1: SerialNumber: syz
[  437.132872][ T5878] usb 7-1: can't set config #2, error -71
[  437.319660][ T5878] usb 7-1: USB disconnect, device number 2
[  437.670437][T10035] netlink: 'syz.2.1116': attribute type 4 has an invalid length.
[  440.212565][ T5878] hid (null): usage index exceeded
[  440.353066][ T5878] hid (null): unknown global tag 0xd
[  440.528925][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.622830][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  440.623611][T10072] atomic_op ffff888063006198 conn xmit_atomic 0000000000000000
[  440.637624][ T5878] hid (null): unknown global tag 0xd
[  440.642948][ T5878] hid (null): bogus close delimiter
[  440.643270][T10072] usb usb5: usbfs: process 10072 (syz.6.1128) did not claim interface 4 before use
[  440.649093][ T5878] hid (null): invalid report_count 21456
[  440.669064][ T5878] hid-generic 0003:0008:0002.000B: unknown main item tag 0x4
[  440.704949][ T5878] hid-generic 0003:0008:0002.000B: ignoring exceeding usage max
[  440.737405][ T5878] hid-generic 0003:0008:0002.000B: usage index exceeded
[  440.766713][ T5878] hid-generic 0003:0008:0002.000B: item 0 2 2 0 parsing failed
[  440.922344][ T5878] hid-generic 0003:0008:0002.000B: probe with driver hid-generic failed with error -22
[  445.314612][T10121] atomic_op ffff888059a0b998 conn xmit_atomic 0000000000000000
[  445.349544][T10121] usb usb5: usbfs: process 10121 (syz.5.1140) did not claim interface 4 before use
[  446.030739][T10134] ------------[ cut here ]------------
[  446.036710][T10134] do not call blocking ops when !TASK_RUNNING; state=2 set at [<ffffffff8177c166>] prepare_to_wait+0x186/0x210
[  446.338617][T10134] WARNING: CPU: 1 PID: 10134 at kernel/sched/core.c:8685 __might_sleep+0xb9/0xe0
[  446.348121][T10134] Modules linked in:
[  446.352071][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.2.1143 Not tainted 6.12.0-next-20241128-syzkaller #0
[  446.362075][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  446.372795][T10134] RIP: 0010:__might_sleep+0xb9/0xe0
[  446.378630][T10134] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 ae 30 9b 00 48 8b 4d 00 48 c7 c7 e0 2d 0a 8c 44 89 ee 48 89 ca e8 08 e6 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff
[  446.398334][T10134] RSP: 0000:ffffc900040b65a8 EFLAGS: 00010246
[  446.404431][T10134] RAX: ecd034cccbe14300 RBX: 1ffff11004f9fe2d RCX: 0000000000080000
[  446.412664][T10134] RDX: ffffc9000ca2b000 RSI: 0000000000006f94 RDI: 0000000000006f95
[  446.420769][T10134] RBP: ffff888027cff168 R08: ffffffff81601ea2 R09: fffffbfff1cfa220
[  446.428794][T10134] R10: dffffc0000000000 R11: fffffbfff1cfa220 R12: dffffc0000000000
[  446.436856][T10134] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1ca1a0
[  446.444878][T10134] FS:  00007f22c12c86c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  446.453828][T10134] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  446.460705][T10134] CR2: 00007f0ad7cbd0d0 CR3: 000000006c022000 CR4: 00000000003526f0
[  446.468765][T10134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  446.477376][T10134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  446.485965][T10134] Call Trace:
[  446.489268][T10134]  <TASK>
[  446.492212][T10134]  ? __warn+0x165/0x4d0
[  446.496441][T10134]  ? __might_sleep+0xb9/0xe0
[  446.501089][T10134]  ? report_bug+0x2b3/0x500
[  446.505661][T10134]  ? __might_sleep+0xb9/0xe0
[  446.510275][T10134]  ? handle_bug+0x60/0x90
[  446.514622][T10134]  ? exc_invalid_op+0x1a/0x50
[  446.519368][T10134]  ? asm_exc_invalid_op+0x1a/0x20
[  446.524417][T10134]  ? __warn_printk+0x292/0x360
[  446.529260][T10134]  ? __might_sleep+0xb9/0xe0
[  446.533882][T10134]  ? __might_sleep+0xb8/0xe0
[  446.538588][T10134]  netfs_retry_reads+0xde/0x1e10
[  446.543555][T10134]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  446.549610][T10134]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  446.556038][T10134]  ? __pfx_netfs_retry_reads+0x10/0x10
[  446.561534][T10134]  ? netfs_read_collection+0x3344/0x4020
[  446.567222][T10134]  netfs_read_collection+0x334e/0x4020
[  446.573289][T10134]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  446.579821][T10134]  ? lockdep_hardirqs_on+0x99/0x150
[  446.585096][T10134]  netfs_wait_for_read+0x2ba/0x4e0
[  446.590228][T10134]  ? trace_netfs_sreq_ref+0x94/0x230
[  446.595567][T10134]  ? __pfx_netfs_wait_for_read+0x10/0x10
[  446.601218][T10134]  ? __pfx_autoremove_wake_function+0x10/0x10
[  446.607348][T10134]  ? __pfx_v9fs_issue_read+0x10/0x10
[  446.612657][T10134]  ? iov_iter_iovec_advance+0x1fc/0x2c0
[  446.618254][T10134]  netfs_unbuffered_read_iter_locked+0x11fc/0x1540
[  446.624866][T10134]  netfs_unbuffered_read_iter+0xbf/0xe0
[  446.630434][T10134]  __kernel_read+0x513/0x9d0
[  446.635174][T10134]  ? do_sys_openat2+0x13e/0x1d0
[  446.640052][T10134]  ? __pfx___kernel_read+0x10/0x10
[  446.645281][T10134]  integrity_kernel_read+0xb0/0x100
[  446.650517][T10134]  ? __pfx_integrity_kernel_read+0x10/0x10
[  446.656421][T10134]  ? __kmalloc_cache_noprof+0x243/0x390
[  446.661994][T10134]  ? ima_calc_file_hash+0xaae/0x1b30
[  446.667470][T10134]  ima_calc_file_hash+0xae6/0x1b30
[  446.672620][T10134]  ? p9_client_stat+0x1be/0x280
[  446.678082][T10134]  ? v9fs_vfs_getattr+0x1c0/0x370
[  446.683125][T10134]  ? ima_collect_measurement+0x2b1/0xb10
[  446.689294][T10134]  ? process_measurement+0x1351/0x1fb0
[  446.694847][T10134]  ? ima_file_check+0xd9/0x120
[  446.699630][T10134]  ? security_file_post_open+0xb9/0x280
[  446.705259][T10134]  ? path_openat+0x2ccd/0x3590
[  446.710053][T10134]  ? do_filp_open+0x27f/0x4e0
[  446.714784][T10134]  ? __x64_sys_open+0x225/0x270
[  446.719649][T10134]  ? do_syscall_64+0xf3/0x230
[  446.724342][T10134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.730602][T10134]  ? __pfx_ima_calc_file_hash+0x10/0x10
[  446.736261][T10134]  ? p9_client_stat+0x1be/0x280
[  446.741147][T10134]  ? kfree+0x196/0x430
[  446.745298][T10134]  ? p9_client_stat+0x1be/0x280
[  446.750190][T10134]  ? p9_client_stat+0x1be/0x280
[  446.755164][T10134]  ? __pfx_p9_client_stat+0x10/0x10
[  446.760393][T10134]  ? v9fs_fid_lookup+0x1b2/0xf30
[  446.765416][T10134]  ? v9fs_vfs_getattr+0x2eb/0x370
[  446.770475][T10134]  ima_collect_measurement+0x520/0xb10
[  446.776011][T10134]  ? __pfx_ima_collect_measurement+0x10/0x10
[  446.782616][T10134]  ? rcu_is_watching+0x15/0xb0
[  446.788023][T10134]  ? trace_contention_end+0x3c/0x120
[  446.793363][T10134]  ? __asan_memset+0x23/0x50
[  446.798043][T10134]  ? ima_get_hash_algo+0x156/0x4d0
[  446.803180][T10134]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  446.808766][T10134]  process_measurement+0x1351/0x1fb0
[  446.814100][T10134]  ? __pfx_process_measurement+0x10/0x10
[  446.819797][T10134]  ? do_raw_spin_lock+0x14f/0x370
[  446.824962][T10134]  ? __pfx_v9fs_file_open+0x10/0x10
[  446.830190][T10134]  ? do_raw_spin_unlock+0x13c/0x8b0
[  446.835460][T10134]  ? inode_to_bdi+0x69/0xf0
[  446.839990][T10134]  ? apparmor_current_getlsmprop_subj+0xde/0x160
[  446.846439][T10134]  ima_file_check+0xd9/0x120
[  446.851068][T10134]  ? __pfx_ima_file_check+0x10/0x10
[  446.856338][T10134]  security_file_post_open+0xb9/0x280
[  446.861740][T10134]  path_openat+0x2ccd/0x3590
[  446.866440][T10134]  ? __pfx_path_openat+0x10/0x10
[  446.871433][T10134]  do_filp_open+0x27f/0x4e0
[  446.875998][T10134]  ? __pfx_do_filp_open+0x10/0x10
[  446.881585][T10134]  ? do_raw_spin_lock+0x14f/0x370
[  446.887276][T10134]  do_sys_openat2+0x13e/0x1d0
[  446.891994][T10134]  ? __pfx_do_sys_openat2+0x10/0x10
[  446.897260][T10134]  ? mntput_no_expire+0x246/0x850
[  446.902335][T10134]  __x64_sys_open+0x225/0x270
[  446.907109][T10134]  ? __pfx___x64_sys_open+0x10/0x10
[  446.912340][T10134]  ? do_syscall_64+0x100/0x230
[  446.917194][T10134]  ? do_syscall_64+0xb6/0x230
[  446.921902][T10134]  do_syscall_64+0xf3/0x230
[  446.926469][T10134]  ? clear_bhb_loop+0x35/0x90
[  446.931186][T10134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.937159][T10134] RIP: 0033:0x7f22c0580809
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  446.941616][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.961286][T10134] RSP: 002b:00007f22c12c8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  446.969985][T10134] RAX: ffffffffffffffda RBX: 00007f22c0745fa0 RCX: 00007f22c0580809
[  446.978053][T10134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340
[  446.987189][T10134] RBP: 00007f22c05f393e R08: 0000000000000000 R09: 0000000000000000
[  446.995245][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  447.003242][T10134] R13: 0000000000000000 R14: 00007f22c0745fa0 R15: 00007ffd6e6f68d8
[  447.011319][T10134]  </TASK>
[  447.014373][T10134] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  447.021673][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.2.1143 Not tainted 6.12.0-next-20241128-syzkaller #0
[  447.031584][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  447.041654][T10134] Call Trace:
[  447.044944][T10134]  <TASK>
[  447.047875][T10134]  dump_stack_lvl+0x241/0x360
[  447.052558][T10134]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.057757][T10134]  ? __pfx__printk+0x10/0x10
[  447.062344][T10134]  ? _printk+0xd5/0x120
[  447.066500][T10134]  ? __init_begin+0x41000/0x41000
[  447.071524][T10134]  ? vscnprintf+0x5d/0x90
[  447.075857][T10134]  panic+0x349/0x880
[  447.079750][T10134]  ? __warn+0x174/0x4d0
[  447.083914][T10134]  ? __pfx_panic+0x10/0x10
[  447.088356][T10134]  __warn+0x344/0x4d0
[  447.092338][T10134]  ? __might_sleep+0xb9/0xe0
[  447.096925][T10134]  report_bug+0x2b3/0x500
[  447.101256][T10134]  ? __might_sleep+0xb9/0xe0
[  447.105880][T10134]  handle_bug+0x60/0x90
[  447.110064][T10134]  exc_invalid_op+0x1a/0x50
[  447.114567][T10134]  asm_exc_invalid_op+0x1a/0x20
[  447.119423][T10134] RIP: 0010:__might_sleep+0xb9/0xe0
[  447.124625][T10134] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 ae 30 9b 00 48 8b 4d 00 48 c7 c7 e0 2d 0a 8c 44 89 ee 48 89 ca e8 08 e6 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff
[  447.144236][T10134] RSP: 0000:ffffc900040b65a8 EFLAGS: 00010246
[  447.150308][T10134] RAX: ecd034cccbe14300 RBX: 1ffff11004f9fe2d RCX: 0000000000080000
[  447.158276][T10134] RDX: ffffc9000ca2b000 RSI: 0000000000006f94 RDI: 0000000000006f95
[  447.166249][T10134] RBP: ffff888027cff168 R08: ffffffff81601ea2 R09: fffffbfff1cfa220
[  447.174215][T10134] R10: dffffc0000000000 R11: fffffbfff1cfa220 R12: dffffc0000000000
[  447.182181][T10134] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1ca1a0
[  447.190163][T10134]  ? __warn_printk+0x292/0x360
[  447.194952][T10134]  ? __might_sleep+0xb8/0xe0
[  447.199552][T10134]  netfs_retry_reads+0xde/0x1e10
[  447.204487][T10134]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  447.210465][T10134]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  447.216797][T10134]  ? __pfx_netfs_retry_reads+0x10/0x10
[  447.222257][T10134]  ? netfs_read_collection+0x3344/0x4020
[  447.227893][T10134]  netfs_read_collection+0x334e/0x4020
[  447.233360][T10134]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  447.239347][T10134]  ? lockdep_hardirqs_on+0x99/0x150
[  447.244555][T10134]  netfs_wait_for_read+0x2ba/0x4e0
[  447.249661][T10134]  ? trace_netfs_sreq_ref+0x94/0x230
[  447.254950][T10134]  ? __pfx_netfs_wait_for_read+0x10/0x10
[  447.260584][T10134]  ? __pfx_autoremove_wake_function+0x10/0x10
[  447.266647][T10134]  ? __pfx_v9fs_issue_read+0x10/0x10
[  447.271934][T10134]  ? iov_iter_iovec_advance+0x1fc/0x2c0
[  447.277480][T10134]  netfs_unbuffered_read_iter_locked+0x11fc/0x1540
[  447.283990][T10134]  netfs_unbuffered_read_iter+0xbf/0xe0
[  447.289535][T10134]  __kernel_read+0x513/0x9d0
[  447.294130][T10134]  ? do_sys_openat2+0x13e/0x1d0
[  447.298986][T10134]  ? __pfx___kernel_read+0x10/0x10
[  447.304116][T10134]  integrity_kernel_read+0xb0/0x100
[  447.309314][T10134]  ? __pfx_integrity_kernel_read+0x10/0x10
[  447.315119][T10134]  ? __kmalloc_cache_noprof+0x243/0x390
[  447.320664][T10134]  ? ima_calc_file_hash+0xaae/0x1b30
[  447.325951][T10134]  ima_calc_file_hash+0xae6/0x1b30
[  447.331064][T10134]  ? p9_client_stat+0x1be/0x280
[  447.335917][T10134]  ? v9fs_vfs_getattr+0x1c0/0x370
[  447.340942][T10134]  ? ima_collect_measurement+0x2b1/0xb10
[  447.346576][T10134]  ? process_measurement+0x1351/0x1fb0
[  447.352030][T10134]  ? ima_file_check+0xd9/0x120
[  447.356791][T10134]  ? security_file_post_open+0xb9/0x280
[  447.362334][T10134]  ? path_openat+0x2ccd/0x3590
[  447.367109][T10134]  ? do_filp_open+0x27f/0x4e0
[  447.371799][T10134]  ? __x64_sys_open+0x225/0x270
[  447.376651][T10134]  ? do_syscall_64+0xf3/0x230
[  447.381328][T10134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.387401][T10134]  ? __pfx_ima_calc_file_hash+0x10/0x10
[  447.392973][T10134]  ? p9_client_stat+0x1be/0x280
[  447.397832][T10134]  ? kfree+0x196/0x430
[  447.401906][T10134]  ? p9_client_stat+0x1be/0x280
[  447.406761][T10134]  ? p9_client_stat+0x1be/0x280
[  447.411614][T10134]  ? __pfx_p9_client_stat+0x10/0x10
[  447.416818][T10134]  ? v9fs_fid_lookup+0x1b2/0xf30
[  447.421762][T10134]  ? v9fs_vfs_getattr+0x2eb/0x370
[  447.426789][T10134]  ima_collect_measurement+0x520/0xb10
[  447.432264][T10134]  ? __pfx_ima_collect_measurement+0x10/0x10
[  447.438250][T10134]  ? rcu_is_watching+0x15/0xb0
[  447.443014][T10134]  ? trace_contention_end+0x3c/0x120
[  447.448303][T10134]  ? __asan_memset+0x23/0x50
[  447.452900][T10134]  ? ima_get_hash_algo+0x156/0x4d0
[  447.458012][T10134]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  447.463476][T10134]  process_measurement+0x1351/0x1fb0
[  447.468776][T10134]  ? __pfx_process_measurement+0x10/0x10
[  447.474406][T10134]  ? do_raw_spin_lock+0x14f/0x370
[  447.479452][T10134]  ? __pfx_v9fs_file_open+0x10/0x10
[  447.484670][T10134]  ? do_raw_spin_unlock+0x13c/0x8b0
[  447.489866][T10134]  ? inode_to_bdi+0x69/0xf0
[  447.494429][T10134]  ? apparmor_current_getlsmprop_subj+0xde/0x160
[  447.500776][T10134]  ima_file_check+0xd9/0x120
[  447.505375][T10134]  ? __pfx_ima_file_check+0x10/0x10
[  447.510583][T10134]  security_file_post_open+0xb9/0x280
[  447.515957][T10134]  path_openat+0x2ccd/0x3590
[  447.520579][T10134]  ? __pfx_path_openat+0x10/0x10
[  447.525539][T10134]  do_filp_open+0x27f/0x4e0
[  447.530054][T10134]  ? __pfx_do_filp_open+0x10/0x10
[  447.535077][T10134]  ? do_raw_spin_lock+0x14f/0x370
[  447.540121][T10134]  do_sys_openat2+0x13e/0x1d0
[  447.544800][T10134]  ? __pfx_do_sys_openat2+0x10/0x10
[  447.549993][T10134]  ? mntput_no_expire+0x246/0x850
[  447.555025][T10134]  __x64_sys_open+0x225/0x270
[  447.559703][T10134]  ? __pfx___x64_sys_open+0x10/0x10
[  447.564907][T10134]  ? do_syscall_64+0x100/0x230
[  447.569679][T10134]  ? do_syscall_64+0xb6/0x230
[  447.574353][T10134]  do_syscall_64+0xf3/0x230
[  447.578853][T10134]  ? clear_bhb_loop+0x35/0x90
[  447.583533][T10134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.589424][T10134] RIP: 0033:0x7f22c0580809
[  447.593837][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.613453][T10134] RSP: 002b:00007f22c12c8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  447.621875][T10134] RAX: ffffffffffffffda RBX: 00007f22c0745fa0 RCX: 00007f22c0580809
[  447.629858][T10134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340
[  447.637833][T10134] RBP: 00007f22c05f393e R08: 0000000000000000 R09: 0000000000000000
[  447.645805][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  447.653775][T10134] R13: 0000000000000000 R14: 00007f22c0745fa0 R15: 00007ffd6e6f68d8
[  447.661762][T10134]  </TASK>
[  447.665065][T10134] Kernel Offset: disabled
[  447.669446][T10134] Rebooting in 86400 seconds..