last executing test programs:

4.054545775s ago: executing program 3 (id=2597):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r1, 0x7fffffff)
sendmmsg$inet_sctp(r1, &(0x7f0000001b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000084007ade65664e1d7e9f0000000000000000000000000001"], 0x20}], 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x4f)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="3a583ef06edd358890c626e56402cb91e0dcdd13f4f3cd4ae2aa2db3d3e68ab05d69032abf706a878912e2bd533c74e72151862a76dbc85fe2b3dc9148ed5e803fd7fcda934708c6aced7a1c05e98b9426fa2cda144aa9f89e7c1ab1b82146e5e05186624f071845611d78ed664d32da52af1d5cdff77764df44ce4bc378efaaed07f6dd", 0x84}, {&(0x7f00000004c0)="06aa509ef4b3f230b486b9b3d572c6d282dd2e576c13879d1989ebb81e051b7c343b4744452a8f7744ea9b85fab33145fb878d51454d6710b1d1aadc9d3ca427355dd01bcd9824489cbc72dfc5e7e47896b3c86c89e1edd78912a5754f87b2f2b997ff4c59fd5a4b4f20a2a245dc7b323b088a37948b242c7c9de5641f65138398e8c11e940f6e312a7e605cad6d6a522005abe15a", 0x95}], 0x2, &(0x7f0000000040), 0x0, 0x40004}}], 0x1, 0x0)
pipe(0x0)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000000c0))
timer_gettime(0x0, &(0x7f0000000480))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1100, &(0x7f0000000380)={0x1, 0xf5, 0x20000}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ftruncate(r6, 0xc17a)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)="f7", 0x1}, {&(0x7f0000000580)="e77f3a33f9e22c140e2d2d608afa1f71290be9", 0x13}, {&(0x7f0000000600)="ece3da80828e2f45572aaddf2486edf327839f635e05bfedc025b436f1e2d3f5be2e82765263378087cd34390a03c975ca9985d30bb7b948fa6d018c304c439702816cf3826db45139ea0e8e", 0x4c}], 0x3, 0x0, 0x0, 0xc880}, 0x200408c0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064000000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0)
syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)

3.978493348s ago: executing program 1 (id=2599):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
getgroups(0x0, 0x0)

3.978002134s ago: executing program 3 (id=2600):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
syz_usb_disconnect(r0)
r2 = syz_open_dev$amidi(&(0x7f00000000c0), 0x6, 0x96103)
ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000440)={{r1}, "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"})

3.968964443s ago: executing program 1 (id=2601):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)=ANY=[], 0x2198}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg$unix(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x82, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007e40), 0x4000000000000aa, 0x0)

3.083214424s ago: executing program 1 (id=2604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x6, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48)
socket$rxrpc(0x21, 0x2, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000e000000600000008000300", @ANYRES32=<r5=>r4, @ANYBLOB="080005000200"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24060951}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)={<r6=>0xffffffffffffffff})
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
sendto$inet6(r7, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc397", 0x9d, 0xc001, 0x0, 0x0)
sendmsg$inet6(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000340), 0x4)
r8 = socket$unix(0x1, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000580)=ANY=[@ANYRES8=r7, @ANYRESDEC=r7, @ANYRES32=r8, @ANYRES64=r5, @ANYRESDEC, @ANYRES64=r0, @ANYRESHEX=r3], 0x28)
r9 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r9, &(0x7f0000000300)="e229fc04553d512e813124f99b80d5326782df004e2e54705982f0cb77cbbd52fceda2a7fedf3595e4ab7737f1e7fde3c3892bf4f107e2131e94fd9810ed68f7c9c22efc8c8cfa17fe00336361fee07d9d50c4c13b5e5bfba541a8d0ce278affdcd0625e649d17829a2d5a63131de996e92909871f6b01ec1b1a04375b96e2ce5b9100f6ff0000000000000000000000000087941817a3496c400d95b24a55f53551c1699ec7868f36f10fa2c68a03592e3c4a48f8a21715120bf6f4126e3747d1359e39cf6e095718ef36e2f61dbad20f8b3d4ee9cf4b55a1487835021d520ab85ef59b60580b4ed75e727bd76f47ab6bb2e631e1a1a45ab2d0db275cc3633f12aa7ce126c318616bb54f9bae2e2311daad7b254448e552bda71cdc3aa6fe18537822d6fc30114d83bfd5d6aa027f0a146206ceead6d5b347619419d5881ee325672b7476afcdfade51b9ae568b40c2fc91a52d29c7e5e596610cb36edc8116000dd8a93a9551f7d7d2d62a56939938a171c1ed960f59a6e013e557fad71b3b8986d14dbaf649f5340f75ffa296eec9d8b788623901aca301c07124efee955f1a7cde6c8931b13b3eb3ec", 0xffffff6d, 0x4048041, 0x0, 0x0)
socket(0x21, 0x2, 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r3, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x8000)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

2.987843817s ago: executing program 0 (id=2606):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)=ANY=[], 0x2198}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110, 0x1, "e4"}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg$unix(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x82, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007e40), 0x4000000000000aa, 0x0)

2.373725127s ago: executing program 3 (id=2612):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)=ANY=[], 0x2198}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110, 0x1, "e4"}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg$unix(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x82, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007e40), 0x4000000000000aa, 0x0)

2.207531825s ago: executing program 2 (id=2615):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)=ANY=[], 0x2198}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110, 0x1, "e4"}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg$unix(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x82, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007e40), 0x4000000000000aa, 0x0)

2.062103826s ago: executing program 0 (id=2616):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000a1401000000000000000000080001000000000008020300000000000800150000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x11, r1, 0x0)
io_setup(0x1, &(0x7f00000004c0))
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x4)
read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020)
shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil)
preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0)
r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\b\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
execve(&(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)=[&(0x7f0000000740)='+?\xb2>\xec\xcb\xe2', &(0x7f0000000600)='\x00', &(0x7f0000000640)=')\x00', &(0x7f0000000b80)='\x9a\xa0\x1d\xd4\xc0\x87\xa5\x96\xf5\xeb\x9a\x98\xe4\xe4n\x1dR\x00$\rP;\xbe\x85\xa3\xc4\xa3\x96Tr\x7f\xa0\xe9\xcb\x1du\xa5@@\x1d\x95\xfc\xbb(\x9c1\x80\xe7:\xdc\xea\xc4\x1f4>7\x12\xcb\r\x7f\x90\xee\xce\x9b\xedG\x82v\xc9VB\x1b\xd8\xfd\x87\xf6\xfe\xef\x96]\x1b v\xabR\x9f\x1b_7=\xac+r\x98\x9c\xf6\xe9\xf9\x91=Na\xb4\xba\n\xcd\xbb\xf85\x15]\xa3\xf9g\x91,', &(0x7f0000000100)='GPL\x00', &(0x7f0000000700)='net/icmp\x00', &(0x7f00000006c0)=':\x00', &(0x7f0000000780)='*\x00*:*\x00', &(0x7f0000000680)='\xcc\x8b\x9dm\xdaHn;\a\x00\x00\x00\x00\x00\x00\x00i\xf3\xa2\x89\x7f\b\xc07N\xb2\x17M!\x00\x89\xd6Sd\x806\xbf\x15\xbcR\xd0\xc8n1'], &(0x7f0000000b40))
write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffda5)
mknod$loop(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r7 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x129041, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x31f, &(0x7f0000000940)=ANY=[])
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

1.949543112s ago: executing program 0 (id=2617):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x7}, 0x10)

1.942641993s ago: executing program 0 (id=2625):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000a1401000000000000000000080001000000000008020300000000000800150000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x11, r1, 0x0)
io_setup(0x1, &(0x7f00000004c0))
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x4)
read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020)
shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil)
preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0)
r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\b\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
execve(&(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)=[&(0x7f0000000740)='+?\xb2>\xec\xcb\xe2', &(0x7f0000000600)='\x00', &(0x7f0000000640)=')\x00', &(0x7f0000000b80)='\x9a\xa0\x1d\xd4\xc0\x87\xa5\x96\xf5\xeb\x9a\x98\xe4\xe4n\x1dR\x00$\rP;\xbe\x85\xa3\xc4\xa3\x96Tr\x7f\xa0\xe9\xcb\x1du\xa5@@\x1d\x95\xfc\xbb(\x9c1\x80\xe7:\xdc\xea\xc4\x1f4>7\x12\xcb\r\x7f\x90\xee\xce\x9b\xedG\x82v\xc9VB\x1b\xd8\xfd\x87\xf6\xfe\xef\x96]\x1b v\xabR\x9f\x1b_7=\xac+r\x98\x9c\xf6\xe9\xf9\x91=Na\xb4\xba\n\xcd\xbb\xf85\x15]\xa3\xf9g\x91,', &(0x7f0000000100)='GPL\x00', &(0x7f0000000700)='net/icmp\x00', &(0x7f00000006c0)=':\x00', &(0x7f0000000780)='*\x00*:*\x00', &(0x7f0000000680)='\xcc\x8b\x9dm\xdaHn;\a\x00\x00\x00\x00\x00\x00\x00i\xf3\xa2\x89\x7f\b\xc07N\xb2\x17M!\x00\x89\xd6Sd\x806\xbf\x15\xbcR\xd0\xc8n1'], &(0x7f0000000b40))
write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffda5)
mknod$loop(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r7 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x129041, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x31f, &(0x7f0000000940)=ANY=[])
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

1.525252578s ago: executing program 3 (id=2618):
r0 = getpid()
syz_pidfd_open(r0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x2201, &(0x7f0000000100)=ANY=[])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x7}, 0x10)

1.515066464s ago: executing program 0 (id=2627):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000a1401000000000000000000080001000000000008020300000000000800150000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x11, r1, 0x0)
io_setup(0x1, &(0x7f00000004c0))
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x4)
read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020)
shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil)
preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0)
r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\b\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
execve(&(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)=[&(0x7f0000000740)='+?\xb2>\xec\xcb\xe2', &(0x7f0000000600)='\x00', &(0x7f0000000640)=')\x00', &(0x7f0000000b80)='\x9a\xa0\x1d\xd4\xc0\x87\xa5\x96\xf5\xeb\x9a\x98\xe4\xe4n\x1dR\x00$\rP;\xbe\x85\xa3\xc4\xa3\x96Tr\x7f\xa0\xe9\xcb\x1du\xa5@@\x1d\x95\xfc\xbb(\x9c1\x80\xe7:\xdc\xea\xc4\x1f4>7\x12\xcb\r\x7f\x90\xee\xce\x9b\xedG\x82v\xc9VB\x1b\xd8\xfd\x87\xf6\xfe\xef\x96]\x1b v\xabR\x9f\x1b_7=\xac+r\x98\x9c\xf6\xe9\xf9\x91=Na\xb4\xba\n\xcd\xbb\xf85\x15]\xa3\xf9g\x91,', &(0x7f0000000100)='GPL\x00', &(0x7f0000000700)='net/icmp\x00', &(0x7f00000006c0)=':\x00', &(0x7f0000000780)='*\x00*:*\x00', &(0x7f0000000680)='\xcc\x8b\x9dm\xdaHn;\a\x00\x00\x00\x00\x00\x00\x00i\xf3\xa2\x89\x7f\b\xc07N\xb2\x17M!\x00\x89\xd6Sd\x806\xbf\x15\xbcR\xd0\xc8n1'], &(0x7f0000000b40))
write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffda5)
mknod$loop(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r7 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x129041, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x31f, &(0x7f0000000940)=ANY=[])
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

1.419804594s ago: executing program 0 (id=2619):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000900)='ext4_ext_remove_space_done\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfff)
socket$l2tp(0x2, 0x2, 0x73)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, &(0x7f0000000440)=""/154, 0x9a)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(r4, &(0x7f0000000500)=""/135, 0x87)
syz_usb_disconnect(r2)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[])
r5 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r5, 0x0, 0xc, 0x0, &(0x7f00000001c0))
socket$inet_udplite(0x2, 0x2, 0x88)

1.378854335s ago: executing program 3 (id=2620):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
readv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/229, 0xe5}], 0x1)
r1 = syz_open_dev$amidi(&(0x7f00000000c0), 0x6, 0x96103)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000440)={{r0}, "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"})

1.310398738s ago: executing program 2 (id=2621):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000a14010000000000000000000800010000000000080203000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x11, r1, 0x0)
io_setup(0x1, &(0x7f00000004c0))
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x4)
read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020)
shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil)
preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0)
r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\b\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
execve(&(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)=[&(0x7f0000000740)='+?\xb2>\xec\xcb\xe2', &(0x7f0000000600)='\x00', &(0x7f0000000640)=')\x00', &(0x7f0000000b80)='\x9a\xa0\x1d\xd4\xc0\x87\xa5\x96\xf5\xeb\x9a\x98\xe4\xe4n\x1dR\x00$\rP;\xbe\x85\xa3\xc4\xa3\x96Tr\x7f\xa0\xe9\xcb\x1du\xa5@@\x1d\x95\xfc\xbb(\x9c1\x80\xe7:\xdc\xea\xc4\x1f4>7\x12\xcb\r\x7f\x90\xee\xce\x9b\xedG\x82v\xc9VB\x1b\xd8\xfd\x87\xf6\xfe\xef\x96]\x1b v\xabR\x9f\x1b_7=\xac+r\x98\x9c\xf6\xe9\xf9\x91=Na\xb4\xba\n\xcd\xbb\xf85\x15]\xa3\xf9g\x91,', &(0x7f0000000100)='GPL\x00', &(0x7f0000000700)='net/icmp\x00', &(0x7f00000006c0)=':\x00', &(0x7f0000000780)='*\x00*:*\x00', &(0x7f0000000680)='\xcc\x8b\x9dm\xdaHn;\a\x00\x00\x00\x00\x00\x00\x00i\xf3\xa2\x89\x7f\b\xc07N\xb2\x17M!\x00\x89\xd6Sd\x806\xbf\x15\xbcR\xd0\xc8n1'], &(0x7f0000000b40))
write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffda5)
mknod$loop(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r7 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x129041, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x31f, &(0x7f0000000940)=ANY=[])
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

1.219427127s ago: executing program 2 (id=2622):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000001400)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000300)="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", 0xfc0, 0x400c806, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'})
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x40010)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000064c0)=0x40)

1.090064262s ago: executing program 2 (id=2623):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)=ANY=[], 0x2198}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110, 0x1, "e4"}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg$unix(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x82, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007e40), 0x4000000000000aa, 0x0)

649.700966ms ago: executing program 1 (id=2624):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="5952d4bd4d9d5b5666ba7a844cd292c9845ca99020e22a25b08b893fc1cf14876bea655ee8cd68d0f975ee4582521f48584755eade596a38fa2ee21dd46c2663df8ee595d5e28ffb3fc471df74c7511cd6d9b893fee829e670dc53f622190587af2e7327c1960a588a1f82f8ac39dce3562f8e324e6844a50c1901a74755126b71e8565b9e3ef93c32dbc227d405505d6daadca7cf8667f7a2bd4c7dadb0f47dea9d9b7f664e9138004ef770485ff19de418a8701e50cadf0db6cb2e2f2ce7769660451308df001e4e0f17228807b5a240cf07cab9b663f75b34e739045f8068038165fca622b95731565e64525b107849f80aeb8edff2", 0xf7}, {&(0x7f0000000100)="d599a5a0", 0x4}, {&(0x7f0000000580)="398e94e2180a415d080736f7e054c660fc1fa06f48f9f5db4b57ab6ddc4780a7dd7d2a1b9e0c6a147ca39732aba5ae5a73e678410320baeb434c0685ba7cbb6d1fe8c6a7e42c6b15c5133c37fdda8377847749eb5c0241d46b05eabaabd79564a7abf979190cd266e6ebdfcf8cd6", 0x6e}, {&(0x7f0000000fc0)}], 0x4}}], 0x1, 0x0)

599.879151ms ago: executing program 1 (id=2626):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x7}, 0x10)

599.559041ms ago: executing program 1 (id=2628):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000900)='ext4_ext_remove_space_done\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfff)
socket$l2tp(0x2, 0x2, 0x73)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, &(0x7f0000000440)=""/154, 0x9a)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(r4, &(0x7f0000000500)=""/135, 0x87)
syz_usb_disconnect(r2)
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[])
r6 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r6, 0x0, 0xc, 0x0, &(0x7f00000001c0))
socket$inet_udplite(0x2, 0x2, 0x88)

251.245991ms ago: executing program 2 (id=2629):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000a1401000000000000000000080001000000000008020300000000000800150000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x11, r1, 0x0)
io_setup(0x1, &(0x7f00000004c0))
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x4)
read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020)
shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil)
preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0)
r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\b\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
execve(&(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)=[&(0x7f0000000740)='+?\xb2>\xec\xcb\xe2', &(0x7f0000000600)='\x00', &(0x7f0000000640)=')\x00', &(0x7f0000000b80)='\x9a\xa0\x1d\xd4\xc0\x87\xa5\x96\xf5\xeb\x9a\x98\xe4\xe4n\x1dR\x00$\rP;\xbe\x85\xa3\xc4\xa3\x96Tr\x7f\xa0\xe9\xcb\x1du\xa5@@\x1d\x95\xfc\xbb(\x9c1\x80\xe7:\xdc\xea\xc4\x1f4>7\x12\xcb\r\x7f\x90\xee\xce\x9b\xedG\x82v\xc9VB\x1b\xd8\xfd\x87\xf6\xfe\xef\x96]\x1b v\xabR\x9f\x1b_7=\xac+r\x98\x9c\xf6\xe9\xf9\x91=Na\xb4\xba\n\xcd\xbb\xf85\x15]\xa3\xf9g\x91,', &(0x7f0000000100)='GPL\x00', &(0x7f0000000700)='net/icmp\x00', &(0x7f00000006c0)=':\x00', &(0x7f0000000780)='*\x00*:*\x00', &(0x7f0000000680)='\xcc\x8b\x9dm\xdaHn;\a\x00\x00\x00\x00\x00\x00\x00i\xf3\xa2\x89\x7f\b\xc07N\xb2\x17M!\x00\x89\xd6Sd\x806\xbf\x15\xbcR\xd0\xc8n1'], &(0x7f0000000b40))
write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffda5)
mknod$loop(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r7 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x129041, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x31f, &(0x7f0000000940)=ANY=[])
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

169.323239ms ago: executing program 2 (id=2630):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0xc])
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240))
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000200)=[0x9a, 0x1])

0s ago: executing program 3 (id=2631):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc040aed5, &(0x7f0000000040)=ANY=[]) (fail_nth: 4)

kernel console output (not intermixed with test programs):

6cbebb #0
[  554.577336][T13426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  554.581881][T13426] Call Trace:
[  554.583349][T13426]  <TASK>
[  554.584675][T13426]  dump_stack_lvl+0x16c/0x1f0
[  554.586767][T13426]  should_fail_ex+0x497/0x5b0
[  554.588811][T13426]  ? fs_reclaim_acquire+0xae/0x160
[  554.590978][T13426]  should_failslab+0xc2/0x120
[  554.593143][T13426]  kmem_cache_alloc_node_noprof+0x71/0x310
[  554.595731][T13426]  ? __alloc_skb+0x2b3/0x380
[  554.597750][T13426]  __alloc_skb+0x2b3/0x380
[  554.599755][T13426]  ? __pfx___alloc_skb+0x10/0x10
[  554.601986][T13426]  ? __pfx___might_resched+0x10/0x10
[  554.604403][T13426]  netlink_alloc_large_skb+0x69/0x130
[  554.606804][T13426]  netlink_sendmsg+0x689/0xd70
[  554.608968][T13426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.611348][T13426]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  554.613646][T13426]  ____sys_sendmsg+0x9b4/0xb50
[  554.615747][T13426]  ? __pfx_____sys_sendmsg+0x10/0x10
[  554.618068][T13426]  ? get_compat_msghdr+0x11b/0x170
[  554.620378][T13426]  ? __pfx___lock_acquire+0x10/0x10
[  554.622699][T13426]  ___sys_sendmsg+0x135/0x1e0
[  554.624748][T13426]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.626963][T13426]  ? ksys_write+0x21c/0x260
[  554.628837][T13426]  ? __fget_light+0x173/0x210
[  554.630801][T13426]  __sys_sendmsg+0x117/0x1f0
[  554.632594][T13426]  ? __pfx___sys_sendmsg+0x10/0x10
[  554.634698][T13426]  __do_fast_syscall_32+0x73/0x120
[  554.636770][T13426]  do_fast_syscall_32+0x32/0x80
[  554.638879][T13426]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  554.641379][T13426] RIP: 0023:0xf73de579
[  554.643001][T13426] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  554.650566][T13426] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  554.653958][T13426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340
[  554.657292][T13426] RDX: 0000000024008010 RSI: 0000000000000000 RDI: 0000000000000000
[  554.660584][T13426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  554.664005][T13426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  554.667512][T13426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  554.671033][T13426]  </TASK>
[  554.724720][T12057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.758864][    T8] usb 8-1: USB disconnect, device number 86
[  554.859538][T12057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.954566][T12057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.072415][T13418] chnl_net:caif_netlink_parms(): no params data found
[  555.155323][T12057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.273236][T13418] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.277079][T13418] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.280595][T13418] bridge_slave_0: entered allmulticast mode
[  555.290441][T13418] bridge_slave_0: entered promiscuous mode
[  555.310354][T13418] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.320503][T13418] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.337171][T13418] bridge_slave_1: entered allmulticast mode
[  555.341052][T13418] bridge_slave_1: entered promiscuous mode
[  555.456494][T13418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.477954][T13418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.585325][T13418] team0: Port device team_slave_0 added
[  555.633094][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2333'.
[  555.645678][T13418] team0: Port device team_slave_1 added
[  555.739247][T13418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.742075][T13418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.766091][T13418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.771421][T12057] bridge_slave_1: left allmulticast mode
[  555.773892][T12057] bridge_slave_1: left promiscuous mode
[  555.776262][T12057] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.783747][T12057] bridge_slave_0: left allmulticast mode
[  555.785751][T12057] bridge_slave_0: left promiscuous mode
[  555.789155][T12057] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.840348][T13440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.926831][T13439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.284339][ T5407] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  556.374934][    T8] usb 8-1: new high-speed USB device number 87 using dummy_hcd
[  556.389393][ T4768] Bluetooth: hci2: command tx timeout
[  556.463931][ T5407] usb 5-1: Using ep0 maxpacket: 8
[  556.518645][ T5407] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  556.526259][ T5407] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  556.529022][ T5407] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  556.533299][ T5407] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  556.537570][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  556.541805][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  556.551187][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  556.585075][ T5407] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  556.589604][ T5407] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  556.592961][ T5407] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  556.597038][    T8] usb 8-1: Using ep0 maxpacket: 8
[  556.601119][ T5407] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  556.606254][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  556.610926][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  556.618950][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  556.626278][    T8] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  556.630242][    T8] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  556.633176][    T8] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  556.637264][    T8] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  556.643021][ T5407] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  556.646074][ T5407] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  556.648603][ T5407] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  556.652648][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  556.656941][ T5407] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  556.661833][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  556.666795][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  556.671482][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  556.673451][T12057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.675660][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  556.683915][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  556.689559][    T8] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  556.695663][    T8] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  556.700774][    T8] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  556.704063][T12057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.708671][ T5407] usb 5-1: string descriptor 0 read error: -22
[  556.714766][    T8] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  556.715941][T12057] bond0 (unregistering): Released all slaves
[  556.719907][ T5407] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  556.729683][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  556.733589][ T5407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.736521][T13418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.738158][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  556.741152][T13418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.742607][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  556.747804][ T5407] adutux 5-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  556.759816][    T8] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  556.762856][    T8] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  556.766429][    T8] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  556.772782][T13418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.776804][    T8] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  556.776820][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  556.776833][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  556.776845][    T8] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  556.804802][    T8] usb 8-1: string descriptor 0 read error: -22
[  556.807504][    T8] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  556.820270][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.845619][    T8] adutux 8-1:246.0: ADU100  now attached to /dev/usb/adutux1
[  557.161207][ T5389] usb 5-1: USB disconnect, device number 120
[  557.241266][ T1415] usb 8-1: USB disconnect, device number 87
[  557.267542][T13418] hsr_slave_0: entered promiscuous mode
[  557.280967][T13418] hsr_slave_1: entered promiscuous mode
[  557.285809][T13418] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  557.313035][T13418] Cannot create hsr debugfs directory
[  557.622115][T12057] hsr_slave_0: left promiscuous mode
[  557.627459][T12057] hsr_slave_1: left promiscuous mode
[  557.630532][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.633364][T12057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.638252][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.641244][T12057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.681820][T12057] veth1_macvtap: left promiscuous mode
[  557.685416][T12057] veth0_macvtap: left promiscuous mode
[  557.688157][T12057] veth1_vlan: left promiscuous mode
[  557.690326][T12057] veth0_vlan: left promiscuous mode
[  558.140253][   T83] smc: removing ib device ?
[  558.344197][T13498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.453761][ T4768] Bluetooth: hci2: command tx timeout
[  558.683704][ T5407] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  558.883660][ T5407] usb 5-1: Using ep0 maxpacket: 8
[  558.899681][ T5407] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  558.903065][ T5407] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  558.909278][ T5407] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  558.917878][ T5407] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  558.927356][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  558.931651][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  558.937210][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  558.944810][ T5407] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  558.948593][ T5407] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  558.951421][ T5407] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  558.956168][ T5407] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  558.960701][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  558.965964][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  558.970237][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  558.981683][ T5407] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  558.987912][ T5407] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  558.990787][ T5407] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  558.994830][ T5407] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  558.999850][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  559.004877][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  559.008948][ T5407] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  559.021066][ T5407] usb 5-1: string descriptor 0 read error: -22
[  559.026081][ T5407] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  559.040842][ T5407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.062252][ T5407] adutux 5-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  559.209208][T12057] team0 (unregistering): Port device team_slave_1 removed
[  559.309687][T12057] team0 (unregistering): Port device team_slave_0 removed
[  560.473824][ T5407] usb 5-1: USB disconnect, device number 121
[  560.536912][ T4768] Bluetooth: hci2: command tx timeout
[  560.664657][T13418] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  560.675264][T13418] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  560.711620][T13418] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  560.730763][T13418] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  560.913165][T13418] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.928045][T13418] 8021q: adding VLAN 0 to HW filter on device team0
[  560.936527][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.939818][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.949864][T12059] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.953024][T12059] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.128172][T13418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.159841][T13418] veth0_vlan: entered promiscuous mode
[  561.166479][T13418] veth1_vlan: entered promiscuous mode
[  561.184641][T13418] veth0_macvtap: entered promiscuous mode
[  561.188992][T13418] veth1_macvtap: entered promiscuous mode
[  561.200018][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.204437][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.208408][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.212346][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.217372][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.221174][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.226818][T13418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.234663][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.255412][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.259575][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.263381][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.267544][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.271818][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.275783][T13418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.280136][T13418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.286041][T13418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  561.294267][T13418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  561.301001][T13418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.313558][T13418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.314274][ T1415] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  561.316958][T13418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.408412][T12057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.411738][T12057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.432749][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.441727][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.503819][ T1415] usb 6-1: Using ep0 maxpacket: 32
[  561.512731][ T1415] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  561.524282][ T1415] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  561.528060][ T1415] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  561.542960][ T1415] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  561.548749][ T1415] usb 6-1: config 0 interface 0 has no altsetting 0
[  561.552688][ T1415] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  561.563752][ T1415] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  561.568302][ T1415] usb 6-1: Product: syz
[  561.569851][ T1415] usb 6-1: Manufacturer: syz
[  561.571604][ T1415] usb 6-1: SerialNumber: syz
[  561.582715][ T1415] usb 6-1: config 0 descriptor??
[  561.590499][ T1415] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  561.598144][ T1415] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  561.816861][ T5407] usb 6-1: USB disconnect, device number 98
[  561.819210][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  561.831188][ T5407] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  561.869138][T13581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.029327][T13547] ldusb: No device or device unplugged -19
[  562.623733][ T4768] Bluetooth: hci2: command tx timeout
[  562.831271][T13605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.946514][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  563.450778][T13622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.213579][ T5510] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  564.403684][ T5510] usb 7-1: Using ep0 maxpacket: 32
[  564.414206][ T5510] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  564.417519][ T5510] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  564.421747][ T5510] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  564.426708][ T5510] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  564.431144][ T5510] usb 7-1: config 0 interface 0 has no altsetting 0
[  564.435834][ T5510] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  564.438968][ T5510] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  564.441943][ T5510] usb 7-1: Product: syz
[  564.444060][ T5510] usb 7-1: Manufacturer: syz
[  564.446166][ T5510] usb 7-1: SerialNumber: syz
[  564.449210][ T5510] usb 7-1: config 0 descriptor??
[  564.453634][ T5510] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  564.462428][ T5510] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  564.529715][T13657] overlayfs: failed to resolve './file0': -2
[  564.587949][T13655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.675312][ T5407] usb 7-1: USB disconnect, device number 91
[  564.675403][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  564.682306][ T5407] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  564.813655][    T8] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  565.003644][    T8] usb 5-1: Using ep0 maxpacket: 32
[  565.011474][    T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  565.023808][    T8] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  565.028281][    T8] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  565.035593][    T8] usb 5-1: Product: syz
[  565.037898][    T8] usb 5-1: Manufacturer: syz
[  565.040121][    T8] usb 5-1: SerialNumber: syz
[  565.049308][    T8] usb 5-1: config 0 descriptor??
[  565.053327][T13657] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  565.374882][ T5386] usb 5-1: USB disconnect, device number 122
[  565.939301][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'.
[  566.334572][T13706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.343731][    T8] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[  566.405502][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'.
[  566.427202][T13716] FAULT_INJECTION: forcing a failure.
[  566.427202][T13716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  566.432607][T13716] CPU: 3 UID: 0 PID: 13716 Comm: syz.0.2407 Not tainted 6.11.0-rc3-syzkaller-00138-ga4a35f6cbebb #0
[  566.437097][T13716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  566.441687][T13716] Call Trace:
[  566.442938][T13716]  <TASK>
[  566.444030][T13716]  dump_stack_lvl+0x16c/0x1f0
[  566.445762][T13716]  should_fail_ex+0x497/0x5b0
[  566.447430][T13716]  _copy_from_user+0x30/0xf0
[  566.449167][T13716]  sg_new_write.isra.0+0x3e1/0xaa0
[  566.451344][T13716]  ? __pfx_sg_new_write.isra.0+0x10/0x10
[  566.452654][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2404'.
[  566.453634][T13716]  ? do_vfs_ioctl+0x515/0x1a90
[  566.453651][T13716]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  566.453662][T13716]  ? __pfx_lock_release+0x10/0x10
[  566.453695][T13716]  sg_ioctl+0x17ac/0x26c0
[  566.453719][T13716]  ? __pfx_sg_ioctl+0x10/0x10
[  566.467030][T13716]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  566.469650][T13716]  ? __fget_files+0x256/0x400
[  566.471543][T13716]  ? __pfx_sg_ioctl+0x10/0x10
[  566.473637][T13716]  compat_ptr_ioctl+0x71/0xb0
[  566.475818][T13716]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  566.478188][T13716]  __do_compat_sys_ioctl+0x2c3/0x330
[  566.480545][T13716]  __do_fast_syscall_32+0x73/0x120
[  566.482841][T13716]  do_fast_syscall_32+0x32/0x80
[  566.484878][T13716]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  566.487527][T13716] RIP: 0023:0xf73de579
[  566.489317][T13716] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  566.497618][T13716] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  566.501234][T13716] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000002285
[  566.504687][T13716] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[  566.508123][T13716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  566.511541][T13716] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  566.514825][T13716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  566.518280][T13716]  </TASK>
[  566.563561][    T8] usb 7-1: Using ep0 maxpacket: 32
[  566.575139][    T8] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  566.588296][    T8] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  566.598501][    T8] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  566.608876][    T8] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  566.622202][T13720] overlayfs: failed to resolve './file0': -2
[  566.626811][    T8] usb 7-1: config 0 interface 0 has no altsetting 0
[  566.635580][    T8] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  566.643369][    T8] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  566.661137][    T8] usb 7-1: Product: syz
[  566.663347][    T8] usb 7-1: Manufacturer: syz
[  566.666377][    T8] usb 7-1: SerialNumber: syz
[  566.671684][    T8] usb 7-1: config 0 descriptor??
[  566.676766][    T8] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  566.689259][    T8] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  566.833818][T13722] ubi0: attaching mtd0
[  566.844919][T13722] ubi0: scanning is finished
[  566.846818][T13722] ubi0: empty MTD device detected
[  566.880718][T13722] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  566.883286][T13722] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  566.886117][T13722] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  566.886303][ T5388] usb 7-1: USB disconnect, device number 92
[  566.888454][T13722] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  566.888486][T13722] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  566.888493][T13722] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  566.888501][T13722] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3699627298
[  566.888511][T13722] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  566.911957][T13723] ubi0: background thread "ubi_bgt0d" started, PID 13723
[  566.915083][ T5388] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  566.930729][T13722] ufs: You didn't specify the type of your ufs filesystem
[  566.930729][T13722] 
[  566.930729][T13722] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  566.930729][T13722] 
[  566.930729][T13722] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  566.946956][T13722] syz.1.2410: attempt to access beyond end of device
[  566.946956][T13722] loop1: rw=0, sector=16, nr_sectors = 2 limit=0
[  566.973589][ T5386] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  567.163571][ T5386] usb 5-1: Using ep0 maxpacket: 32
[  567.171069][ T5386] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  567.180659][ T5386] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  567.185047][ T5386] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  567.188703][ T5386] usb 5-1: Product: syz
[  567.190646][ T5386] usb 5-1: Manufacturer: syz
[  567.192716][ T5386] usb 5-1: SerialNumber: syz
[  567.201766][ T5386] usb 5-1: config 0 descriptor??
[  567.213671][T13720] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  567.575774][    T8] usb 5-1: USB disconnect, device number 123
[  567.775987][T13738] FAULT_INJECTION: forcing a failure.
[  567.775987][T13738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  567.782495][T13738] CPU: 1 UID: 0 PID: 13738 Comm: syz.3.2415 Not tainted 6.11.0-rc3-syzkaller-00138-ga4a35f6cbebb #0
[  567.787101][T13738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  567.791299][T13738] Call Trace:
[  567.792729][T13738]  <TASK>
[  567.793897][T13738]  dump_stack_lvl+0x16c/0x1f0
[  567.795607][T13738]  should_fail_ex+0x497/0x5b0
[  567.797586][T13738]  _copy_from_iter+0x27a/0xfc0
[  567.799605][T13738]  ? __alloc_skb+0x200/0x380
[  567.801553][T13738]  ? __pfx__copy_from_iter+0x10/0x10
[  567.803421][T13738]  ? __virt_addr_valid+0x5e/0x590
[  567.805461][T13738]  ? __phys_addr_symbol+0x30/0x80
[  567.807618][T13738]  ? __check_object_size+0x497/0x720
[  567.809872][T13738]  netlink_sendmsg+0x813/0xd70
[  567.811916][T13738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  567.813752][T13738]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  567.816389][T13738]  ____sys_sendmsg+0x9b4/0xb50
[  567.818622][T13738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  567.821049][T13738]  ? get_compat_msghdr+0x11b/0x170
[  567.823348][T13738]  ? __pfx___lock_acquire+0x10/0x10
[  567.825697][T13738]  ___sys_sendmsg+0x135/0x1e0
[  567.827829][T13738]  ? __pfx____sys_sendmsg+0x10/0x10
[  567.830158][T13738]  ? ksys_write+0x21c/0x260
[  567.832224][T13738]  ? __fget_light+0x173/0x210
[  567.834368][T13738]  __sys_sendmsg+0x117/0x1f0
[  567.836457][T13738]  ? __pfx___sys_sendmsg+0x10/0x10
[  567.838777][T13738]  __do_fast_syscall_32+0x73/0x120
[  567.841077][T13738]  do_fast_syscall_32+0x32/0x80
[  567.843274][T13738]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  567.846079][T13738] RIP: 0023:0xf7f61579
[  567.847923][T13738] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  567.856409][T13738] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  567.860124][T13738] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001ec0
[  567.863633][T13738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  567.867150][T13738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  567.870652][T13738] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  567.874170][T13738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  567.877662][T13738]  </TASK>
[  568.394067][   T35] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  568.583721][   T35] usb 6-1: Using ep0 maxpacket: 32
[  568.592508][   T35] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  568.596138][   T35] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  568.600846][   T35] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  568.604802][   T35] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  568.610239][   T35] usb 6-1: config 0 interface 0 has no altsetting 0
[  568.625763][   T35] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  568.633918][   T35] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  568.637357][   T35] usb 6-1: Product: syz
[  568.639341][   T35] usb 6-1: Manufacturer: syz
[  568.641404][   T35] usb 6-1: SerialNumber: syz
[  568.647357][   T35] usb 6-1: config 0 descriptor??
[  568.656589][   T35] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  568.661739][   T35] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  568.778119][T13769] FAULT_INJECTION: forcing a failure.
[  568.778119][T13769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  568.784004][T13769] CPU: 3 UID: 0 PID: 13769 Comm: syz.2.2427 Not tainted 6.11.0-rc3-syzkaller-00138-ga4a35f6cbebb #0
[  568.788473][T13769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  568.793064][T13769] Call Trace:
[  568.794538][T13769]  <TASK>
[  568.795860][T13769]  dump_stack_lvl+0x16c/0x1f0
[  568.797983][T13769]  should_fail_ex+0x497/0x5b0
[  568.800099][T13769]  _copy_to_user+0x30/0xc0
[  568.801861][T13769]  simple_read_from_buffer+0xd0/0x160
[  568.804587][T13769]  proc_fail_nth_read+0x1b0/0x290
[  568.806709][T13769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  568.809103][T13769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  568.811549][T13769]  vfs_read+0x1d4/0xbd0
[  568.813425][T13769]  ? __fdget_pos+0xeb/0x180
[  568.815339][T13769]  ? __pfx_vfs_read+0x10/0x10
[  568.817199][T13769]  ? __pfx___mutex_lock+0x10/0x10
[  568.819451][T13769]  ? __fget_files+0x256/0x400
[  568.821531][T13769]  ksys_read+0x12f/0x260
[  568.823444][T13769]  ? __pfx_ksys_read+0x10/0x10
[  568.825632][T13769]  __do_fast_syscall_32+0x73/0x120
[  568.827803][T13769]  do_fast_syscall_32+0x32/0x80
[  568.829971][T13769]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  568.832791][T13769] RIP: 0023:0xf7f08579
[  568.834581][T13769] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  568.842460][T13769] RSP: 002b:00000000f56a65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  568.846070][T13769] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56a6620
[  568.849530][T13769] RDX: 000000000000000f RSI: 00000000f7390ff4 RDI: 0000000000000000
[  568.852732][T13769] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  568.856170][T13769] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  568.859593][T13769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  568.862997][T13769]  </TASK>
[  568.877706][ T5349] usb 6-1: USB disconnect, device number 99
[  568.881319][ T5349] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  568.948169][T13765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  569.203632][ T5406] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[  569.243592][   T56] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  569.404111][ T5406] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  569.410510][ T5406] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.415797][ T5406] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.420177][ T5406] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  569.430292][   T56] usb 5-1: Using ep0 maxpacket: 8
[  569.439709][   T56] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  569.443328][   T56] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  569.454233][ T5406] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  569.457885][ T5406] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  569.471778][   T56] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  569.476738][   T56] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  569.481107][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  569.486368][ T5406] usb 7-1: Manufacturer: syz
[  569.494803][ T5406] usb 7-1: config 0 descriptor??
[  569.496751][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  569.501300][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  569.509219][   T56] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  569.512971][   T56] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  569.516776][   T56] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  569.520629][   T56] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  569.527915][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  569.532754][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  569.537464][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  569.556541][   T56] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  569.560110][   T56] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  569.562790][   T56] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  569.566717][   T56] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  569.571437][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  569.576842][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  569.581118][   T56] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  569.588628][   T56] usb 5-1: string descriptor 0 read error: -22
[  569.590850][   T56] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  569.598183][   T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.639719][   T56] adutux 5-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  569.914663][ T5406] appleir 0003:05AC:8243.0009: unknown main item tag 0x0
[  569.918518][ T5406] appleir 0003:05AC:8243.0009: No inputs registered, leaving
[  569.930348][ T5406] appleir 0003:05AC:8243.0009: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  569.939538][ T5406] usb 7-1: USB disconnect, device number 93
[  570.018013][T13799] FAULT_INJECTION: forcing a failure.
[  570.018013][T13799] name failslab, interval 1, probability 0, space 0, times 0
[  570.024171][T13799] CPU: 2 UID: 0 PID: 13799 Comm: syz.2.2436 Not tainted 6.11.0-rc3-syzkaller-00138-ga4a35f6cbebb #0
[  570.028823][T13799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  570.033400][T13799] Call Trace:
[  570.034918][T13799]  <TASK>
[  570.036234][T13799]  dump_stack_lvl+0x16c/0x1f0
[  570.038366][T13799]  should_fail_ex+0x497/0x5b0
[  570.040460][T13799]  ? fs_reclaim_acquire+0xae/0x160
[  570.042685][T13799]  should_failslab+0xc2/0x120
[  570.044793][T13799]  __kmalloc_cache_noprof+0x6b/0x310
[  570.047142][T13799]  ? snd_pcm_oss_change_params_locked+0x20c/0x3a50
[  570.049750][T13799]  snd_pcm_oss_change_params_locked+0x20c/0x3a50
[  570.052260][T13799]  ? trace_contention_end+0xea/0x140
[  570.054556][T13799]  ? __mutex_lock+0x1a6/0x9c0
[  570.056564][T13799]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  570.059513][T13799]  ? trace_contention_end+0xea/0x140
[  570.061767][T13799]  ? snd_pcm_oss_get_active_substream+0x146/0x1d0
[  570.064212][T13799]  ? __pfx___mutex_lock+0x10/0x10
[  570.066317][T13799]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  570.068842][T13799]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  570.071308][T13799]  snd_pcm_oss_ioctl+0x21e1/0x3790
[  570.073465][T13799]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  570.075768][T13799]  ? __fget_files+0x256/0x400
[  570.077372][T13799]  ? bpf_lsm_file_ioctl_compat+0x9/0x10
[  570.079543][T13799]  ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10
[  570.082101][T13799]  __do_compat_sys_ioctl+0x2c3/0x330
[  570.084436][T13799]  __do_fast_syscall_32+0x73/0x120
[  570.086685][T13799]  do_fast_syscall_32+0x32/0x80
[  570.088830][T13799]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  570.091495][T13799] RIP: 0023:0xf7f08579
[  570.093032][T13799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  570.098737][T13799] RSP: 002b:00000000f568556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  570.101357][T13799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045002
[  570.104758][T13799] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  570.108124][T13799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  570.111610][T13799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  570.115098][T13799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  570.118635][T13799]  </TASK>
[  570.135342][    T8] usb 5-1: USB disconnect, device number 124
[  570.172238][T13794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.480979][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2437'.
[  571.131656][T13818] overlayfs: failed to resolve './file0': -2
[  571.473619][ T5510] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[  571.676343][ T5510] usb 7-1: Using ep0 maxpacket: 32
[  571.684911][ T5510] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  571.690161][ T5510] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  571.693293][ T5510] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  571.698602][ T5510] usb 7-1: Product: syz
[  571.701487][ T5510] usb 7-1: Manufacturer: syz
[  571.703154][ T5510] usb 7-1: SerialNumber: syz
[  571.707670][ T5510] usb 7-1: config 0 descriptor??
[  571.710504][T13818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  572.071590][ T1790] usb 7-1: USB disconnect, device number 94
[  572.358224][T13846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.567169][T13857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.608887][T13859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.863637][   T35] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[  573.883606][ T5510] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  574.063596][   T35] usb 7-1: Using ep0 maxpacket: 8
[  574.065983][ T5510] usb 6-1: Using ep0 maxpacket: 8
[  574.070576][   T35] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  574.082008][   T35] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  574.085329][   T35] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  574.089055][   T35] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  574.103761][ T5510] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  574.107645][ T5510] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  574.110838][ T5510] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  574.122843][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  574.128228][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  574.132725][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  574.136923][ T5510] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  574.141542][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  574.147026][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  574.151877][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  574.158130][ T5510] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  574.162048][   T35] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  574.165947][ T5510] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  574.168981][ T5510] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  574.172898][ T5510] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  574.176059][T13867] overlayfs: failed to resolve './file0': -2
[  574.178611][   T35] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  574.184003][   T35] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  574.188118][   T35] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  574.193100][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  574.197905][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  574.202219][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  574.207154][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  574.210477][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  574.217591][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  574.221896][ T5510] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  574.225642][ T5510] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  574.235673][ T5510] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  574.239610][ T5510] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  574.245517][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  574.245656][   T35] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  574.254315][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  574.258009][ T5510] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  574.262123][   T35] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  574.265244][   T35] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  574.268381][   T35] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  574.272279][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  574.277005][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  574.281543][   T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  574.289788][   T35] usb 7-1: string descriptor 0 read error: -22
[  574.292072][   T35] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  574.303542][   T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.316480][ T5510] usb 6-1: string descriptor 0 read error: -22
[  574.318732][ T5510] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  574.327326][   T35] adutux 7-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  574.330142][ T5510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.355986][ T5510] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux1
[  574.553699][ T5406] usb 8-1: new high-speed USB device number 88 using dummy_hcd
[  574.753756][ T5406] usb 8-1: Using ep0 maxpacket: 32
[  574.762471][ T5406] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  574.771111][ T5406] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  574.779405][ T5406] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  574.782963][ T5406] usb 8-1: Product: syz
[  574.785243][ T5406] usb 8-1: Manufacturer: syz
[  574.787300][ T5406] usb 8-1: SerialNumber: syz
[  574.792937][ T5406] usb 8-1: config 0 descriptor??
[  574.800866][T13867] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  574.882013][ T5388] usb 7-1: USB disconnect, device number 95
[  574.925340][    T8] usb 6-1: USB disconnect, device number 100
[  575.037328][ T5386] usb 8-1: USB disconnect, device number 88
[  576.017137][T13884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.073106][T13877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.443812][    T8] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[  576.673761][    T8] usb 7-1: Using ep0 maxpacket: 8
[  576.690739][    T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  576.703690][    T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  576.708946][    T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  576.712044][    T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  576.718454][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  576.723022][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  576.729894][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  576.763885][    T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  576.767704][    T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  576.770714][    T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  576.790364][T13890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.795554][    T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  576.799528][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  576.803393][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  576.813658][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  576.862626][    T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  576.866376][    T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  576.868817][    T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  576.872513][    T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  576.928547][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  576.932175][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  576.970915][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  577.001742][    T8] usb 7-1: string descriptor 0 read error: -22
[  577.008784][    T8] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  577.012492][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.022332][    T8] adutux 7-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  577.242560][T13901] overlayfs: failed to resolve './file0': -2
[  577.278163][    T8] usb 7-1: USB disconnect, device number 96
[  577.283910][ T1790] usb 8-1: new high-speed USB device number 89 using dummy_hcd
[  577.418216][T13904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  577.504313][ T1790] usb 8-1: Using ep0 maxpacket: 8
[  577.511261][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  577.515431][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  577.518269][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  577.521360][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  577.525776][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  577.530690][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  577.534663][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  577.539621][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  577.543670][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  577.546833][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  577.551233][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  577.553658][ T5510] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  577.556539][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  577.564437][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  577.569352][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  577.575949][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  577.580946][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  577.584428][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  577.588544][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  577.593322][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  577.597899][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  577.601674][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  577.626815][ T1790] usb 8-1: string descriptor 0 read error: -22
[  577.630139][ T1790] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  577.634282][ T1790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.651811][ T1790] adutux 8-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  577.693724][   T35] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  577.753597][ T5510] usb 5-1: Using ep0 maxpacket: 32
[  577.758315][ T5510] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  577.772618][ T5510] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  577.776725][ T5510] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  577.780120][ T5510] usb 5-1: Product: syz
[  577.781903][ T5510] usb 5-1: Manufacturer: syz
[  577.784957][ T5510] usb 5-1: SerialNumber: syz
[  577.789408][ T5510] usb 5-1: config 0 descriptor??
[  577.794404][T13901] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  577.893639][   T35] usb 6-1: Using ep0 maxpacket: 8
[  577.908017][   T35] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  577.912204][   T35] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  577.915100][ T1790] usb 8-1: USB disconnect, device number 89
[  577.917335][   T35] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  577.924326][   T35] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  577.929578][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  577.935874][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  577.940814][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  577.946711][   T35] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  577.950561][   T35] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  577.954020][   T35] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  577.957256][   T35] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  577.961927][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  577.966675][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  577.971186][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  577.976779][   T35] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  577.980226][   T35] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  577.982725][   T35] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  577.986543][   T35] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  577.990604][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  577.995148][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  577.999742][   T35] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  578.007756][   T35] usb 6-1: string descriptor 0 read error: -22
[  578.010331][   T35] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  578.011514][    T8] usb 5-1: USB disconnect, device number 125
[  578.016746][   T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.027810][   T35] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  578.173623][ T5386] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[  578.363581][ T5386] usb 7-1: Using ep0 maxpacket: 32
[  578.367710][ T5386] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  578.370755][ T5386] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  578.374855][ T5386] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  578.378808][ T5386] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  578.383446][ T5386] usb 7-1: config 0 interface 0 has no altsetting 0
[  578.390051][ T5386] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  578.393640][ T5386] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  578.396696][ T5386] usb 7-1: Product: syz
[  578.398377][ T5386] usb 7-1: Manufacturer: syz
[  578.400082][ T5386] usb 7-1: SerialNumber: syz
[  578.407029][ T5386] usb 7-1: config 0 descriptor??
[  578.413120][ T5386] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  578.421396][ T5386] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  578.465736][    T8] usb 6-1: USB disconnect, device number 101
[  578.618938][ T1790] usb 7-1: USB disconnect, device number 97
[  578.623870][ T1790] ldusb 7-1:0.0: LD USB Device #1 now disconnected
[  580.058896][T13946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  580.373084][ T5359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  580.385199][ T5359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  580.390362][ T5359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  580.403613][ T1790] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  580.424063][ T5359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  580.434258][ T5359] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  580.438379][ T5359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  580.580876][T13957] overlayfs: failed to resolve './file0': -2
[  580.603572][ T1790] usb 6-1: Using ep0 maxpacket: 8
[  580.645193][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  580.652616][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  580.663004][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  580.667086][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  580.672253][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  580.676975][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  580.688033][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  580.704520][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  580.709240][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  580.712579][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  580.716866][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  580.722484][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  580.727596][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  580.732409][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  580.740928][T13952] chnl_net:caif_netlink_parms(): no params data found
[  580.741009][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  580.755104][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  580.760411][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  580.764229][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  580.769625][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  580.779770][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  580.785015][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  580.833130][ T1790] usb 6-1: string descriptor 0 read error: -22
[  580.838071][ T1790] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  580.842883][ T1790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.870582][ T1790] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  580.973650][ T5386] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[  581.012107][T13952] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.017044][T13952] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.019778][T13952] bridge_slave_0: entered allmulticast mode
[  581.024180][T13952] bridge_slave_0: entered promiscuous mode
[  581.029423][T13952] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.031947][T13952] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.035575][T13952] bridge_slave_1: entered allmulticast mode
[  581.039352][T13952] bridge_slave_1: entered promiscuous mode
[  581.132239][T13952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.145114][T13952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.193553][ T5386] usb 7-1: Using ep0 maxpacket: 32
[  581.198109][ T5386] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  581.222361][T13952] team0: Port device team_slave_0 added
[  581.223546][ T5386] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  581.229691][ T5386] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  581.234357][ T5386] usb 7-1: Product: syz
[  581.237367][ T5386] usb 7-1: Manufacturer: syz
[  581.239627][ T5386] usb 7-1: SerialNumber: syz
[  581.246745][T13952] team0: Port device team_slave_1 added
[  581.256683][ T5386] usb 7-1: config 0 descriptor??
[  581.269278][T13957] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  581.308988][T12057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.349750][T13952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.352274][T13952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.362916][T13952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.371246][T13952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.380369][T13952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.391625][T13952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.438950][T12057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.499866][ T5386] usb 7-1: USB disconnect, device number 98
[  581.556409][T12057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.570760][T13952] hsr_slave_0: entered promiscuous mode
[  581.575685][T13968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.581507][T13952] hsr_slave_1: entered promiscuous mode
[  581.587298][T13952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  581.590642][T13952] Cannot create hsr debugfs directory
[  581.651338][ T1415] usb 6-1: USB disconnect, device number 102
[  581.678636][T12057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.820267][T12057] bridge_slave_1: left allmulticast mode
[  581.822694][T12057] bridge_slave_1: left promiscuous mode
[  581.826921][T12057] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.833983][T12057] bridge_slave_0: left allmulticast mode
[  581.836469][T12057] bridge_slave_0: left promiscuous mode
[  581.838970][T12057] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.904238][ T1790] usb 8-1: new high-speed USB device number 90 using dummy_hcd
[  582.083810][ T1790] usb 8-1: Using ep0 maxpacket: 8
[  582.102108][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  582.105485][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  582.109319][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  582.113912][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  582.119687][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  582.124937][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  582.129048][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  582.134606][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  582.138067][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  582.143889][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  582.148439][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  582.153193][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  582.159034][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  582.164418][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  582.176415][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  582.183792][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  582.187325][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  582.201866][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  582.208381][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  582.214262][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  582.220446][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  582.243432][ T1790] usb 8-1: string descriptor 0 read error: -22
[  582.251316][ T1790] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  582.261699][ T1790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.272965][ T1790] adutux 8-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  582.343990][T12057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  582.349428][T12057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  582.355799][T12057] bond0 (unregistering): Released all slaves
[  582.533753][ T5359] Bluetooth: hci3: command tx timeout
[  582.553579][ T1415] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  582.753572][ T1415] usb 6-1: Using ep0 maxpacket: 32
[  582.763909][ T1415] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  582.768877][ T1415] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  582.777543][ T1415] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  582.783245][ T1415] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  582.790568][ T1415] usb 6-1: config 0 interface 0 has no altsetting 0
[  582.799891][ T1415] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  582.807332][ T1415] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  582.822929][ T1415] usb 6-1: Product: syz
[  582.826027][ T1415] usb 6-1: Manufacturer: syz
[  582.828282][ T1415] usb 6-1: SerialNumber: syz
[  582.838296][T12057] hsr_slave_0: left promiscuous mode
[  582.841395][T12057] hsr_slave_1: left promiscuous mode
[  582.844402][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.847002][ T1415] usb 6-1: config 0 descriptor??
[  582.847726][T12057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.855317][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.858098][T12057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.859968][ T1415] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  582.871334][ T1415] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  582.897157][T12057] veth0_macvtap: left promiscuous mode
[  582.904193][T12057] veth1_vlan: left promiscuous mode
[  582.906898][T12057] veth0_vlan: left promiscuous mode
[  583.067281][ T1790] usb 6-1: USB disconnect, device number 103
[  583.075366][ T1790] ldusb 6-1:0.0: LD USB Device #1 now disconnected
[  583.246967][T13988] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2487'.
[  583.252734][T13988] openvswitch: netlink: Actions may not be safe on all matching packets
[  583.371201][ T1790] usb 8-1: USB disconnect, device number 90
[  583.839938][T12057] team0 (unregistering): Port device team_slave_1 removed
[  583.925414][T12057] team0 (unregistering): Port device team_slave_0 removed
[  584.023056][T13994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.189070][T14002] overlayfs: failed to resolve './file0': -2
[  584.365537][ T1790] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  584.513783][ T1283] usb 8-1: new high-speed USB device number 91 using dummy_hcd
[  584.553799][ T1790] usb 6-1: Using ep0 maxpacket: 8
[  584.560011][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  584.564029][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  584.567283][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  584.571254][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  584.576245][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  584.581374][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  584.586380][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  584.594732][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  584.598112][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  584.601178][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  584.604834][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  584.609064][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  584.614056][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  584.618345][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  584.623373][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  584.626152][ T5359] Bluetooth: hci3: command tx timeout
[  584.629614][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  584.632448][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  584.636283][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  584.641333][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  584.646382][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  584.650892][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  584.663020][ T1790] usb 6-1: string descriptor 0 read error: -22
[  584.665930][ T1790] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  584.669351][ T1790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.684238][ T1790] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  584.693911][ T1283] usb 8-1: Using ep0 maxpacket: 32
[  584.699286][ T1283] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  584.707092][ T1283] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  584.711142][ T1283] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  584.714800][ T1283] usb 8-1: Product: syz
[  584.716639][ T1283] usb 8-1: Manufacturer: syz
[  584.718667][ T1283] usb 8-1: SerialNumber: syz
[  584.722731][ T1283] usb 8-1: config 0 descriptor??
[  584.727414][T14002] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  584.840931][T13952] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  584.845966][T13952] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  584.851789][T13952] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  584.862671][T13952] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  584.951118][ T1283] usb 8-1: USB disconnect, device number 91
[  584.998774][T13952] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.024710][T13952] 8021q: adding VLAN 0 to HW filter on device team0
[  585.032401][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.035705][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.056670][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.059252][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.100114][T13952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  585.105083][T13952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  585.273391][T13952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.318754][T13952] veth0_vlan: entered promiscuous mode
[  585.328905][T13952] veth1_vlan: entered promiscuous mode
[  585.363423][T13952] veth0_macvtap: entered promiscuous mode
[  585.370303][T13952] veth1_macvtap: entered promiscuous mode
[  585.385020][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.389630][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.393366][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.399518][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.403453][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.407919][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.414015][T13952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  585.427890][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.432535][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.438069][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.442702][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.448839][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.453228][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.457981][T13952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.462368][T13952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.468493][T13952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  585.475848][T13952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.479652][T13952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.482922][T13952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.487341][T13952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.537892][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.544050][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.566567][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.569977][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.609341][T13565] usb 6-1: USB disconnect, device number 104
[  585.837814][T14022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.003567][   T56] usb 8-1: new high-speed USB device number 92 using dummy_hcd
[  586.118562][T14027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.183558][   T56] usb 8-1: Using ep0 maxpacket: 32
[  586.187816][   T56] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  586.190626][   T56] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  586.194929][   T56] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  586.200053][   T56] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  586.204542][   T56] usb 8-1: config 0 interface 0 has no altsetting 0
[  586.211553][   T56] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  586.216790][   T56] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  586.219796][   T56] usb 8-1: Product: syz
[  586.221223][   T56] usb 8-1: Manufacturer: syz
[  586.222848][   T56] usb 8-1: SerialNumber: syz
[  586.227009][   T56] usb 8-1: config 0 descriptor??
[  586.243142][   T56] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  586.248641][   T56] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  586.454182][ T1283] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[  586.461860][ T5386] usb 8-1: USB disconnect, device number 92
[  586.464627][    C1] ldusb 8-1:0.0: usb_submit_urb failed (-19)
[  586.471204][ T5386] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  586.663608][ T1283] usb 7-1: Using ep0 maxpacket: 8
[  586.669368][T14024] ldusb: No device or device unplugged -19
[  586.675689][ T1283] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  586.679621][ T1283] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  586.682899][ T1283] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  586.688318][ T1283] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  586.693382][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  586.698331][ T5359] Bluetooth: hci3: command tx timeout
[  586.701875][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  586.707364][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  586.713120][ T1283] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  586.717702][ T1283] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  586.721050][ T1283] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  586.725511][ T1283] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  586.730533][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  586.735720][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  586.740471][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  586.751454][ T1283] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  586.762817][ T1283] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  586.766417][ T1283] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  586.770424][ T1283] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  586.775968][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  586.779724][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  586.786417][ T1283] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  586.809278][ T1283] usb 7-1: string descriptor 0 read error: -22
[  586.812174][ T1283] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  586.823783][ T1283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.840952][ T1283] adutux 7-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  586.989003][T14042] overlayfs: failed to resolve './file0': -2
[  587.303564][ T1790] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[  587.460998][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'.
[  587.504035][ T1790] usb 6-1: Using ep0 maxpacket: 32
[  587.512644][ T1790] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  587.525640][ T1790] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  587.533797][ T1790] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  587.541642][ T1790] usb 6-1: Product: syz
[  587.547125][ T1790] usb 6-1: Manufacturer: syz
[  587.550892][ T1790] usb 6-1: SerialNumber: syz
[  587.554199][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2505'.
[  587.560874][ T1790] usb 6-1: config 0 descriptor??
[  587.567652][T14042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  587.704565][ T1790] usb 7-1: USB disconnect, device number 99
[  587.789095][ T5388] usb 6-1: USB disconnect, device number 105
[  587.953871][T14055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.327421][   T25] usb 8-1: new high-speed USB device number 93 using dummy_hcd
[  588.523825][   T25] usb 8-1: Using ep0 maxpacket: 8
[  588.532632][   T25] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  588.543542][   T25] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  588.546850][   T25] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  588.560929][   T25] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  588.571863][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  588.601781][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  588.606597][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  588.685128][   T25] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  588.688102][   T25] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  588.693231][   T25] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  588.708753][   T25] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  588.726309][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  588.758466][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  588.773419][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  588.778204][ T5359] Bluetooth: hci3: command tx timeout
[  588.805823][   T25] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  588.809665][   T25] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  588.813085][   T25] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  588.817397][   T25] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  588.822386][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  588.831903][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  588.837045][   T25] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  588.883121][   T25] usb 8-1: string descriptor 0 read error: -22
[  588.886494][   T25] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  588.903747][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.980323][T14062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.991028][   T25] adutux 8-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  589.323242][ T1283] usb 8-1: USB disconnect, device number 93
[  589.525976][T14078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.583585][ T5388] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[  589.764668][ T5388] usb 7-1: Using ep0 maxpacket: 32
[  589.786889][ T5388] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  589.790135][ T5388] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  589.795835][ T5388] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  589.800967][ T5388] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  589.807519][ T1790] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  589.811032][ T5388] usb 7-1: config 0 interface 0 has no altsetting 0
[  589.822672][ T5388] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  589.828383][ T5388] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  589.832144][ T5388] usb 7-1: Product: syz
[  589.834880][ T5388] usb 7-1: Manufacturer: syz
[  589.836657][ T5388] usb 7-1: SerialNumber: syz
[  589.840127][ T5388] usb 7-1: config 0 descriptor??
[  589.844001][ T5388] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  589.853705][ T5388] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  589.952983][T14087] overlayfs: failed to resolve './file0': -2
[  589.993743][ T1790] usb 6-1: Using ep0 maxpacket: 8
[  590.007478][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  590.010939][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  590.019810][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  590.023018][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  590.027348][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  590.031598][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  590.037114][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  590.045096][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  590.049298][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  590.054153][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  590.058672][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  590.065642][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  590.067902][ T5386] usb 7-1: USB disconnect, device number 100
[  590.070620][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  590.070655][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  590.070680][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  590.092140][ T5386] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  590.092161][ T1790] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  590.101063][ T1790] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  590.104761][ T1790] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  590.109045][ T1790] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  590.114313][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  590.119242][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  590.124465][ T1790] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  590.138158][ T1790] usb 6-1: string descriptor 0 read error: -22
[  590.140997][ T1790] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  590.146713][ T1790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.158259][ T1790] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  590.243625][ T1283] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  590.287582][T14073] ldusb: No device or device unplugged -19
[  590.464393][ T1283] usb 5-1: Using ep0 maxpacket: 32
[  590.470160][ T1283] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  590.484773][ T1283] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  590.488310][ T1283] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  590.491372][ T1283] usb 5-1: Product: syz
[  590.493231][ T1283] usb 5-1: Manufacturer: syz
[  590.495200][ T1283] usb 5-1: SerialNumber: syz
[  590.499108][ T1283] usb 5-1: config 0 descriptor??
[  590.502159][T14087] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  590.691491][ T1790] usb 6-1: USB disconnect, device number 106
[  590.720668][ T1283] usb 5-1: USB disconnect, device number 126
[  590.835184][T14101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  591.183665][ T5406] usb 7-1: new high-speed USB device number 101 using dummy_hcd
[  591.363745][ T5406] usb 7-1: Using ep0 maxpacket: 32
[  591.370284][ T5406] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  591.374759][ T5406] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  591.379654][ T5406] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  591.385316][ T5406] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  591.391077][ T5406] usb 7-1: config 0 interface 0 has no altsetting 0
[  591.396073][ T5406] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  591.399587][ T5406] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  591.403035][ T5406] usb 7-1: Product: syz
[  591.405013][ T5406] usb 7-1: Manufacturer: syz
[  591.406941][ T5406] usb 7-1: SerialNumber: syz
[  591.411118][ T5406] usb 7-1: config 0 descriptor??
[  591.420496][ T5406] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  591.426363][ T5406] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  591.625701][    C2] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  591.629835][ T5406] usb 7-1: USB disconnect, device number 101
[  591.634844][ T5406] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  591.665008][T14108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  591.837714][T14105] ldusb: No device or device unplugged -19
[  592.305952][T14116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.299519][T14135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.352396][T14137] overlayfs: failed to resolve './file0': -2
[  593.604311][    T8] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  593.654268][ T5510] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[  593.793634][    T8] usb 5-1: Using ep0 maxpacket: 8
[  593.798537][    T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  593.803844][    T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  593.807944][    T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  593.812936][    T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  593.819520][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  593.825324][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  593.835351][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  593.843463][    T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  593.843589][ T5510] usb 7-1: Using ep0 maxpacket: 32
[  593.848271][    T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  593.853053][    T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  593.855845][ T5510] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  593.857362][    T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  593.863413][ T5510] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  593.865596][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  593.868780][ T5510] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  593.875150][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  593.879453][ T5510] usb 7-1: Product: syz
[  593.882084][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  593.883290][ T5510] usb 7-1: Manufacturer: syz
[  593.883299][ T5510] usb 7-1: SerialNumber: syz
[  593.886716][ T5510] usb 7-1: config 0 descriptor??
[  593.896493][T14137] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  593.917322][    T8] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  593.922557][    T8] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  593.927325][    T8] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  593.932323][    T8] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  593.938348][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  593.945229][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  593.954958][    T8] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  593.968440][    T8] usb 5-1: string descriptor 0 read error: -22
[  593.971317][    T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  593.975903][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.990517][    T8] adutux 5-1:246.0: ADU100  now attached to /dev/usb/adutux1
[  594.241598][    T8] usb 7-1: USB disconnect, device number 102
[  594.352151][T14151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.852298][    T8] usb 5-1: USB disconnect, device number 127
[  595.342252][T14170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.373359][T14172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.508316][T14179] FAULT_INJECTION: forcing a failure.
[  595.508316][T14179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  595.513845][T14179] CPU: 2 UID: 0 PID: 14179 Comm: syz.0.2551 Not tainted 6.11.0-rc3-syzkaller-00138-ga4a35f6cbebb #0
[  595.518611][T14179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  595.523366][T14179] Call Trace:
[  595.524890][T14179]  <TASK>
[  595.526239][T14179]  dump_stack_lvl+0x16c/0x1f0
[  595.528348][T14179]  should_fail_ex+0x497/0x5b0
[  595.530441][T14179]  _copy_from_iter+0x27a/0xfc0
[  595.532607][T14179]  ? __alloc_skb+0x200/0x380
[  595.534694][T14179]  ? __pfx__copy_from_iter+0x10/0x10
[  595.537049][T14179]  ? __virt_addr_valid+0x5e/0x590
[  595.539325][T14179]  ? __phys_addr_symbol+0x30/0x80
[  595.541584][T14179]  ? __check_object_size+0x497/0x720
[  595.543960][T14179]  netlink_sendmsg+0x813/0xd70
[  595.546121][T14179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.548476][T14179]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  595.550860][T14179]  ____sys_sendmsg+0x9b4/0xb50
[  595.553095][T14179]  ? __pfx_____sys_sendmsg+0x10/0x10
[  595.555469][T14179]  ? get_compat_msghdr+0x11b/0x170
[  595.557499][T14179]  ? __pfx___lock_acquire+0x10/0x10
[  595.559797][T14179]  ___sys_sendmsg+0x135/0x1e0
[  595.561921][T14179]  ? __pfx____sys_sendmsg+0x10/0x10
[  595.564277][T14179]  ? ksys_write+0x21c/0x260
[  595.566335][T14179]  ? __fget_light+0x173/0x210
[  595.568440][T14179]  __sys_sendmsg+0x117/0x1f0
[  595.570525][T14179]  ? __pfx___sys_sendmsg+0x10/0x10
[  595.572854][T14179]  __do_fast_syscall_32+0x73/0x120
[  595.575143][T14179]  do_fast_syscall_32+0x32/0x80
[  595.577312][T14179]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  595.580828][T14179] RIP: 0023:0xf7f5f579
[  595.582668][T14179] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  595.591056][T14179] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  595.594708][T14179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100
[  595.598204][T14179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  595.601672][T14179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  595.605172][T14179] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  595.608697][T14179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  595.612167][T14179]  </TASK>
[  595.722484][T14188] overlayfs: failed to resolve './file0': -2
[  596.028053][ T5406] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  596.203625][ T5406] usb 5-1: Using ep0 maxpacket: 32
[  596.207635][ T5406] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  596.212971][ T5406] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  596.217385][ T5406] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  596.220741][ T5406] usb 5-1: Product: syz
[  596.222548][ T5406] usb 5-1: Manufacturer: syz
[  596.224557][ T5406] usb 5-1: SerialNumber: syz
[  596.228633][ T5406] usb 5-1: config 0 descriptor??
[  596.231224][T14188] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  596.490499][T14196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.555480][ T1415] usb 5-1: USB disconnect, device number 2
[  596.786759][ T1790] usb 8-1: new high-speed USB device number 94 using dummy_hcd
[  596.862811][T14205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  597.003605][ T1790] usb 8-1: Using ep0 maxpacket: 8
[  597.024482][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  597.028139][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  597.031090][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  597.035838][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  597.040193][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  597.044922][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  597.049381][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  597.058268][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  597.061388][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  597.064787][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  597.068618][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  597.073713][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  597.078758][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  597.083005][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  597.094325][ T1790] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  597.098023][ T1790] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[  597.101151][ T1790] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[  597.105769][ T1790] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  597.109814][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  597.114073][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  597.118232][ T1790] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  597.134852][ T1790] usb 8-1: string descriptor 0 read error: -22
[  597.137534][ T1790] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  597.140776][ T1790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.158383][ T1790] adutux 8-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  597.183664][ T5406] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[  597.364633][ T5406] usb 6-1: Using ep0 maxpacket: 8
[  597.404501][ T5406] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  597.415207][ T5406] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  597.425123][ T5406] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  597.433228][ T5406] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  597.440241][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  597.448801][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  597.466016][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  597.472710][ T5406] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  597.477579][ T5406] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  597.482594][ T5406] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  597.495204][ T5406] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  597.500723][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  597.505900][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  597.510611][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  597.516846][ T5406] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  597.520666][ T5406] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  597.534121][ T5406] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  597.544260][ T5406] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  597.562387][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  597.573626][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  597.586785][ T5406] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  597.600018][ T5406] usb 6-1: string descriptor 0 read error: -22
[  597.613702][ T5406] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  597.622595][ T5406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.663227][ T5406] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux1
[  597.744472][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2563'.
[  597.868212][ T1790] usb 8-1: USB disconnect, device number 94
[  598.296624][ T1790] usb 6-1: USB disconnect, device number 107
[  598.666211][T14224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  598.862850][T14237] overlayfs: failed to resolve './file0': -2
[  599.183712][ T1790] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  599.363654][ T1790] usb 6-1: Using ep0 maxpacket: 32
[  599.372981][ T1790] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  599.387631][ T1790] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  599.390680][ T1790] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  599.393396][ T1790] usb 6-1: Product: syz
[  599.395076][ T1790] usb 6-1: Manufacturer: syz
[  599.396735][ T1790] usb 6-1: SerialNumber: syz
[  599.400076][ T1790] usb 6-1: config 0 descriptor??
[  599.406233][T14237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  599.727524][ T5406] usb 6-1: USB disconnect, device number 108
[  599.747576][T14248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.043749][ T1790] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  600.233598][ T1790] usb 5-1: Using ep0 maxpacket: 8
[  600.238542][ T1790] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  600.241821][ T1790] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  600.245031][ T1790] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  600.248948][ T1790] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  600.253207][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  600.257300][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  600.261422][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  600.268136][ T1790] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  600.271247][ T1790] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  600.274583][ T1790] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  600.277891][ T1790] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  600.281885][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  600.286576][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  600.290939][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  600.295976][ T1790] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  600.299089][ T1790] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  600.301808][ T1790] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  600.306027][ T1790] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  600.310879][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  600.315055][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  600.319401][ T1790] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  600.326613][ T1790] usb 5-1: string descriptor 0 read error: -22
[  600.328805][ T1790] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  600.331910][ T1790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.339739][ T1790] adutux 5-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  600.767271][T14265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.800643][ T1790] usb 5-1: USB disconnect, device number 3
[  600.853648][ T4768] Bluetooth: hci4: command 0x0406 tx timeout
[  601.093712][    T8] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  601.285482][    T8] usb 6-1: Using ep0 maxpacket: 8
[  601.298818][    T8] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  601.302152][    T8] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  601.305929][    T8] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  601.310031][    T8] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  601.314263][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  601.318501][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  601.322299][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  601.329680][    T8] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  601.332707][    T8] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  601.335332][    T8] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  601.338516][    T8] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  601.342441][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  601.346629][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  601.356840][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  601.368503][    T8] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  601.371506][    T8] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  601.374950][    T8] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  601.378139][    T8] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  601.382187][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  601.386569][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  601.390458][    T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  601.414521][    T8] usb 6-1: string descriptor 0 read error: -22
[  601.416977][    T8] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  601.420585][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.444254][    T8] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  602.060983][    T8] usb 6-1: USB disconnect, device number 109
[  603.020286][T14338] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.023329][T14338] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.028439][T14338] bridge0: entered allmulticast mode
[  603.073759][ T5388] usb 8-1: new high-speed USB device number 95 using dummy_hcd
[  603.283641][ T5388] usb 8-1: Using ep0 maxpacket: 32
[  603.297813][ T5388] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  603.314815][ T5388] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  603.331761][ T5388] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  603.337221][ T5388] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  603.343250][ T5388] usb 8-1: config 0 interface 0 has no altsetting 0
[  603.354342][ T5388] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  603.357689][ T5388] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  603.360854][ T5388] usb 8-1: Product: syz
[  603.362371][ T5388] usb 8-1: Manufacturer: syz
[  603.364502][ T5388] usb 8-1: SerialNumber: syz
[  603.367815][ T5388] usb 8-1: config 0 descriptor??
[  603.375614][ T5388] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  603.380985][ T5388] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  603.582112][ T5388] usb 8-1: USB disconnect, device number 95
[  603.584303][    C0] ldusb 8-1:0.0: usb_submit_urb failed (-19)
[  603.590570][ T5388] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  603.844834][T14350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  604.123633][ T5388] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  604.304540][ T5388] usb 6-1: Using ep0 maxpacket: 8
[  604.329848][ T5388] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  604.339719][ T5388] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  604.351444][ T5388] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  604.356700][ T5388] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  604.361615][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  604.366744][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  604.371717][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  604.383856][ T5388] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  604.394696][ T5388] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  604.406400][ T5388] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  604.425916][ T5388] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  604.444471][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  604.449367][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  604.454235][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  604.460494][ T5388] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  604.465822][ T5388] usb 6-1: config 246 descriptor has 1 excess byte, ignoring
[  604.468947][ T5388] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[  604.472315][ T5388] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  604.478003][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  604.482128][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  604.488714][ T5388] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  604.507718][ T5388] usb 6-1: string descriptor 0 read error: -22
[  604.510897][ T5388] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  604.515313][ T5388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.530984][ T5388] adutux 6-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  605.280803][T14405] overlayfs: failed to resolve './file0': -2
[  605.519483][   T35] usb 6-1: USB disconnect, device number 110
[  605.603631][ T5510] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  605.654097][ T5388] usb 8-1: new high-speed USB device number 96 using dummy_hcd
[  605.783574][ T5510] usb 5-1: Using ep0 maxpacket: 32
[  605.787915][ T5510] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  605.794711][ T5510] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  605.798151][ T5510] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  605.801230][ T5510] usb 5-1: Product: syz
[  605.803084][ T5510] usb 5-1: Manufacturer: syz
[  605.805069][ T5510] usb 5-1: SerialNumber: syz
[  605.808092][ T5510] usb 5-1: config 0 descriptor??
[  605.811409][T14405] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  605.843971][ T5388] usb 8-1: Using ep0 maxpacket: 32
[  605.848533][ T5388] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  605.852221][ T5388] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  605.857163][ T5388] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  605.861343][ T5388] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  605.866394][ T5388] usb 8-1: config 0 interface 0 has no altsetting 0
[  605.872321][ T5388] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  605.876431][ T5388] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  605.879760][ T5388] usb 8-1: Product: syz
[  605.881608][ T5388] usb 8-1: Manufacturer: syz
[  605.883766][ T5388] usb 8-1: SerialNumber: syz
[  605.887909][ T5388] usb 8-1: config 0 descriptor??
[  605.892636][ T5388] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  605.897671][ T5388] ldusb 8-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  606.135138][T14431] overlayfs: failed to resolve './file0': -2
[  606.157656][ T5510] usb 5-1: USB disconnect, device number 4
[  606.170666][ T5388] usb 8-1: USB disconnect, device number 96
[  606.174850][ T5388] ldusb 8-1:0.0: LD USB Device #1 now disconnected
[  606.454961][ T5406] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  606.633696][ T5406] usb 6-1: Using ep0 maxpacket: 32
[  606.638230][ T5406] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  606.644196][ T5406] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  606.647301][ T5406] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  606.650071][ T5406] usb 6-1: Product: syz
[  606.651498][ T5406] usb 6-1: Manufacturer: syz
[  606.653091][ T5406] usb 6-1: SerialNumber: syz
[  606.656174][ T5406] usb 6-1: config 0 descriptor??
[  606.659025][T14431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  606.711711][T14439] FAULT_INJECTION: forcing a failure.
[  606.711711][T14439] name failslab, interval 1, probability 0, space 0, times 0
[  606.717153][T14439] CPU: 3 UID: 0 PID: 14439 Comm: syz.3.2631 Not tainted 6.11.0-rc3-syzkaller-00138-ga4a35f6cbebb #0
[  606.721393][T14439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  606.725524][T14439] Call Trace:
[  606.726754][T14439]  <TASK>
[  606.727771][T14439]  dump_stack_lvl+0x16c/0x1f0
[  606.729386][T14439]  should_fail_ex+0x497/0x5b0
[  606.731005][T14439]  ? fs_reclaim_acquire+0xae/0x160
[  606.732752][T14439]  should_failslab+0xc2/0x120
[  606.734784][T14439]  __kmalloc_node_noprof+0xd1/0x440
[  606.737130][T14439]  ? __kvmalloc_node_noprof+0x9d/0x1a0
[  606.739610][T14439]  __kvmalloc_node_noprof+0x9d/0x1a0
[  606.741552][T14439]  __kvm_mmu_topup_memory_cache+0x451/0x600
[  606.743655][T14439]  ? __lock_acquire+0x1620/0x3cb0
[  606.745666][T14439]  mmu_topup_memory_caches+0x22/0xd0
[  606.747717][T14439]  kvm_mmu_load+0xda/0x20d0
[  606.749434][T14439]  ? __pfx___lock_acquire+0x10/0x10
[  606.751450][T14439]  ? __pfx_kvm_mmu_load+0x10/0x10
[  606.753509][T14439]  kvm_arch_vcpu_pre_fault_memory+0x496/0x590
[  606.756140][T14439]  ? kvm_arch_vcpu_load+0x4ba/0x980
[  606.758367][T14439]  ? __pfx_kvm_arch_vcpu_pre_fault_memory+0x10/0x10
[  606.761043][T14439]  kvm_vcpu_ioctl+0xec1/0x1520
[  606.762810][T14439]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  606.764980][T14439]  ? tomoyo_path_number_perm+0x190/0x5b0
[  606.767548][T14439]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  606.769675][T14439]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  606.771868][T14439]  kvm_vcpu_compat_ioctl+0x216/0x3f0
[  606.773746][T14439]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  606.775873][T14439]  ? __do_compat_sys_ioctl+0x86/0x330
[  606.777990][T14439]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  606.780424][T14439]  __do_compat_sys_ioctl+0x2c3/0x330
[  606.782633][T14439]  __do_fast_syscall_32+0x73/0x120
[  606.784843][T14439]  do_fast_syscall_32+0x32/0x80
[  606.786917][T14439]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  606.789550][T14439] RIP: 0023:0xf7f61579
[  606.791264][T14439] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  606.799339][T14439] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  606.802571][T14439] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c040aed5
[  606.805486][T14439] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[  606.808201][T14439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.811610][T14439] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  606.814485][T14439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  606.817217][T14439]  </TASK>
[  606.820553][T14439] Oops: general protection fault, probably for non-canonical address 0xe000013ffffffffd: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  606.826031][T14439] KASAN: maybe wild-memory-access in range [0x000029ffffffffe8-0x000029ffffffffef]
[  606.831198][T14439] CPU: 3 UID: 0 PID: 14439 Comm: syz.3.2631 Not tainted 6.11.0-rc3-syzkaller-00138-ga4a35f6cbebb #0
[  606.836225][T14439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  606.839969][T14439] RIP: 0010:is_page_fault_stale+0xd5/0x5e0
[  606.842059][T14439] Code: 00 48 21 c3 48 b8 00 00 00 00 00 ea ff ff 48 c1 e3 06 48 01 c3 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 04 00 00 48 8b 5b 28 31 ff 48 89 de e8 a3 58
[  606.848885][T14439] RSP: 0018:ffffc9000d40f990 EFLAGS: 00010202
[  606.851023][T14439] RAX: dffffc0000000000 RBX: 000029ffffffffc0 RCX: ffffffff811ccf44
[  606.853830][T14439] RDX: 0000053ffffffffd RSI: ffffffff811ccf52 RDI: 000029ffffffffe8
[  606.856658][T14439] RBP: ffff888015598000 R08: 0000000000000006 R09: 00000000000131c1
[  606.859653][T14439] R10: 000fffffffffffff R11: 0000000000000000 R12: ffffc9000d40fa50
[  606.863124][T14439] R13: 00000000000131c1 R14: ffff888015598338 R15: 0000000000000001
[  606.865909][T14439] FS:  0000000000000000(0000) GS:ffff88802c300000(0063) knlGS:00000000f5706b40
[  606.869037][T14439] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  606.871382][T14439] CR2: 00000000f5705fbc CR3: 000000002548c000 CR4: 0000000000352ef0
[  606.874854][T14439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  606.878184][T14439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  606.881544][T14439] Call Trace:
[  606.882987][T14439]  <TASK>
[  606.884158][T14439]  ? show_regs+0x8c/0xa0
[  606.885669][T14439]  ? die_addr+0x4f/0xd0
[  606.887142][T14439]  ? exc_general_protection+0x155/0x230
[  606.889059][T14439]  ? asm_exc_general_protection+0x26/0x30
[  606.891026][T14439]  ? is_page_fault_stale+0x94/0x5e0
[  606.892776][T14439]  ? is_page_fault_stale+0xa2/0x5e0
[  606.894467][T14439]  ? is_page_fault_stale+0xd5/0x5e0
[  606.896260][T14439]  kvm_tdp_page_fault+0x1ce/0x350
[  606.898059][T14439]  kvm_mmu_do_page_fault+0x59f/0x6a0
[  606.900130][T14439]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  606.902763][T14439]  ? __pfx___might_resched+0x10/0x10
[  606.904739][T14439]  kvm_arch_vcpu_pre_fault_memory+0x2a2/0x590
[  606.907530][T14439]  ? __pfx_kvm_arch_vcpu_pre_fault_memory+0x10/0x10
[  606.910532][T14439]  kvm_vcpu_ioctl+0xec1/0x1520
[  606.912345][T14439]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  606.914233][T14439]  ? tomoyo_path_number_perm+0x190/0x5b0
[  606.916772][T14439]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  606.919471][T14439]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  606.922147][T14439]  kvm_vcpu_compat_ioctl+0x216/0x3f0
[  606.924320][T14439]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  606.926866][T14439]  ? __do_compat_sys_ioctl+0x86/0x330
[  606.929316][T14439]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  606.931977][T14439]  __do_compat_sys_ioctl+0x2c3/0x330
[  606.934332][T14439]  __do_fast_syscall_32+0x73/0x120
[  606.936462][T14439]  do_fast_syscall_32+0x32/0x80
[  606.938687][T14439]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  606.941545][T14439] RIP: 0023:0xf7f61579
[  606.943427][T14439] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  606.951708][T14439] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  606.955119][T14439] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c040aed5
[  606.958308][T14439] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[  606.961786][T14439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.964769][T14439] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  606.967502][T14439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  606.970228][T14439]  </TASK>
[  606.971304][T14439] Modules linked in:
[  606.972886][    T8] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[  606.973256][T14439] ---[ end trace 0000000000000000 ]---
[  606.978657][T14439] RIP: 0010:is_page_fault_stale+0xd5/0x5e0
SYZFAIL: failed to recv rpc
[  606.980672][T14439] Code: 00 48 21 c3 48 b8 00 00 00 00 00 ea ff ff 48 c1 e3 06 48 01 c3 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 04 00 00 48 8b 5b 28 31 ff 48 89 de e8 a3 58
[  606.987825][T14439] RSP: 0018:ffffc9000d40f990 EFLAGS: 00010202
[  606.990007][T14439] RAX: dffffc0000000000 RBX: 000029ffffffffc0 RCX: ffffffff811ccf44
[  606.993408][T14439] RDX: 0000053ffffffffd RSI: ffffffff811ccf52 RDI: 000029ffffffffe8
[  606.996943][T14439] RBP: ffff888015598000 R08: 0000000000000006 R09: 00000000000131c1
[  607.000468][T14439] R10: 000fffffffffffff R11: 0000000000000000 R12: ffffc9000d40fa50
[  607.003663][T14439] R13: 00000000000131c1 R14: ffff888015598338 R15: 0000000000000001
[  607.007206][T14439] FS:  0000000000000000(0000) GS:ffff88802c300000(0063) knlGS:00000000f5706b40
[  607.010506][T14439] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  607.012768][T14439] CR2: 00000000f5705fbc CR3: 000000002548c000 CR4: 0000000000352ef0
[  607.015780][T14439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  607.019120][T14439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  607.022737][T14439] Kernel panic - not syncing: Fatal exception
[  607.026189][T14439] Kernel Offset: disabled
[  607.028136][T14439] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:29:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000001b5301c RBX=0000000000000000 RCX=ffffffff8b06bc09 RDX=ffffed1005806fda
RSI=ffffffff8bb05060 RDI=ffffffff8163514c RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20
R8 =0000000000000000 R9 =ffffed1005806fd9 R10=ffff88802c037ecb R11=0000000000000001
R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff90113018 R15=0000000000000000
RIP=ffffffff8b06cfff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f72401b0 CR3=000000000db7c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000001dab0d4 RBX=0000000000000001 RCX=ffffffff8b06bc09 RDX=ffffed1005826fda
RSI=ffffffff8bb05060 RDI=ffffffff8163514c RBP=ffffed1002cf8910 RSP=ffffc90000477e08
R8 =0000000000000000 R9 =ffffed1005826fd9 R10=ffff88802c137ecb R11=0000000000000001
R12=0000000000000001 R13=ffff8880167c4880 R14=ffffffff90113018 R15=0000000000000000
RIP=ffffffff8b06cfff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c100000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000005817c4c0 CR3=000000002548c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000005548ac RBX=0000000000000002 RCX=ffffffff8b06bc09 RDX=ffffed1005846fda
RSI=ffffffff8bb05060 RDI=ffffffff8163514c RBP=ffffed1002cfb000 RSP=ffffc90000487e08
R8 =0000000000000000 R9 =ffffed1005846fd9 R10=ffff88802c237ecb R11=ffffffff8b4f58c0
R12=0000000000000002 R13=ffff8880167d8000 R14=ffffffff90113018 R15=0000000000000000
RIP=ffffffff8b06cfff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c200000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555c7870b000 CR3=00000000126ca000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84fab3c5 RDI=ffffffff9511f340 RBP=ffffffff9511f300 RSP=ffffc9000d40f368
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43
R12=0000000000000000 R13=0000000000000050 R14=ffffffff84fab360 R15=0000000000000000
RIP=ffffffff84fab3ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f5705fbc CR3=000000002548c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000