last executing test programs:

38.279900928s ago: executing program 3 (id=1609):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd)

36.789662123s ago: executing program 3 (id=1616):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000140), 0x8, 0xa, 0x2000000})

29.637094413s ago: executing program 3 (id=1635):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x2c, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180))
sendmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@isdn={0x22, 0x38, 0x4, 0x3, 0xff}, 0x80, &(0x7f00000002c0)}}, {{&(0x7f0000000cc0)=@ll={0x11, 0x15, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x80, &(0x7f0000001180)=[{&(0x7f000001b000)="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", 0xaea}, {0x0}, {0x0}, {&(0x7f0000000e00)}, {&(0x7f0000000f80)}, {0x0}, {0x0}], 0x7}}], 0x3, 0x4004880)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)

23.86567115s ago: executing program 3 (id=1651):
read(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
socket$packet(0x11, 0x2, 0x300)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x13, 0x0, "ef359f415ce737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0xfffffffffffffffe]})
r1 = open(&(0x7f0000000580)='./file0\x00', 0x1412fe, 0x2)
fallocate(r1, 0x0, 0x0, 0x1000f4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ftruncate(r2, 0x2007ffc)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(r2, r2, 0x0, 0x800000009)

18.928889502s ago: executing program 3 (id=1665):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'tunl0\x00', 0x2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mremap(&(0x7f00005aa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0)
write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373)

16.529877543s ago: executing program 3 (id=1671):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
tee(r1, r4, 0x7, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)

14.685878423s ago: executing program 32 (id=1671):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
tee(r1, r4, 0x7, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)

11.89778047s ago: executing program 4 (id=1685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e6574"], 0x58}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
socket$kcm(0xa, 0x2, 0x73)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvfrom$rxrpc(r1, &(0x7f000001a280)=""/214, 0xd6, 0x40000000, &(0x7f000001a380)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000001040)=0x3dba, 0x4)
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0)

10.871197707s ago: executing program 2 (id=1686):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

10.804607368s ago: executing program 4 (id=1687):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

9.282669004s ago: executing program 4 (id=1691):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x13c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)

9.224480595s ago: executing program 2 (id=1692):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)

9.145422966s ago: executing program 2 (id=1694):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000003c0)={0x14, r2, 0x221, 0x70bd2b}, 0x14}}, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40000)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x5000000, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x48}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

9.121926277s ago: executing program 1 (id=1695):
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0046686, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1c, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240), 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.447434958s ago: executing program 0 (id=1696):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e6574"], 0x58}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
socket$kcm(0xa, 0x2, 0x73)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvfrom$rxrpc(r1, &(0x7f000001a280)=""/214, 0xd6, 0x40000000, &(0x7f000001a380)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000001040)=0x3dba, 0x4)
pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffffffffffffb)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0)

8.32953742s ago: executing program 4 (id=1697):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='signal_generate\x00', r0}, 0x18)
syz_io_uring_setup(0x143e, 0x0, 0x0, 0x0)

7.398696606s ago: executing program 2 (id=1698):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = getpid()
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180))
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840)

7.398369075s ago: executing program 4 (id=1699):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)

7.228888259s ago: executing program 0 (id=1700):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000fc0))

7.14589687s ago: executing program 1 (id=1701):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)

7.073840751s ago: executing program 1 (id=1702):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0)
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2084)
writev(r4, &(0x7f00000036c0)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
write$tun(r4, 0x0, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000680)={0x2ae, 0x7d, 0x40, {{0x500, 0x16d, 0x0, 0xb000000, {0x0, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x92, '\xcf\xc2m\xd7\xc5\x00\xf0\xdc4l)Vne\nA\x8aVK\x98\xa8BBJ\x97\x83\x7f[\x85Q\xee\xcb\x06\\\xf7\x1d\xe15\xf0s\xa2GAat\xe2\xa8\x04\x9bX\xd9]{\x99\xa9\xac\x9f;3\x82\x84Io\x9d\xcaf\x1dj\xc2f\xa0\x11\xe0\x84\xf3\xc1\xb0\xbe\x1d\xb4m)\xd6\b:E\xfb\xf8\x9e1\xb5\xe3\xdb\xfd\x0e5\xc7H\xde(\x1f\xe2\xba\x18\xef\x86\x8a\x87\xa9\xa4H`\x8c\x1c\xad\x87\xc8\xe0\x1e\x1c\x92\t\x00\xe6\xf8\xde\xb8\x98\x19[\xbe\xee\xe2\xa9\x94\x00'/146, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2ae)
r5 = syz_create_resource$binfmt(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919f7c59386a71bb800000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r6, &(0x7f0000000640)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
userfaultfd(0x801)
shutdown(r6, 0x1)

7.072927651s ago: executing program 0 (id=1711):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004840), 0x0, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000050)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38)
syz_clone3(0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

5.259378351s ago: executing program 0 (id=1703):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

5.178110832s ago: executing program 1 (id=1704):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000080, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)

4.73785685s ago: executing program 1 (id=1705):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'tunl0\x00', 0x2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mremap(&(0x7f00005aa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0)
write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373)

4.171584119s ago: executing program 2 (id=1706):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60)
write$binfmt_script(r0, &(0x7f0000000980)={'#! ', './file0', [{0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h<!^\xe9I\xf2\xd5u\x9c\xab^\n\xe1{B#uTb\xdb\xdc<\x00\x8d\xc6\xdc\x86)\xa5\xa9D5\xe9\x8a\xc3\xcc\xad\xa5\xd1\xef\xb3\xe7\x8cZ\xdb(\xbb\tV\xda%Kz\x04\xbe\xf1^\xe7%\x0e\xf1[|'}, {0x20, 'ro\x00'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj<g\xdd\xcb\xf9\xbf\xcfk\xaax\x94\x16\xa0\xb5\x04\x14\xfc\x92*\xa2\xd1\x97\x02\xca\xa1\xeb\xd6\xe6\xe67+\x11\xff\xd1f\xe4\x1d\xbb\xaf\xb0\xfab\x94I\x92\x86{+\xb5'}, {}]}, 0x142)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000380)='.dead\x00', &(0x7f0000000540), 0x0, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0xc0100)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xff, 0x101000)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x2})
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})

2.866603482s ago: executing program 2 (id=1707):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x40, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000040)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

2.589899256s ago: executing program 4 (id=1708):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0x57c68000)
socket$inet_udp(0x2, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
close(r3)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6e, 0x39, 0x2b, 0x8, 0x6cd, 0x119, 0xe6d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xfc, 0x2, 0x0, 0xba, 0x70, 0xc3, 0x8}}]}}]}}, 0x0)

1.724345621s ago: executing program 0 (id=1709):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e6574"], 0x58}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
socket$kcm(0xa, 0x2, 0x73)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvfrom$rxrpc(r1, &(0x7f000001a280)=""/214, 0xd6, 0x40000000, &(0x7f000001a380)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000001040)=0x3dba, 0x4)
pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffffffffffffb)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0)

732.343697ms ago: executing program 1 (id=1710):
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0046686, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1c, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket(0x10, 0x2, 0x0)
setuid(0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240), 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 0 (id=1712):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x15, 0x5, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62)

kernel console output (not intermixed with test programs):

op6, logical block 0, async page read
[  245.080528][   T26] audit: type=1326 audit(1744020540.985:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec706d0169 code=0x7ffc0000
[  245.835770][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  245.846736][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  245.854673][    C1] blk_update_request: I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  245.865586][    C1] Buffer I/O error on dev loop6, logical block 1, async page read
[  245.877165][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.989039][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  246.024796][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  246.035855][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  246.053447][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'.
[  246.067968][   T26] audit: type=1326 audit(1744020540.985:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec706d0169 code=0x7ffc0000
[  246.280531][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  246.289584][ T5894] ldm_validate_partition_table(): Disk read failed.
[  246.387226][   T26] audit: type=1326 audit(1744020540.985:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fec706d0169 code=0x7ffc0000
[  246.764660][ T5894] Dev loop6: unable to read RDB block 0
[  246.801605][ T5894]  loop6: unable to read partition table
[  246.808056][ T5894] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  247.025559][   T26] audit: type=1326 audit(1744020540.985:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec706d0169 code=0x7ffc0000
[  247.051921][    C1] print_req_error: 10 callbacks suppressed
[  247.051940][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  247.061512][   T26] audit: type=1326 audit(1744020540.995:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec706d0169 code=0x7ffc0000
[  247.068947][    C1] buffer_io_error: 9 callbacks suppressed
[  247.068961][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  247.259432][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  247.270401][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  247.311230][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  247.322202][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  247.332773][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  247.343778][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  247.562825][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  247.573789][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  247.664841][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  247.675849][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  247.774176][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  247.785198][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  247.838263][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  247.849293][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  248.617328][ T3545] ldm_validate_partition_table(): Disk read failed.
[  248.653686][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  248.664644][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  248.780145][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  248.791217][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  248.816746][ T3545] Dev loop6: unable to read RDB block 0
[  248.833599][ T3545]  loop6: unable to read partition table
[  250.798333][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.526'.
[  251.385243][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  252.558138][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  252.664964][ T4157] Bluetooth: hci0: command 0x0c20 tx timeout
[  255.699195][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'.
[  255.869638][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.876415][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  257.151568][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  257.628602][ T4324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  258.128662][   T26] audit: type=1326 audit(1744020556.785:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26013eb169 code=0x7ffc0000
[  258.179560][   T26] audit: type=1326 audit(1744020556.785:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26013eb169 code=0x7ffc0000
[  258.272376][   T26] audit: type=1326 audit(1744020556.835:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f26013eb169 code=0x7ffc0000
[  258.315562][   T26] audit: type=1326 audit(1744020556.835:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26013eb169 code=0x7ffc0000
[  258.358720][   T26] audit: type=1326 audit(1744020556.835:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26013eb169 code=0x7ffc0000
[  261.448058][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'.
[  262.905081][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  264.838623][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  266.024237][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.575'.
[  266.925442][ T6181] sctp: failed to load transform for md5: -2
[  267.945132][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  268.887906][ T4207] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  269.854866][ T4207] usb 3-1: Using ep0 maxpacket: 8
[  270.315390][ T4207] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  270.444096][ T4207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.563149][ T4207] usb 3-1: Product: syz
[  270.588335][ T4324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  270.630098][ T4207] usb 3-1: Manufacturer: syz
[  270.676344][ T4207] usb 3-1: SerialNumber: syz
[  271.064293][ T4207] usb 3-1: config 0 descriptor??
[  271.089650][ T4207] usb 3-1: can't set config #0, error -71
[  271.322035][ T4207] usb 3-1: USB disconnect, device number 6
[  271.334098][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.590'.
[  272.149978][ T6251] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  272.161928][ T6251] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  273.542939][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.353407][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  277.876280][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.605'.
[  277.945257][ T6130] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  277.973091][ T6301] netlink: 256 bytes leftover after parsing attributes in process `syz.2.606'.
[  278.332171][ T6130] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  278.340836][ T6130] usb 2-1: config 0 has no interface number 0
[  278.356155][ T6130] usb 2-1: config 0 interface 113 has no altsetting 0
[  278.515083][ T6130] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  278.545015][ T6130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.553295][ T6130] usb 2-1: Product: syz
[  278.559292][ T4718] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  278.600957][ T6130] usb 2-1: Manufacturer: syz
[  278.607283][ T6130] usb 2-1: SerialNumber: syz
[  279.368082][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.406417][ T6130] usb 2-1: config 0 descriptor??
[  279.638002][ T6323] ptrace attach of "./syz-executor exec"[4166] was attempted by "./syz-executor exec"[6323]
[  279.684761][    C0] usb 2-1: NFC: Urb failure (status -71)
[  279.705075][    C0] usb 2-1: NFC: Urb failure (status -71)
[  279.714940][ T6130] usb 2-1: NFC: Unable to get FW version
[  279.722454][ T6130] pn533_usb: probe of 2-1:0.113 failed with error -71
[  279.938144][ T4718] usb 5-1: Using ep0 maxpacket: 8
[  279.946090][ T6130] usb 2-1: USB disconnect, device number 3
[  281.150796][ T6334] lo speed is unknown, defaulting to 1000
[  281.157050][ T6334] lo speed is unknown, defaulting to 1000
[  281.601763][ T6334] lo speed is unknown, defaulting to 1000
[  281.612304][ T6334] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  281.624103][ T6334] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  281.652105][ T6334] lo speed is unknown, defaulting to 1000
[  281.659071][ T6334] lo speed is unknown, defaulting to 1000
[  281.665573][ T6334] lo speed is unknown, defaulting to 1000
[  281.672104][ T6334] lo speed is unknown, defaulting to 1000
[  281.678599][ T6334] lo speed is unknown, defaulting to 1000
[  281.845881][ T4718] usb 5-1: unable to read config index 0 descriptor/start: -71
[  281.853675][ T4718] usb 5-1: can't read configurations, error -71
[  282.462356][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.713282][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.623'.
[  283.839712][ T1111] Bluetooth: hci4: command 0x0406 tx timeout
[  283.991926][ T6368] netlink: 84 bytes leftover after parsing attributes in process `syz.3.625'.
[  284.002510][ T6366] batman_adv: batadv0: Adding interface: dummy0
[  284.042828][ T6366] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.127345][ T6366] batman_adv: batadv0: Interface activated: dummy0
[  284.425251][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.514862][ T4186] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  287.014823][ T4186] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  287.077406][ T4186] usb 4-1: config 0 has no interface number 0
[  287.110731][ T4186] usb 4-1: config 0 interface 113 has no altsetting 0
[  287.326301][ T4186] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  287.354072][ T4186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.385891][ T4186] usb 4-1: Product: syz
[  287.401627][ T4186] usb 4-1: Manufacturer: syz
[  287.423046][ T4186] usb 4-1: SerialNumber: syz
[  287.456828][ T4186] usb 4-1: config 0 descriptor??
[  287.704657][    C1] usb 4-1: NFC: Urb failure (status -71)
[  287.724694][    C1] usb 4-1: NFC: Urb failure (status -71)
[  287.734771][ T4186] usb 4-1: NFC: Unable to get FW version
[  287.741271][ T4186] pn533_usb: probe of 4-1:0.113 failed with error -71
[  287.822228][ T4186] usb 4-1: USB disconnect, device number 7
[  287.885237][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  288.232439][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.638'.
[  289.340495][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'.
[  289.451019][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'.
[  290.441679][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  293.378660][ T6472] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  293.625076][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  294.023644][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'.
[  295.525542][ T6502] tmpfs: Unknown parameter 'usrquota'
[  296.555858][ T6513] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  298.140752][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'.
[  298.375770][ T6130] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  299.204917][ T6130] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 48, changing to 9
[  299.224712][ T6130] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 8447, setting to 1024
[  299.243888][ T6130] usb 5-1: config 0 interface 0 has no altsetting 0
[  299.534949][ T6130] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  299.544100][ T6130] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  300.392558][ T6130] usb 5-1: Product: syz
[  300.397093][ T6130] usb 5-1: Manufacturer: syz
[  300.401758][ T6130] usb 5-1: SerialNumber: syz
[  300.409336][ T6130] usb 5-1: config 0 descriptor??
[  300.448652][ T6130] usb 5-1: selecting invalid altsetting 0
[  300.660125][ T6533] udc-core: couldn't find an available UDC or it's busy
[  300.668576][ T6533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  305.044007][ T4208] usb 5-1: USB disconnect, device number 5
[  307.625001][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.693'.
[  307.788207][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.327161][ T6625] netlink: 64 bytes leftover after parsing attributes in process `syz.3.702'.
[  312.694744][ T4157] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  313.115448][ T4157] usb 2-1: config 2 has an invalid interface number: 1 but max is 0
[  313.620592][ T4157] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  313.651007][ T4157] usb 2-1: config 2 has no interface number 0
[  313.688737][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.715'.
[  313.698037][ T4208] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  313.815194][ T4157] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[  313.831671][ T4157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.840852][ T4157] usb 2-1: Product: syz
[  313.850415][ T4157] usb 2-1: Manufacturer: syz
[  313.860589][ T4157] usb 2-1: SerialNumber: syz
[  314.024920][ T4256] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  314.068725][ T4157] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  314.087381][ T4157] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  314.105136][ T4208] usb 5-1: config 1 interface 0 has no altsetting 0
[  314.123309][   T23] usb 2-1: USB disconnect, device number 4
[  314.275202][ T4208] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  314.294905][ T4208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.302956][ T4208] usb 5-1: Product: syz
[  314.314918][ T4208] usb 5-1: Manufacturer: syz
[  314.319574][ T4208] usb 5-1: SerialNumber: syz
[  314.399142][ T4256] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  314.413319][ T4256] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  314.428638][ T4256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  314.439563][ T4157] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  314.453585][ T4256] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  314.471432][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  314.481664][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  314.497511][ T4256] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  314.896257][ T4256] usb 4-1: string descriptor 0 read error: -22
[  314.902577][ T4256] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  314.912128][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.922139][ T4256] usb 4-1: config 0 descriptor??
[  314.973394][ T4256] hub 4-1:0.0: bad descriptor, ignoring hub
[  314.982995][ T4256] hub: probe of 4-1:0.0 failed with error -5
[  314.989531][ T4157] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  315.001931][ T4256] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  315.013668][ T4157] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  315.025051][ T4157] usb 3-1: config 220 has no interface number 2
[  315.031391][ T4157] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  315.050479][ T4157] usb 3-1: config 220 interface 0 has no altsetting 0
[  315.060197][ T4157] usb 3-1: config 220 interface 76 has no altsetting 0
[  315.061978][ T4208] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  315.068455][ T4157] usb 3-1: config 220 interface 1 has no altsetting 0
[  315.201177][ T4186] usb 4-1: USB disconnect, device number 8
[  315.274895][ T4157] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  315.289279][ T4157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.299307][ T4157] usb 3-1: Product: syz
[  315.303591][ T4157] usb 3-1: Manufacturer: syz
[  315.314357][ T4157] usb 3-1: SerialNumber: syz
[  315.522613][ T4186] usb 5-1: USB disconnect, device number 6
[  315.534649][    C0] usblp0: nonzero write bulk status received: -108
[  315.683771][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.730'.
[  315.731333][ T6661] usblp0: removed
[  315.885575][ T4157] usb 3-1: selecting invalid altsetting 0
[  315.891933][ T4157] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  315.920654][ T4157] usb 3-1: No valid video chain found.
[  316.028229][ T4157] usb 3-1: selecting invalid altsetting 0
[  316.034061][ T4157] usbtest: probe of 3-1:220.1 failed with error -22
[  316.064957][ T4157] usb 3-1: USB disconnect, device number 7
[  316.648156][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'.
[  316.934102][ T6750] netlink: 'syz.4.736': attribute type 21 has an invalid length.
[  317.320049][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.327149][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.501097][ T4157] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  318.680945][ T4157] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.704824][ T4157] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  318.795446][ T4157] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  318.817097][ T4157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  318.834693][ T4157] usb 4-1: SerialNumber: syz
[  318.998626][ T6776] netlink: 'syz.0.745': attribute type 4 has an invalid length.
[  319.038256][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'.
[  319.170590][ T4157] usb 4-1: 0:2 : does not exist
[  319.251432][ T4157] usb 4-1: USB disconnect, device number 9
[  319.508936][ T6613] udevd[6613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.713451][ T6130] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  319.737879][ T6130] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  319.975096][ T4157] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  320.055459][ T6130] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  320.224909][ T4157] usb 3-1: Using ep0 maxpacket: 16
[  320.346603][ T4157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  320.382794][ T4157] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  320.666687][ T6130] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  320.771502][ T6130] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  320.844884][ T6130] usb 4-1: config 220 has no interface number 2
[  320.851581][ T4157] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  320.874766][ T6130] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  320.894509][ T4157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.939948][ T4157] usb 3-1: config 0 descriptor??
[  320.950896][ T6130] usb 4-1: config 220 interface 0 has no altsetting 0
[  320.961843][ T6130] usb 4-1: config 220 interface 76 has no altsetting 0
[  320.973422][ T6130] usb 4-1: config 220 interface 1 has no altsetting 0
[  321.215106][ T6130] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  321.229656][ T6130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.240909][ T6130] usb 4-1: Product: syz
[  321.250221][ T6130] usb 4-1: Manufacturer: syz
[  321.258076][ T6130] usb 4-1: SerialNumber: syz
[  321.463192][ T4157] kovaplus 0003:1E7D:2D50.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0
[  321.903455][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'.
[  321.915264][ T6130] usb 4-1: selecting invalid altsetting 0
[  321.926409][ T6130] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  321.933864][ T6130] usb 4-1: No valid video chain found.
[  322.544069][ T6130] usb 4-1: selecting invalid altsetting 0
[  322.585047][ T6130] usbtest: probe of 4-1:220.1 failed with error -22
[  322.623627][ T6130] usb 4-1: USB disconnect, device number 10
[  323.124811][ T1108] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  323.485571][ T1108] usb 2-1: config 1 interface 0 has no altsetting 0
[  323.644935][ T4157] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device
[  323.669502][ T4157] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse
[  323.680523][ T4157] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -71
[  323.735042][ T1108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  323.748312][ T4157] usb 3-1: USB disconnect, device number 8
[  323.767921][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.846431][ T1108] usb 2-1: Product: syz
[  323.885808][ T1108] usb 2-1: Manufacturer: syz
[  323.902221][ T1108] usb 2-1: SerialNumber: syz
[  324.210041][ T6836] tipc: Started in network mode
[  324.215394][ T6836] tipc: Node identity 4, cluster identity 4711
[  324.221629][ T6836] tipc: Node number set to 4
[  325.429682][ T1108] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  327.756233][ T4186] usb 2-1: USB disconnect, device number 5
[  327.813853][ T4186] usblp0: removed
[  327.944705][ T4208] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  327.995975][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'.
[  328.229895][   T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  328.268978][   T13] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  328.345064][ T4208] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  328.371836][ T4208] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  328.404895][ T4208] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  328.422274][ T4208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.485066][ T6855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  328.584860][   T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  329.145300][   T13] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  329.165773][   T13] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  329.181799][   T13] usb 5-1: config 220 has no interface number 2
[  329.196130][   T13] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  329.216931][   T13] usb 5-1: config 220 interface 0 has no altsetting 0
[  329.226128][   T13] usb 5-1: config 220 interface 76 has no altsetting 0
[  329.240122][   T13] usb 5-1: config 220 interface 1 has no altsetting 0
[  329.405208][   T13] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  329.415077][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.423405][   T13] usb 5-1: Product: syz
[  329.431759][   T13] usb 5-1: Manufacturer: syz
[  329.436981][   T13] usb 5-1: SerialNumber: syz
[  329.842276][ T6877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.776'.
[  330.685049][   T13] usb 5-1: selecting invalid altsetting 0
[  330.713272][   T13] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  330.813031][ T6882] tipc: Started in network mode
[  330.818126][ T6882] tipc: Node identity 4, cluster identity 4711
[  330.824362][ T6882] tipc: Node number set to 4
[  331.757497][   T13] usb 5-1: No valid video chain found.
[  331.846577][   T13] usb 5-1: selecting invalid altsetting 0
[  331.861196][   T13] usbtest: probe of 5-1:220.1 failed with error -22
[  331.909956][   T13] usb 5-1: USB disconnect, device number 7
[  334.088588][   T13] usb 3-1: USB disconnect, device number 9
[  334.250363][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'.
[  337.681075][ T6926] tipc: Started in network mode
[  337.686055][ T6926] tipc: Node identity 4, cluster identity 4711
[  337.692230][ T6926] tipc: Node number set to 4
[  337.820518][ T4718] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  339.564350][ T6934] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  339.815735][ T4718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  340.365683][ T4718] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  340.375790][ T4718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.400355][ T4718] usb 3-1: config 0 descriptor??
[  340.524006][ T4718] usb 3-1: can't set config #0, error -71
[  340.534076][ T4718] usb 3-1: USB disconnect, device number 10
[  345.854759][   T13] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  347.494870][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  347.512587][   T13] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  347.542167][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.815659][   T13] usb 2-1: config 0 descriptor??
[  347.940236][ T6982] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  348.412203][   T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  348.711414][   T13] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  348.814717][   T23] usb 3-1: Using ep0 maxpacket: 8
[  348.939929][   T13] usb 2-1: USB disconnect, device number 6
[  349.134717][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  349.614168][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'.
[  349.714796][   T23] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  349.824516][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.833340][   T23] usb 3-1: Product: syz
[  349.838450][   T23] usb 3-1: Manufacturer: syz
[  349.843096][   T23] usb 3-1: SerialNumber: syz
[  349.856666][   T23] usb 3-1: config 0 descriptor??
[  349.925521][   T23] gspca_main: stk014-2.14.0 probing 05e1:0893
[  349.932270][   T23] usb 3-1: selecting invalid altsetting 1
[  350.135165][   T23] gspca_stk014: reg_r err -71
[  350.139949][   T23] stk014: probe of 3-1:0.0 failed with error -71
[  351.183195][   T23] usb 3-1: USB disconnect, device number 11
[  353.364469][   T23] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  354.055096][   T23] usb 4-1: config 1 interface 0 has no altsetting 0
[  354.871905][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  354.908292][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.964874][   T23] usb 4-1: Product: syz
[  354.994717][   T23] usb 4-1: Manufacturer: syz
[  354.999375][   T23] usb 4-1: SerialNumber: syz
[  355.221073][   T23] usb 4-1: can't set config #1, error -71
[  355.238422][   T23] usb 4-1: USB disconnect, device number 11
[  355.294696][   T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  355.366985][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'.
[  355.688964][   T13] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  355.698434][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.837843][   T13] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  356.869708][   T13] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  356.883722][   T13] usb 2-1: Manufacturer: syz
[  356.919588][   T13] usb 2-1: config 0 descriptor??
[  357.774866][   T13] rc_core: IR keymap rc-hauppauge not found
[  357.781502][   T13] Registered IR keymap rc-empty
[  357.806418][   T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  357.855955][   T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  358.164263][ T7119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.180548][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'.
[  358.195405][   T13] usb 2-1: USB disconnect, device number 7
[  360.530452][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'.
[  361.377118][ T7158] mmap: syz.1.866 (7158) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  361.414888][ T7166] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  362.754721][ T4157] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  363.144751][ T1108] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  363.224898][ T4157] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  363.503355][ T4157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.532844][ T4157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.564302][ T4157] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  363.706750][ T1108] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  363.715546][ T4157] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  363.744695][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.761683][ T4157] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  363.785196][ T4157] usb 3-1: Manufacturer: syz
[  363.813863][ T4157] usb 3-1: config 0 descriptor??
[  363.864797][ T1108] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  363.891905][ T1108] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  363.910315][ T1108] usb 4-1: Manufacturer: syz
[  363.940391][ T1108] usb 4-1: config 0 descriptor??
[  364.318513][ T4157] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  364.385682][ T4157] appleir 0003:05AC:8243.0007: No inputs registered, leaving
[  364.445100][ T1108] rc_core: IR keymap rc-hauppauge not found
[  364.451217][ T1108] Registered IR keymap rc-empty
[  364.525481][ T1108] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  364.566298][ T4157] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  364.588877][ T1108] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14
[  364.637776][ T4157] usb 3-1: USB disconnect, device number 12
[  364.775924][   T23] Bluetooth: hci4: command 0x0405 tx timeout
[  364.795766][ T1108] usb 4-1: USB disconnect, device number 12
[  368.512010][ T7238] netlink: 68 bytes leftover after parsing attributes in process `syz.3.894'.
[  368.614049][ T7238] netlink: 68 bytes leftover after parsing attributes in process `syz.3.894'.
[  371.966014][ T7268] ubi31: attaching mtd0
[  372.093810][ T7268] ubi31: scanning is finished
[  372.182541][ T7268] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  372.191173][ T7268] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  372.199057][ T7268] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  372.207595][ T7268] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  372.218441][ T7268] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  372.228729][ T7268] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  372.238851][ T7268] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1321384656
[  372.249873][ T7268] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  372.262265][ T7275] ubi31: background thread "ubi_bgt31d" started, PID 7275
[  373.854807][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  374.367353][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.911'.
[  374.476027][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  374.655934][ T1108] usb 5-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00
[  374.691285][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.723685][ T1108] usb 5-1: config 0 descriptor??
[  375.811312][ T7310] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  377.304661][ T1111] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  377.304899][ T1108] usbhid 5-1:0.0: can't add hid device: -71
[  377.355001][ T1108] usbhid: probe of 5-1:0.0 failed with error -71
[  377.510926][ T7334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.923'.
[  377.533433][ T1108] usb 5-1: USB disconnect, device number 8
[  378.841240][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.847686][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  379.755578][ T7348] ubi31: detaching mtd0
[  379.810455][ T7348] ubi31: mtd0 is detached
[  379.815255][ T1111] usb 3-1: device descriptor read/all, error -71
[  383.666149][ T7383] block nbd2: shutting down sockets
[  386.240919][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'.
[  386.258085][ T4186] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  386.434112][ T7408] usb usb8: usbfs: process 7408 (syz.2.946) did not claim interface 6 before use
[  387.589260][ T4186] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  387.628343][ T4186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.427001][ T4186] usb 5-1: Product: syz
[  389.431236][ T4186] usb 5-1: Manufacturer: syz
[  389.502496][ T4186] usb 5-1: SerialNumber: syz
[  389.587368][ T4186] usb 5-1: can't set config #1, error -71
[  389.792207][ T4186] usb 5-1: USB disconnect, device number 9
[  390.396099][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'.
[  392.624694][ T1111] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  394.430728][ T1111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  394.443167][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.456347][ T1111] usb 2-1: Product: syz
[  394.460566][ T1111] usb 2-1: Manufacturer: syz
[  394.472205][ T1111] usb 2-1: SerialNumber: syz
[  394.530953][ T1111] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  394.745912][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  394.768582][ T4208] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  395.055001][ T4208] usb 4-1: Using ep0 maxpacket: 32
[  395.246664][ T4718] usb 2-1: USB disconnect, device number 8
[  395.255040][ T1111] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  395.301369][ T4718] usb 2-1: ath9k_htc: USB layer deinitialized
[  395.380697][ T4208] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5
[  395.404770][ T4208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.649932][ T4208] usb 4-1: Product: syz
[  395.654981][ T4208] usb 4-1: Manufacturer: syz
[  395.660420][ T4208] usb 4-1: SerialNumber: syz
[  395.668783][ T4208] usb 4-1: config 0 descriptor??
[  395.705598][ T4208] hub 4-1:0.0: bad descriptor, ignoring hub
[  395.711567][ T4208] hub: probe of 4-1:0.0 failed with error -5
[  395.795191][ T4208] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  396.364728][ T4208] gspca_vc032x: reg_w err -110
[  396.369567][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.505337][ T7479] ubi31: attaching mtd0
[  396.510749][ T7479] ubi31: scanning is finished
[  396.535170][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.551762][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.572823][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.607383][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.637188][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.657068][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.767162][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.797441][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.803088][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.805625][ T7497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.975'.
[  396.817412][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.817433][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.817518][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.855661][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.861200][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.917397][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.924363][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.929762][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.981230][ T4208] gspca_vc032x: I2c Bus Busy Wait 00
[  396.997373][ T4208] gspca_vc032x: Unknown sensor...
[  397.015887][ T4208] vc032x: probe of 4-1:0.0 failed with error -22
[  398.257927][ T7479] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  398.402966][ T7510] ksmbd: Unknown IPC event: 6, ignore.
[  398.501855][ T4157] usb 4-1: USB disconnect, device number 13
[  400.124388][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  400.522534][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  402.321624][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  402.434373][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  405.635575][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  405.820439][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'.
[  406.323237][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  406.414485][ T7569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.998'.
[  408.801183][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  410.764935][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  413.101454][   T26] audit: type=1326 audit(1744020711.755:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec706d0169 code=0x7ffc0000
[  413.272961][   T26] audit: type=1326 audit(1744020711.755:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec706d0169 code=0x7ffc0000
[  413.325029][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  413.362264][ T7624] ax25_connect(): syz.2.1013 uses autobind, please contact jreuter@yaina.de
[  414.049278][ T7627] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  414.595242][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  415.396664][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1017'.
[  415.875006][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  418.094300][ T7664] tmpfs: Unknown parameter 'usrquota'
[  419.065065][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  419.694677][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1031'.
[  420.101507][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  420.682101][ T7686] netlink: 'syz.2.1033': attribute type 10 has an invalid length.
[  420.695014][ T7686] device syz_tun entered promiscuous mode
[  420.733467][ T7686] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  421.370437][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1034'.
[  421.398397][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'.
[  422.056835][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  422.067982][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  422.145516][ T7701] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  422.307452][ T7706] ubi31: attaching mtd0
[  422.354938][ T7706] ubi31: scanning is finished
[  423.178344][ T4678] Bluetooth: hci5: Frame reassembly failed (-84)
[  423.223772][ T4678] Bluetooth: hci5: Frame reassembly failed (-84)
[  423.328575][ T7706] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  423.369406][ T7706] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  423.444018][ T7706] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  423.624033][ T7706] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  423.624107][ T7706] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  423.624162][ T7706] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  423.624216][ T7706] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1321384656
[  423.624275][ T7706] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  423.624369][ T7717] ubi31: background thread "ubi_bgt31d" started, PID 7717
[  423.624769][ T7709] ubi31: detaching mtd0
[  423.626586][ T7709] ubi31: mtd0 is detached
[  424.925562][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  424.997255][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'.
[  425.361994][    T7] Bluetooth: hci5: command 0x1003 tx timeout
[  425.362288][ T4273] Bluetooth: hci5: Frame reassembly failed (-84)
[  426.753577][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  427.101042][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1051'.
[  427.390363][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  427.509741][ T4157] Bluetooth: hci5: command 0x1001 tx timeout
[  427.551993][ T7716] Bluetooth: hci5: sending frame failed (-49)
[  428.035291][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  429.842286][    T7] Bluetooth: hci5: command 0x1009 tx timeout
[  430.037117][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  430.061430][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1058'.
[  432.243835][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  433.155015][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  433.215942][ T7798] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1068'.
[  433.785129][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  435.076677][ T7824] ubi31: attaching mtd0
[  435.324251][ T7824] ubi31: scanning is finished
[  435.737232][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  435.777945][ T7824] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  436.345226][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  436.356473][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  436.714889][ T1111] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  437.995959][ T1111] usb 5-1: Using ep0 maxpacket: 8
[  438.071287][ T7859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1082'.
[  438.154999][ T1111] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  438.166292][ T1111] usb 5-1: config 0 has no interface number 0
[  438.179456][ T1111] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17640, setting to 1024
[  438.190990][ T1111] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  438.200302][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.211933][ T1111] usb 5-1: config 0 descriptor??
[  438.235091][ T7852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  438.261730][ T1111] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  438.507991][ T1111] usb 5-1: USB disconnect, device number 10
[  438.915128][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  440.234425][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  440.296841][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  440.303396][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  440.637705][ T7879] ubi31: attaching mtd0
[  440.814167][ T7879] ubi31: scanning is finished
[  441.466563][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  441.537689][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  442.313763][ T7879] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  442.339957][    T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  442.384105][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1090'.
[  442.616197][ T7879] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  442.691839][ T7879] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  442.716523][ T7879] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  442.727797][ T7879] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  442.738496][ T7879] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  442.747288][ T7879] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1321384656
[  442.855138][ T7879] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  442.950712][ T7885] ubi31: background thread "ubi_bgt31d" started, PID 7885
[  443.242271][ T7889] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  443.555777][ T7903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1095'.
[  444.697686][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  444.989522][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  447.966402][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  448.224233][    T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  448.687982][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1104'.
[  449.005418][ T7944] ubi: mtd0 is already attached to ubi31
[  449.703583][ T7948] netlink: 'syz.4.1107': attribute type 72 has an invalid length.
[  449.730760][ T7948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1107'.
[  450.463487][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  451.065448][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  451.099272][    T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  451.154813][ T7954] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  453.293188][ T7989] netlink: 'syz.0.1119': attribute type 72 has an invalid length.
[  453.356086][ T7989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1119'.
[  453.636741][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  453.964680][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1118'.
[  454.118932][ T7992] ubi: mtd0 is already attached to ubi31
[  454.527371][ T7995] netlink: 'syz.0.1131': attribute type 72 has an invalid length.
[  454.606197][ T7995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1131'.
[  454.863969][ T7998] ubi: mtd0 is already attached to ubi31
[  455.725711][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  456.308936][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  456.834978][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  457.929611][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  459.335733][ T8029] ubi31: detaching mtd0
[  459.343942][ T8029] ubi31: mtd0 is detached
[  459.583416][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  459.933914][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1133'.
[  460.333481][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1135'.
[  460.783616][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  460.927400][ T8041] block nbd1: Device being setup by another task
[  460.946547][ T4169] block nbd1: Receive control failed (result -107)
[  461.438966][ T6613] block nbd1: shutting down sockets
[  462.021488][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  463.142246][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  463.553227][ T8067] 9pnet_virtio: no channels available for device 127.0.0.1
[  465.909039][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  466.206875][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  466.492434][ T8075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1144'.
[  467.557955][    T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  467.817485][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'.
[  470.850100][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  471.015183][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  471.082708][ T8118] ubi31: attaching mtd0
[  471.206978][ T8118] ubi31: scanning is finished
[  471.970144][ T8129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1161'.
[  472.026466][ T8118] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  472.185288][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  472.203366][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  473.274058][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1164'.
[  474.483262][ T8171] ubi31: attaching mtd0
[  474.754688][ T8171] ubi31: scanning is finished
[  474.946319][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  475.296575][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  475.329171][ T8171] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  475.347172][ T8171] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  475.355327][ T8171] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  475.366217][ T8171] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  475.376370][ T8171] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  475.404410][ T8171] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  475.567496][ T8171] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1321384656
[  476.336073][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  476.374762][ T8171] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  476.444704][ T8178] ubi31: background thread "ubi_bgt31d" started, PID 8178
[  476.665426][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  476.678162][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  476.778983][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  476.990521][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  477.788295][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1179'.
[  478.171756][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  478.195045][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  479.719733][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  481.241184][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  481.585502][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  481.643739][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  482.620922][ T8226] ubi: mtd0 is already attached to ubi31
[  482.835957][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  483.906070][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  483.906178][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  483.917356][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  485.333880][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1196'.
[  486.797350][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  486.808967][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  486.955070][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  490.498197][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  490.515586][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  490.527327][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  490.527593][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  490.676091][ T8290] ubi31: detaching mtd0
[  490.708753][ T8290] ubi31: mtd0 is detached
[  490.746249][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  490.977856][ T8296] ubi31: attaching mtd0
[  490.995092][ T8296] ubi31: scanning is finished
[  491.574732][ T8296] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  491.617365][ T8296] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  491.626817][ T8296] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  491.635183][ T8296] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  491.643090][ T8296] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  491.651155][ T8296] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  491.661478][ T8296] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1321384656
[  491.674264][ T8296] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  491.685762][ T8299] ubi31: background thread "ubi_bgt31d" started, PID 8299
[  492.678192][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  493.522835][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'.
[  495.915597][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  495.926698][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  496.288777][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  496.301721][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  496.312870][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  496.324109][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  496.335410][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  497.624608][ T8343] ubi: mtd0 is already attached to ubi31
[  498.092375][ T8354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1224'.
[  498.139167][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'.
[  498.235332][ T8361] ubi31: detaching mtd0
[  498.282087][ T8361] ubi31: mtd0 is detached
[  498.427295][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  500.385376][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  500.923015][ T8392] ubi31: attaching mtd0
[  501.104695][ T8392] ubi31: scanning is finished
[  501.307834][ T8392] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  501.315900][ T8392] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  501.324665][ T8392] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  501.332643][ T8392] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  501.340579][ T8392] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  501.349606][ T8392] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  501.362286][ T8392] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1321384656
[  501.373254][ T8392] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  501.386041][ T8399] ubi31: detaching mtd0
[  501.399369][ T8399] ubi31: mtd0 is detached
[  501.700678][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.707237][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  502.271096][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  502.283733][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  502.305769][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  503.982398][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'.
[  505.062737][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  505.448469][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  506.349786][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  506.588442][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  506.737287][ T8457] ubi31: attaching mtd0
[  506.955055][ T8457] ubi31: scanning is finished
[  507.258469][ T8457] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  507.278166][ T8457] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  507.360565][ T8457] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  507.370771][ T8457] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  507.381525][ T8457] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  507.391257][ T8457] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  507.399976][ T8457] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1321384656
[  507.439024][ T8462] team0 (unregistering): Port device team_slave_0 removed
[  507.449981][ T8457] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  507.475683][ T8462] team0 (unregistering): Port device team_slave_1 removed
[  507.519239][ T8463] ubi31: background thread "ubi_bgt31d" started, PID 8463
[  508.031863][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  508.046825][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  508.058436][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  508.345125][ T6130] Bluetooth: hci4: command 0x0405 tx timeout
[  511.809189][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  511.814878][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  512.059098][ T8500] ieee802154 phy0 wpan0: encryption failed: -22
[  513.087621][ T8503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'.
[  513.642855][ T8509] lo speed is unknown, defaulting to 1000
[  513.790900][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  513.802460][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  515.299464][ T8509] netlink: 'syz.4.1269': attribute type 4 has an invalid length.
[  515.705254][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  515.742065][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  515.753911][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  515.893879][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  515.931312][ T8535] cgroup: Bad value for 'name'
[  516.295413][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1280'.
[  517.378551][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  517.804645][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'.
[  518.228471][ T8559] ubi: mtd0 is already attached to ubi31
[  518.449214][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  519.842699][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  519.873833][ T4157] Bluetooth: hci3: command 0x0409 tx timeout
[  519.953531][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  519.953881][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  520.905570][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  520.907221][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  522.121593][ T8587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1293'.
[  522.828172][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  522.947439][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  523.022167][ T8596] overlayfs: missing 'lowerdir'
[  524.283965][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  525.002335][ T8618] ubi: mtd0 is already attached to ubi31
[  525.313650][ T4256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  525.314103][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  525.945116][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  525.956953][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  526.114903][ T4256] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  526.587761][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  527.434583][ T4256] usb 5-1: Using ep0 maxpacket: 8
[  527.739392][ T4256] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  527.750367][ T4256] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  527.762896][ T4256] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  527.984753][ T8647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1312'.
[  528.492987][ T4256] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  528.507044][ T4256] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  528.516520][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.970525][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  529.018500][ T4256] usb 5-1: can't set config #16, error -71
[  529.714761][ T4256] usb 5-1: USB disconnect, device number 11
[  529.801052][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  530.126038][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1315'.
[  530.494628][ T8658] ubi: mtd0 is already attached to ubi31
[  530.617410][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  531.065182][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  531.077019][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  531.090841][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  531.108933][ T8666] tmpfs: Unknown parameter 'usrquota'
[  531.757767][ T8675] ubi31: detaching mtd0
[  531.764800][ T8675] ubi31: mtd0 is detached
[  532.027082][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  532.357083][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  535.460844][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  535.472047][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  535.663404][ T4256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  535.685618][ T6130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  535.914687][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1329'.
[  536.825973][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  536.926405][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  536.944646][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  537.384990][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  537.704681][ T4186] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  538.024855][ T4186] usb 4-1: Using ep0 maxpacket: 16
[  538.254985][ T4186] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  538.284214][ T4186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  538.362320][ T4186] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  538.855029][ T4186] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  538.906855][ T4186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.109502][ T4186] usb 4-1: Product: syz
[  539.192735][ T4186] usb 4-1: Manufacturer: syz
[  539.367632][ T4186] usb 4-1: SerialNumber: syz
[  539.955893][ T4186] usb 4-1: 0:2 : does not exist
[  540.028321][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  541.315894][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  541.327292][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  541.385997][ T8749] ieee802154 phy0 wpan0: encryption failed: -22
[  541.780232][ T8754] ubi31: attaching mtd0
[  541.861279][ T4186] usb 4-1: USB disconnect, device number 14
[  542.009594][ T8754] ubi31: scanning is finished
[  542.198029][ T6613] udevd[6613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  542.583780][ T8754] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  542.593695][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  542.605721][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  542.605871][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  543.675600][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  544.548080][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  545.180513][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  545.301380][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  545.795475][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  546.018298][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1354'.
[  546.435256][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  547.268429][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  548.666545][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  548.680686][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  548.681033][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  548.987068][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  551.202577][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  551.633319][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  552.269382][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  552.892034][ T8869] kvm [8867]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800
[  552.905438][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  552.918163][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  552.938478][ T8869] kvm [8867]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0
[  554.115109][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  554.125125][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  554.126547][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  554.349082][ T8884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1385'.
[  554.357691][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  555.155592][ T8895] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[8895]
[  555.477782][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  556.695129][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  556.905916][ T8909] netlink: 'syz.3.1389': attribute type 1 has an invalid length.
[  557.314958][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  557.744541][ T8918] ubi31: attaching mtd0
[  557.754861][ T8918] ubi31: scanning is finished
[  557.947143][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  558.165433][ T8918] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  558.173486][ T8918] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  558.181122][ T8918] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  558.188551][ T8918] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  558.196296][ T8918] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  558.203306][ T8918] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  558.212892][ T8918] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1321384656
[  558.223240][ T8918] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  558.253890][ T8920] ubi31: background thread "ubi_bgt31d" started, PID 8920
[  559.235131][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  559.481017][ T8933] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  559.488713][ T8933] overlayfs: failed to set xattr on upper
[  559.494750][ T8933] overlayfs: ...falling back to index=off,metacopy=off.
[  559.502532][ T8933] overlayfs: ...falling back to xino=off.
[  559.870375][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  559.881542][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  559.895104][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  561.237549][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  562.438573][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  562.487358][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  563.095446][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  563.101818][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  563.121867][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  563.128914][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  563.458648][ T8962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1414'.
[  564.987401][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  565.024635][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  565.635070][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  565.646457][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  565.657731][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  566.459520][ T8984] lo speed is unknown, defaulting to 1000
[  566.750725][ T4186] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  566.907063][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  567.185280][ T4186] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  567.440694][ T4186] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  567.503835][ T4186] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  567.533797][ T4186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.779122][ T8999] ubi: mtd0 is already attached to ubi31
[  568.344847][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  568.680900][ T4208] usb 5-1: USB disconnect, device number 12
[  568.826519][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  568.827959][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  568.985665][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  569.293317][ T9020] xt_nat: multiple ranges no longer supported
[  570.158152][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  570.439507][ T9026] lo speed is unknown, defaulting to 1000
[  570.746613][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  571.391004][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  571.408852][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  571.419998][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  571.959779][ T9047] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  571.959936][ T9047] overlayfs: failed to set xattr on upper
[  571.959994][ T9047] overlayfs: ...falling back to index=off,metacopy=off.
[  571.960006][ T9047] overlayfs: ...falling back to xino=off.
[  572.743520][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  572.993412][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  573.892473][ T9051] ubi: mtd0 is already attached to ubi31
[  573.911330][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  575.199473][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  575.211444][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  575.224007][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  577.725424][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  577.752759][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  578.370259][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  578.370262][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  578.425785][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  578.816058][ T9105] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  578.823172][ T9105] overlayfs: failed to set xattr on upper
[  578.829251][ T9105] overlayfs: ...falling back to index=off,metacopy=off.
[  578.836289][ T9105] overlayfs: ...falling back to xino=off.
[  579.714874][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  580.060430][ T9096] kvm [9095]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x806
[  580.145679][ T9096] kvm [9095]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8e2
[  580.347784][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  583.050459][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  583.080633][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  583.665185][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  584.584125][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  584.675088][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  584.695457][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  584.905707][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  584.927851][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  586.010988][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  586.133749][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  587.649090][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  587.753579][ T9169] xt_nat: multiple ranges no longer supported
[  588.667083][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  588.668208][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  589.689802][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'.
[  589.947019][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  589.984282][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  590.107503][ T9175] kvm [9172]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xb0
[  590.147853][ T9186] ubi: mtd0 is already attached to ubi31
[  590.564761][ T9175] kvm [9172]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf2
[  590.605009][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  590.616159][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  590.627775][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  590.771751][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  591.503619][ T9205] ubi: mtd0 is already attached to ubi31
[  591.884012][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  591.895315][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  591.907900][   T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  591.987614][ T9216] ptrace attach of "./syz-executor exec"[4173] was attempted by "./syz-executor exec"[9216]
[  592.294591][   T23] usb 2-1: Using ep0 maxpacket: 16
[  592.564647][   T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  592.573949][   T23] usb 2-1: config 0 has no interface number 0
[  592.966072][   T23] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  593.657284][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.708944][   T23] usb 2-1: Product: syz
[  593.754782][   T23] usb 2-1: Manufacturer: syz
[  593.759442][   T23] usb 2-1: SerialNumber: syz
[  593.812200][   T23] usb 2-1: config 0 descriptor??
[  593.867312][   T23] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  594.137097][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'.
[  594.464999][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  595.178713][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  595.424641][   T23] gspca_spca1528: reg_w err -71
[  595.429632][   T23] spca1528: probe of 2-1:0.1 failed with error -71
[  595.454015][   T23] usb 2-1: USB disconnect, device number 9
[  595.705759][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  595.717333][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  595.988408][ T9252] ubi: mtd0 is already attached to ubi31
[  596.378507][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  596.393680][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  597.659868][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  597.683002][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  597.791315][ T9264] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  597.903256][ T9248] loop3: detected capacity change from 0 to 32768
[  597.978823][ T9248] =======================================================
[  597.978823][ T9248] WARNING: The mand mount option has been deprecated and
[  597.978823][ T9248]          and is ignored by this kernel. Remove the mand
[  597.978823][ T9248]          option from the mount to silence this warning.
[  597.978823][ T9248] =======================================================
[  598.084917][ T9266] kvm [9265]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800
[  598.093991][ T9266] kvm [9265]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0
[  598.731765][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1496'.
[  598.867362][ T9248] JBD2: recovery failed
[  598.880754][ T9248] (syz.3.1488,9248,1):ocfs2_journal_load:1083 ERROR: Failed to load journal!
[  598.890513][ T9248] (syz.3.1488,9248,1):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -5
[  598.903835][ T9248] (syz.3.1488,9248,1):ocfs2_check_volume:2490 ERROR: status = -5
[  598.916103][ T9248] (syz.3.1488,9248,0):ocfs2_mount_volume:1824 ERROR: status = -5
[  599.032951][ T9248] (syz.3.1488,9248,1):ocfs2_fill_super:1177 ERROR: status = -5
[  599.082720][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'.
[  600.196263][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  601.192996][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  601.263037][ T9297] loop2: detected capacity change from 0 to 256
[  601.475323][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  601.486870][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  602.106843][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  602.282243][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  602.403343][ T9297] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  602.525138][ T9297] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  603.473093][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  603.484510][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  605.983100][ T9313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  606.606845][ T9313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  607.692604][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  607.866669][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  607.878230][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  607.892809][ T9313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  607.906475][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  607.917747][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  608.133973][    T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  609.005026][    T7] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  609.014125][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.101564][    T7] usb 2-1: config 0 descriptor??
[  609.217909][    T7] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  609.266185][    T7] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22
[  609.268006][ T9338] overlayfs: failed to clone upperpath
[  609.441175][ T9339] overlayfs: failed to clone upperpath
[  610.211031][ T4208] usb 2-1: USB disconnect, device number 10
[  610.578061][ T9355] loop2: detected capacity change from 0 to 128
[  611.709336][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  611.709795][ T9313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  611.711509][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  612.344953][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  612.672681][ T9355] FAT-fs (loop2): Unrecognized mount option "nonul��Kmtail=0" or missing value
[  612.786290][ T9355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1518'.
[  613.176159][ T9362] ubi: mtd0 is already attached to ubi31
[  613.636234][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  613.636862][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  613.647468][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  613.715088][ T4340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  613.734885][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  615.593831][ T9389] xt_nat: multiple ranges no longer supported
[  615.661327][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  615.668893][ T9393] kvm: MWAIT instruction emulated as NOP!
[  616.183068][ T9404] loop3: detected capacity change from 0 to 128
[  616.828458][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  617.479607][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  617.491195][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  617.505268][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  618.746619][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  618.994173][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  619.576906][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  619.606071][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  619.606079][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  621.028291][ T9433] loop1: detected capacity change from 0 to 8
[  622.881654][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  623.225025][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  623.239565][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  623.251323][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  623.378479][ T9433] SQUASHFS error: xz decompression failed, data probably corrupt
[  623.393918][ T9433] SQUASHFS error: Failed to read block 0x108: -5
[  623.416451][ T9433] SQUASHFS error: Unable to read metadata cache entry [106]
[  623.424384][ T9433] SQUASHFS error: Unable to read inode 0x11f
[  623.945046][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  624.510527][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  624.516960][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  625.579876][ T9461] loop4: detected capacity change from 0 to 128
[  627.035466][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  627.036747][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  627.049953][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  627.059438][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  627.192616][ T9461] FAT-fs (loop4): Unrecognized mount option "nonul��Kmtail=0" or missing value
[  627.293695][ T9461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1547'.
[  627.591545][ T9465] loop3: detected capacity change from 0 to 1024
[  627.732359][ T9465] hfsplus: bad catalog entry type
[  627.936179][ T9469] ubi: mtd0 is already attached to ubi31
[  628.054124][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  628.088194][ T1178] hfsplus: b-tree write err: -5, ino 4
[  628.346620][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  628.985536][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  628.997099][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  630.187194][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  631.147061][ T9498] loop2: detected capacity change from 0 to 256
[  631.693109][ T9498] loop2: detected capacity change from 0 to 4096
[  631.869646][ T9498] NILFS (loop2): unrecognized mount option ""
[  632.574570][ T4208] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  632.838456][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  632.850122][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  632.862183][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  632.877582][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  633.034279][ T9500] loop1: detected capacity change from 0 to 32768
[  633.129597][ T9500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1560 (9500)
[  633.229374][ T9500] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  633.244790][ T4208] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  633.253676][ T9500] BTRFS info (device loop1): setting nodatacow, compression disabled
[  633.287034][ T9500] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  633.314754][ T9500] BTRFS info (device loop1): trying to use backup root at mount time
[  633.322979][ T9500] BTRFS info (device loop1): enabling auto defrag
[  633.334774][ T4208] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  633.343737][ T4208] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  633.374605][ T9500] BTRFS warning (device loop1): excessive commit interval 2047
[  633.382221][ T9500] BTRFS info (device loop1): turning on flush-on-commit
[  633.394602][ T4208] usb 5-1: config 0 interface 0 has no altsetting 0
[  633.424748][ T9500] BTRFS info (device loop1): using free space tree
[  633.432373][ T9500] BTRFS info (device loop1): has skinny extents
[  633.465526][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  633.494849][ T4208] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  633.503789][ T4208] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  633.544500][ T4208] usb 5-1: config 0 interface 0 has no altsetting 0
[  634.693675][ T4208] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  634.745905][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  634.745905][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  634.746455][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  634.798548][ T4208] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  634.825075][ T4208] usb 5-1: config 0 interface 0 has no altsetting 0
[  634.926765][ T4208] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  634.935830][ T4208] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  634.954611][ T4208] usb 5-1: config 0 interface 0 has no altsetting 0
[  635.052118][ T9518] loop3: detected capacity change from 0 to 32768
[  635.092367][ T4208] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  635.101763][ T4208] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  635.121103][ T4208] usb 5-1: config 0 interface 0 has no altsetting 0
[  635.214668][ T4208] usb 5-1: unable to read config index 5 descriptor/start: -71
[  635.225291][ T4208] usb 5-1: can't read configurations, error -71
[  635.318553][ T9518] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1565 (9518)
[  635.331939][ T9500] BTRFS error (device loop1): open_ctree failed: -12
[  635.393302][ T9518] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  635.421179][ T9560] loop4: detected capacity change from 0 to 512
[  635.441108][ T9518] BTRFS info (device loop3): turning off barriers
[  635.455972][ T9518] BTRFS info (device loop3): enabling ssd optimizations
[  635.491449][ T9518] BTRFS info (device loop3): using spread ssd allocation scheme
[  635.505301][ T9518] BTRFS info (device loop3): enabling auto defrag
[  635.523603][ T9518] BTRFS info (device loop3): not using ssd optimizations
[  635.545064][ T9560] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  635.574719][ T9560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  635.615986][ T9518] BTRFS info (device loop3): not using spread ssd allocation scheme
[  635.643165][ T9518] BTRFS info (device loop3): ignoring data csums
[  635.652240][ T9518] BTRFS info (device loop3): enabling ssd optimizations
[  635.702757][ T9518] BTRFS info (device loop3): using spread ssd allocation scheme
[  635.785814][ T9518] BTRFS info (device loop3): using free space tree
[  635.793517][ T9518] BTRFS info (device loop3): has skinny extents
[  635.836166][ T9560] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  635.857555][ T9569] netlink: 'syz.1.1577': attribute type 10 has an invalid length.
[  636.028002][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  636.059823][ T9560] EXT4-fs (loop4): 1 truncate cleaned up
[  636.065757][ T9560] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,quota,. Quota mode: writeback.
[  636.178607][ T9545] loop2: detected capacity change from 0 to 32768
[  636.195980][ T9518] BTRFS error (device loop3): open_ctree failed: -12
[  636.433679][ T9545] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  636.995301][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  637.193108][ T9545] gfs2: fsid=syz:syz: unknown hostdata (norgrplvb)
[  637.248462][ T9569] team0: Port device netdevsim0 added
[  637.302015][ T9572] netlink: 'syz.1.1577': attribute type 10 has an invalid length.
[  637.302190][ T9569] syz.1.1577 (9569) used greatest stack depth: 19248 bytes left
[  637.608442][ T9572] team0: Port device netdevsim0 removed
[  637.617170][ T9572] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  637.760278][ T9604] dccp_v6_rcv: dropped packet with invalid checksum
[  637.815811][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'.
[  638.585110][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  638.600576][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  638.625094][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  638.638286][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  639.099324][ T9632] ubi: mtd0 is already attached to ubi31
[  640.273512][ T9631] input: syz0 as /devices/virtual/input/input15
[  640.275666][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  640.518174][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  640.518450][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  640.596635][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  640.957311][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1590'.
[  640.986258][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1590'.
[  641.004971][ T9639] netlink: 'syz.1.1590': attribute type 6 has an invalid length.
[  641.198839][ T9648] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1593'.
[  642.701530][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  644.346724][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  644.372644][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  645.754885][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  645.755158][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  645.813417][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  645.921067][ T9689] ubi: mtd0 is already attached to ubi31
[  646.268251][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  646.283504][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  646.283565][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  647.662488][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  648.186989][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  648.428716][ T9703] loop2: detected capacity change from 0 to 4096
[  648.795301][ T9703] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  651.169217][ T9715] loop3: detected capacity change from 0 to 32768
[  652.190550][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.201925][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.205010][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.213608][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.231836][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.234134][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.251890][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.255249][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.286542][ T9715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1616 (9715)
[  652.329407][ T4175] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22.
[  652.338310][ T4175] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  652.353188][ T4175] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  652.380138][ T9715] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  652.448200][ T9715] BTRFS info (device loop3): using free space tree
[  652.478255][ T9715] BTRFS info (device loop3): has skinny extents
[  652.495933][ T9750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1627'.
[  652.610381][ T9746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1627'.
[  653.848855][ T9776] sd 0:0:1:0: PR command failed: 2
[  653.864303][ T9776] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  653.890686][ T9776] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  653.970957][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  654.195451][ T9715] BTRFS error (device loop3): open_ctree failed: -12
[  655.306661][ T9795] loop1: detected capacity change from 0 to 512
[  656.101998][ T9793] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1634'.
[  656.305683][ T9795] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  656.574173][ T9795] EXT4-fs (loop1): 1 truncate cleaned up
[  657.270479][ T9795] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,quota,. Quota mode: writeback.
[  658.331361][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  658.331366][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  658.331892][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  658.342553][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  658.354405][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  658.363997][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  658.375532][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  658.387440][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  658.774252][ T9821] loop2: detected capacity change from 0 to 8
[  659.066063][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  659.458440][ T9833] loop2: detected capacity change from 0 to 256
[  660.824364][ T9845] loop1: detected capacity change from 0 to 1024
[  660.878050][ T9847] ubi: mtd0 is already attached to ubi31
[  660.978507][ T9849] loop3: detected capacity change from 0 to 512
[  661.060471][ T9849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  661.106961][ T9849] EXT4-fs (loop3): 1 truncate cleaned up
[  661.117472][ T9849] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,stripe=0x0000000000000009,,errors=continue. Quota mode: none.
[  663.465002][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  663.576938][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  663.768604][ T9858] loop4: detected capacity change from 0 to 32768
[  663.778349][ T9860] loop2: detected capacity change from 0 to 32768
[  663.798931][ T9849] loop_set_status: loop3 () has still dirty pages (nrpages=2)
[  663.824302][ T9856] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.1651: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  663.858566][ T9858] gfs2: Bad value for 'quota'
[  663.867081][   T26] audit: type=1800 audit(1744020962.525:120): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1651" name="file1" dev="loop3" ino=15 res=0 errno=0
[  663.902283][ T9860] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1655 (9860)
[  664.441619][ T4678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  664.452938][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  664.491238][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  664.514803][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  664.532741][ T4394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  664.576856][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  664.711127][ T9860] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  664.759077][ T9860] BTRFS info (device loop2): using free space tree
[  665.285688][ T4735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  665.335082][ T9860] BTRFS info (device loop2): has skinny extents
[  665.342066][ T9883] xt_nat: multiple ranges no longer supported
[  665.822157][ T4172] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  666.125964][ T9860] BTRFS error (device loop2): open_ctree failed: -12
[  669.241460][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  669.465821][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  669.649506][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  669.916998][ T9923] loop2: detected capacity change from 0 to 256
[  669.946385][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  669.957672][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  669.957923][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  669.997607][ T9923] exfat: Unknown parameter 'keep_last_dots'
[  670.134403][ T4735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.359115][ T9945] loop2: detected capacity change from 0 to 4096
[  670.373586][ T4735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.590044][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  671.243848][ T4735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.375707][ T9954] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  671.390464][ T9950] lo speed is unknown, defaulting to 1000
[  671.481234][ T4735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.624722][   T26] audit: type=1800 audit(1744020970.275:121): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1676" name="bus" dev="loop2" ino=18 res=0 errno=0
[  671.710841][ T9955] lo speed is unknown, defaulting to 1000
[  671.734910][   T26] audit: type=1800 audit(1744020970.345:122): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1676" name="bus" dev="loop2" ino=18 res=0 errno=0
[  672.380482][ T4735] tipc: Left network mode
[  672.721072][ T9952] loop1: detected capacity change from 0 to 32768
[  672.872680][ T9952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1681 (9952)
[  672.898554][ T9955] chnl_net:caif_netlink_parms(): no params data found
[  672.940422][ T9952] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  673.035432][ T9952] BTRFS info (device loop1): setting nodatacow, compression disabled
[  673.064321][ T9952] BTRFS info (device loop1): max_inline at 0
[  673.094980][ T9952] BTRFS info (device loop1): enabling disk space caching
[  673.152241][ T9952] BTRFS info (device loop1): turning off barriers
[  673.214576][ T9952] BTRFS info (device loop1): turning on flush-on-commit
[  673.221613][ T9952] BTRFS info (device loop1): doing ref verification
[  673.281236][ T9952] BTRFS info (device loop1): force clearing of disk cache
[  673.526128][ T9952] BTRFS info (device loop1): enabling ssd optimizations
[  673.754794][ T9952] BTRFS info (device loop1): max_inline at 4096
[  673.761114][ T9952] BTRFS info (device loop1): disk space caching is enabled
[  673.870177][ T9952] BTRFS info (device loop1): has skinny extents
[  673.952336][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[  673.943379][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.046482][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.065348][ T9955] device bridge_slave_0 entered promiscuous mode
[  675.091985][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  675.093421][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  675.125153][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  675.489616][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.497274][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.505898][ T9955] device bridge_slave_1 entered promiscuous mode
[  675.516898][ T9952] BTRFS error (device loop1): open_ctree failed: -22
[  675.627112][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.712931][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  675.728743][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  675.740198][ T4273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  675.927703][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.282850][    T7] Bluetooth: hci2: command 0x041b tx timeout
[  676.345430][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  676.432304][ T9955] team0: Port device team_slave_0 added
[  676.460697][ T9955] team0: Port device team_slave_1 added
[  677.558413][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.625632][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.708622][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.767990][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  678.007350][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  678.979597][T10067] ODEBUG: Out of memory. ODEBUG disabled
[  679.293128][ T9785] Bluetooth: hci2: command 0x040f tx timeout
[  679.412925][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  679.481090][T10050] loop4: detected capacity change from 0 to 32768
[  679.663322][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  679.754084][T10050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1699 (10050)
[  679.785229][T10074] usb usb8: usbfs: process 10074 (syz.1.1704) did not claim interface 0 before use
[  679.819854][ T9955] device hsr_slave_0 entered promiscuous mode
[  679.842321][T10050] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  679.877633][T10050] BTRFS info (device loop4): enabling auto defrag
[  679.915168][ T9955] device hsr_slave_1 entered promiscuous mode
[  679.942184][T10050] BTRFS info (device loop4): doing ref verification
[  679.950995][ T9955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  679.974019][T10050] BTRFS info (device loop4): max_inline at 0
[  680.015117][ T9955] Cannot create hsr debugfs directory
[  680.062546][T10050] BTRFS info (device loop4): force clearing of disk cache
[  680.315046][T10050] BTRFS info (device loop4): turning on sync discard
[  680.322484][T10050] BTRFS info (device loop4): disabling free space tree
[  680.338341][T10050] BTRFS info (device loop4): has skinny extents
[  680.350795][ T4735] device hsr_slave_0 left promiscuous mode
[  680.465905][T10050] BTRFS error (device loop4): open_ctree failed: -12
[  680.964934][ T6321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  680.976380][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  680.988077][ T4221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  681.777089][  T392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  681.788745][ T9364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  681.800202][ T4287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  681.887696][ T9785] Bluetooth: hci2: command 0x0419 tx timeout
[  682.099101][ T4735] device hsr_slave_1 left promiscuous mode
[  682.161499][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  682.194807][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.214660][ T9785] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  682.226629][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  682.254632][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.285172][ T4735] device bridge_slave_1 left promiscuous mode
[  682.291707][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.405298][ T4735] device bridge_slave_0 left promiscuous mode
[  682.428315][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.464604][ T9785] usb 3-1: Using ep0 maxpacket: 8
[  682.745690][ T9785] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  682.766226][ T4735] device veth1_macvtap left promiscuous mode
[  682.772808][ T4735] device veth0_macvtap left promiscuous mode
[  682.785795][ T9785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.811628][ T4735] device veth1_vlan left promiscuous mode
[  682.817717][ T9785] usb 3-1: Product: syz
[  682.821903][ T9785] usb 3-1: Manufacturer: syz
[  682.838379][ T4735] device veth0_vlan left promiscuous mode
[  682.848265][ T9785] usb 3-1: SerialNumber: syz
[  682.875583][ T9785] usb 3-1: config 0 descriptor??
[  682.921450][ T9785] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  683.024534][ T9601] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  684.232234][ T4735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  684.250872][ T4735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  684.264772][T10123] kvm [10122]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x806
[  684.276728][ T9601] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  684.288247][T10123] kvm [10122]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe2
[  684.297378][ T9601] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  684.312705][T10123] kvm [10122]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0
[  684.321596][ T9601] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  684.330791][ T9601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.344953][T10123] kvm [10122]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xbe
[  684.356952][T10123] kvm [10122]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x889
[  684.374059][T10123] kvm [10122]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x81d, nop
[  684.394897][T10117] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  684.430157][ T4735] bond0 (unregistering): Released all slaves
[  684.651319][    T7] lo speed is unknown, defaulting to 1000
[  684.814965][    C1] ==================================================================
[  684.823583][    C1] BUG: KASAN: use-after-free in snd_rawmidi_transmit+0x39a/0x410
[  684.831313][    C1] Read of size 1 at addr ffff888075b90026 by task dhcpcd/3837
[  684.838763][    C1] 
[  684.841083][    C1] CPU: 1 PID: 3837 Comm: dhcpcd Not tainted 5.15.179-syzkaller #0
[  684.848880][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  684.858937][    C1] Call Trace:
[  684.862213][    C1]  <IRQ>
[  684.865080][    C1]  dump_stack_lvl+0x1e3/0x2d0
[  684.869776][    C1]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  684.875422][    C1]  ? _printk+0xd1/0x120
[  684.879591][    C1]  ? __lock_acquire+0x1ff0/0x1ff0
[  684.884622][    C1]  ? __wake_up_klogd+0xcc/0x100
[  684.889471][    C1]  ? panic+0x860/0x860
[  684.893552][    C1]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  684.899012][    C1]  ? do_raw_spin_unlock+0x137/0x8b0
[  684.904222][    C1]  print_address_description+0x63/0x3b0
[  684.909769][    C1]  ? snd_rawmidi_transmit+0x39a/0x410
[  684.915139][    C1]  kasan_report+0x16b/0x1c0
[  684.919642][    C1]  ? snd_rawmidi_transmit+0x39a/0x410
[  684.925014][    C1]  snd_rawmidi_transmit+0x39a/0x410
[  684.930227][    C1]  snd_usbmidi_standard_output+0x1eb/0xf20
[  684.936070][    C1]  ? snd_usbmidi_standard_output+0xf20/0xf20
[  684.942080][    C1]  ? snd_usbmidi_standard_input+0x100/0x100
[  684.947976][    C1]  ? do_raw_spin_lock+0x14a/0x370
[  684.953008][    C1]  snd_usbmidi_do_output+0x206/0x520
[  684.958310][    C1]  snd_usbmidi_error_timer+0x2a3/0x580
[  684.963773][    C1]  call_timer_fn+0x16d/0x560
[  684.968362][    C1]  ? __snd_usbmidi_create+0x39a0/0x39a0
[  684.973908][    C1]  ? __run_timers+0x890/0x890
[  684.978586][    C1]  ? do_raw_spin_unlock+0x137/0x8b0
[  684.983781][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  684.988975][    C1]  ? __snd_usbmidi_create+0x39a0/0x39a0
[  684.994524][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  684.999727][    C1]  ? __snd_usbmidi_create+0x39a0/0x39a0
[  685.005273][    C1]  __run_timers+0x67c/0x890
[  685.009784][    C1]  ? detach_timer+0x2f0/0x2f0
[  685.014457][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  685.020437][    C1]  ? ktime_get_real_ts64+0x460/0x460
[  685.025726][    C1]  run_timer_softirq+0x63/0xf0
[  685.030489][    C1]  handle_softirqs+0x3a7/0x930
[  685.035253][    C1]  ? __irq_exit_rcu+0x157/0x240
[  685.040189][    C1]  ? do_softirq+0x240/0x240
[  685.044873][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  685.055479][    C1]  __irq_exit_rcu+0x157/0x240
[  685.060629][    C1]  ? irq_exit_rcu+0x20/0x20
[  685.069133][    C1]  irq_exit_rcu+0x5/0x20
[  685.077519][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  685.088415][    C1]  </IRQ>
[  685.095201][    C1]  <TASK>
[  685.098153][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  685.110142][    C1] RIP: 0010:__zone_watermark_ok+0x1ae/0x3f0
[  685.119737][    C1] Code: 48 83 c2 68 48 83 c5 68 48 83 44 24 10 68 49 83 c6 68 48 83 44 24 18 68 49 83 c4 68 49 83 ff 0b 0f 84 8d 01 00 00 41 83 ff 0c <48> 89 14 24 0f 83 5d 01 00 00 4c 8d 6c 1d 00 48 8d bc 13 a0 01 00
[  685.146592][    C1] RSP: 0018:ffffc900034bf630 EFLAGS: 00000297
[  685.154623][    C1] RAX: ffff88813fffb870 RBX: 0000000000000208 RCX: dffffc0000000000
[  685.162685][    C1] RDX: ffff88813fffb700 RSI: 0000000000000008 RDI: ffff88813fffbd90
[  685.170756][    C1] RBP: ffff88813fffb840 R08: dffffc0000000000 R09: ffffed1027fff7b3
[  685.178726][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88813fffb880
[  685.186710][    C1] R13: 0000000000000005 R14: ffff88813fffb850 R15: 0000000000000005
[  685.194879][    C1]  zone_watermark_fast+0x171/0x240
[  685.200010][    C1]  get_page_from_freelist+0x4cb/0x3d40
[  685.205534][    C1]  ? __alloc_pages+0x700/0x700
[  685.210302][    C1]  ? __next_zones_zonelist+0xa4/0x130
[  685.215675][    C1]  ? prepare_alloc_pages+0x35d/0x5b0
[  685.220972][    C1]  __alloc_pages+0x272/0x700
[  685.225567][    C1]  ? __rmqueue_pcplist+0x23a0/0x23a0
[  685.230859][    C1]  ? end_current_label_crit_section+0x170/0x170
[  685.237099][    C1]  ? read_lock_is_recursive+0x10/0x10
[  685.242472][    C1]  kmalloc_large_node+0x7c/0x180
[  685.247413][    C1]  __kmalloc_node+0x22d/0x390
[  685.252092][    C1]  kvmalloc_node+0x80/0x140
[  685.256598][    C1]  proc_sys_call_handler+0x3d0/0x8a0
[  685.261883][    C1]  ? proc_sys_open+0x270/0x270
[  685.266644][    C1]  ? end_current_label_crit_section+0x147/0x170
[  685.272890][    C1]  ? iov_iter_init+0x4a/0x170
[  685.277571][    C1]  vfs_read+0xa93/0xe10
[  685.281747][    C1]  ? kernel_read+0x1f0/0x1f0
[  685.286354][    C1]  ? read_lock_is_recursive+0x10/0x10
[  685.291739][    C1]  ? __fdget_pos+0x2d2/0x380
[  685.296333][    C1]  ksys_read+0x1a2/0x2c0
[  685.300670][    C1]  ? print_irqtrace_events+0x210/0x210
[  685.306135][    C1]  ? vfs_write+0xe50/0xe50
[  685.310559][    C1]  ? syscall_enter_from_user_mode+0x2e/0x240
[  685.316557][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  685.321786][    C1]  ? syscall_enter_from_user_mode+0x2e/0x240
[  685.327793][    C1]  do_syscall_64+0x3b/0xb0
[  685.332328][    C1]  ? clear_bhb_loop+0x15/0x70
[  685.337022][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  685.342931][    C1] RIP: 0033:0x7fe29845fb6a
[  685.347358][    C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
[  685.367077][    C1] RSP: 002b:00007ffcd34402e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  685.375583][    C1] RAX: ffffffffffffffda RBX: 00000000000100a0 RCX: 00007fe29845fb6a
[  685.383672][    C1] RDX: 00000000000100a0 RSI: 00007ffcd3440388 RDI: 0000000000000012
[  685.391660][    C1] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000
[  685.399627][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
[  685.407787][    C1] R13: 00007ffcd3440388 R14: 00007ffcd3440388 R15: 0000000000000000
[  685.415775][    C1]  </TASK>
[  685.418817][    C1] 
[  685.421216][    C1] Allocated by task 10117:
[  685.425638][    C1]  ____kasan_kmalloc+0xba/0xf0
[  685.430409][    C1]  __kmalloc_node+0x199/0x390
[  685.435090][    C1]  kvmalloc_node+0x80/0x140
[  685.439611][    C1]  open_substream+0x2a4/0x6d0
[  685.444312][    C1]  rawmidi_open_priv+0xc2/0x680
[  685.449164][    C1]  snd_rawmidi_kernel_open+0x1b3/0x240
[  685.454621][    C1]  midisynth_use+0xe7/0x2a0
[  685.459121][    C1]  check_and_subscribe_port+0x604/0xab0
[  685.464660][    C1]  snd_seq_port_connect+0x284/0x480
[  685.469979][    C1]  snd_seq_ioctl_subscribe_port+0x31a/0x780
[  685.475885][    C1]  snd_seq_oss_midi_open+0x425/0x9c0
[  685.481211][    C1]  snd_seq_oss_synth_setup_midi+0x114/0x500
[  685.487136][    C1]  snd_seq_oss_open+0x942/0x1010
[  685.492087][    C1]  odev_open+0x5f/0x90
[  685.496154][    C1]  chrdev_open+0x54a/0x630
[  685.500566][    C1]  do_dentry_open+0x807/0xfb0
[  685.505414][    C1]  path_openat+0x2705/0x2f20
[  685.510004][    C1]  do_filp_open+0x21c/0x460
[  685.514505][    C1]  do_sys_openat2+0x13b/0x4f0
[  685.519198][    C1]  __x64_sys_openat+0x243/0x290
[  685.524046][    C1]  do_syscall_64+0x3b/0xb0
[  685.528462][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  685.534640][    C1] 
[  685.536963][    C1] Freed by task 10117:
[  685.541043][    C1]  kasan_set_track+0x4b/0x80
[  685.545626][    C1]  kasan_set_free_info+0x1f/0x40
[  685.550767][    C1]  ____kasan_slab_free+0xd8/0x120
[  685.555813][    C1]  slab_free_freelist_hook+0xdd/0x160
[  685.561200][    C1]  kfree+0xf1/0x270
[  685.565011][    C1]  close_substream+0x390/0x600
[  685.569791][    C1]  rawmidi_release_priv+0xf1/0x180
[  685.579282][    C1]  snd_rawmidi_kernel_release+0x42/0xa0
[  685.584870][    C1]  __delete_and_unsubscribe_port+0x2c5/0x470
[  685.590849][    C1]  snd_seq_port_disconnect+0x4ab/0x5d0
[  685.596300][    C1]  snd_seq_ioctl_unsubscribe_port+0x31a/0x780
[  685.602363][    C1]  snd_seq_oss_midi_close+0x348/0x760
[  685.607733][    C1]  snd_seq_oss_synth_reset+0x3c2/0xa20
[  685.613199][    C1]  snd_seq_oss_reset+0x57/0x240
[  685.618057][    C1]  snd_seq_oss_release+0xea/0x300
[  685.623110][    C1]  odev_release+0x52/0x70
[  685.627435][    C1]  __fput+0x3fe/0x8e0
[  685.631430][    C1]  task_work_run+0x129/0x1a0
[  685.636019][    C1]  exit_to_user_mode_loop+0x106/0x130
[  685.641415][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[  685.646958][    C1]  syscall_exit_to_user_mode+0x5d/0x240
[  685.652501][    C1]  do_syscall_64+0x47/0xb0
[  685.656915][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  685.662803][    C1] 
[  685.665122][    C1] The buggy address belongs to the object at ffff888075b90000
[  685.665122][    C1]  which belongs to the cache kmalloc-4k of size 4096
[  685.679181][    C1] The buggy address is located 38 bytes inside of
[  685.679181][    C1]  4096-byte region [ffff888075b90000, ffff888075b91000)
[  685.692458][    C1] The buggy address belongs to the page:
[  685.698091][    C1] page:ffffea0001d6e400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75b90
[  685.708268][    C1] head:ffffea0001d6e400 order:3 compound_mapcount:0 compound_pincount:0
[  685.716587][    C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  685.724592][    C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442140
[  685.733170][    C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  685.741762][    C1] page dumped because: kasan: bad access detected
[  685.748303][    C1] page_owner tracks the page as allocated
[  685.754019][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3545, ts 666119139864, free_ts 665948262394
[  685.774001][    C1]  get_page_from_freelist+0x3b78/0x3d40
[  685.779553][    C1]  __alloc_pages+0x272/0x700
[  685.784141][    C1]  new_slab+0xbb/0x4b0
[  685.788227][    C1]  ___slab_alloc+0x6f6/0xe10
[  685.792832][    C1]  __kmalloc+0x1c9/0x300
[  685.797092][    C1]  tomoyo_realpath_from_path+0xd8/0x5e0
[  685.802636][    C1]  tomoyo_path_number_perm+0x225/0x810
[  685.808103][    C1]  tomoyo_path_mknod+0x172/0x1b0
[  685.813042][    C1]  security_path_mknod+0xf1/0x150
[  685.818691][    C1]  path_openat+0xc78/0x2f20
[  685.823202][    C1]  do_filp_open+0x21c/0x460
[  685.827705][    C1]  do_sys_openat2+0x13b/0x4f0
[  685.832399][    C1]  __x64_sys_openat+0x243/0x290
[  685.837257][    C1]  do_syscall_64+0x3b/0xb0
[  685.841667][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  685.847558][    C1] page last free stack trace:
[  685.852222][    C1]  free_unref_page_prepare+0xc34/0xcf0
[  685.857677][    C1]  free_unref_page+0x95/0x2d0
[  685.862347][    C1]  __unfreeze_partials+0x1b7/0x210
[  685.867475][    C1]  put_cpu_partial+0x132/0x1a0
[  685.872248][    C1]  ___cache_free+0xe3/0x100
[  685.876755][    C1]  qlist_free_all+0x36/0x90
[  685.881256][    C1]  kasan_quarantine_reduce+0x162/0x180
[  685.886712][    C1]  __kasan_slab_alloc+0x2f/0xc0
[  685.891580][    C1]  slab_post_alloc_hook+0x53/0x380
[  685.896692][    C1]  kmem_cache_alloc+0xf3/0x280
[  685.901534][    C1]  vm_area_dup+0x1e/0xb0
[  685.905768][    C1]  __split_vma+0xb4/0x420
[  685.910106][    C1]  mprotect_fixup+0x675/0x7d0
[  685.914794][    C1]  do_mprotect_pkey+0x75b/0xa50
[  685.919779][    C1]  __x64_sys_mprotect+0x7c/0x90
[  685.924729][    C1]  do_syscall_64+0x3b/0xb0
[  685.929155][    C1] 
[  685.931480][    C1] Memory state around the buggy address:
[  685.937111][    C1]  ffff888075b8ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  685.945169][    C1]  ffff888075b8ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  685.953224][    C1] >ffff888075b90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  685.961278][    C1]                                ^
[  685.966380][    C1]  ffff888075b90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  685.974442][    C1]  ffff888075b90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  685.982495][    C1] ==================================================================
[  685.990555][    C1] Disabling lock debugging due to kernel taint
[  685.996800][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  686.003986][    C1] CPU: 1 PID: 3837 Comm: dhcpcd Tainted: G    B             5.15.179-syzkaller #0
[  686.013175][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  686.023224][    C1] Call Trace:
[  686.026497][    C1]  <IRQ>
[  686.029337][    C1]  dump_stack_lvl+0x1e3/0x2d0
[  686.034009][    C1]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  686.039646][    C1]  ? panic+0x860/0x860
[  686.043746][    C1]  ? rcu_is_watching+0x11/0xa0
[  686.048514][    C1]  ? lock_release+0xb9/0x9a0
[  686.053125][    C1]  panic+0x318/0x860
[  686.057021][    C1]  ? check_panic_on_warn+0x1d/0xa0
[  686.062128][    C1]  ? fb_is_primary_device+0xd0/0xd0
[  686.067318][    C1]  ? do_raw_spin_unlock+0x137/0x8b0
[  686.072517][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  686.078499][    C1]  ? _raw_spin_unlock+0x40/0x40
[  686.083345][    C1]  check_panic_on_warn+0x7e/0xa0
[  686.088281][    C1]  ? snd_rawmidi_transmit+0x39a/0x410
[  686.093644][    C1]  end_report+0x6d/0xf0
[  686.097793][    C1]  kasan_report+0x18e/0x1c0
[  686.102290][    C1]  ? snd_rawmidi_transmit+0x39a/0x410
[  686.107656][    C1]  snd_rawmidi_transmit+0x39a/0x410
[  686.112850][    C1]  snd_usbmidi_standard_output+0x1eb/0xf20
[  686.118656][    C1]  ? snd_usbmidi_standard_output+0xf20/0xf20
[  686.124634][    C1]  ? snd_usbmidi_standard_input+0x100/0x100
[  686.130528][    C1]  ? do_raw_spin_lock+0x14a/0x370
[  686.135554][    C1]  snd_usbmidi_do_output+0x206/0x520
[  686.140838][    C1]  snd_usbmidi_error_timer+0x2a3/0x580
[  686.146297][    C1]  call_timer_fn+0x16d/0x560
[  686.150890][    C1]  ? __snd_usbmidi_create+0x39a0/0x39a0
[  686.156547][    C1]  ? __run_timers+0x890/0x890
[  686.161228][    C1]  ? do_raw_spin_unlock+0x137/0x8b0
[  686.166521][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  686.171721][    C1]  ? __snd_usbmidi_create+0x39a0/0x39a0
[  686.177266][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  686.182465][    C1]  ? __snd_usbmidi_create+0x39a0/0x39a0
[  686.188010][    C1]  __run_timers+0x67c/0x890
[  686.192515][    C1]  ? detach_timer+0x2f0/0x2f0
[  686.197269][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  686.203248][    C1]  ? ktime_get_real_ts64+0x460/0x460
[  686.208531][    C1]  run_timer_softirq+0x63/0xf0
[  686.213292][    C1]  handle_softirqs+0x3a7/0x930
[  686.218048][    C1]  ? __irq_exit_rcu+0x157/0x240
[  686.222896][    C1]  ? do_softirq+0x240/0x240
[  686.227403][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  686.232597][    C1]  __irq_exit_rcu+0x157/0x240
[  686.237272][    C1]  ? irq_exit_rcu+0x20/0x20
[  686.241774][    C1]  irq_exit_rcu+0x5/0x20
[  686.246013][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  686.251644][    C1]  </IRQ>
[  686.254564][    C1]  <TASK>
[  686.257487][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  686.263638][    C1] RIP: 0010:__zone_watermark_ok+0x1ae/0x3f0
[  686.269529][    C1] Code: 48 83 c2 68 48 83 c5 68 48 83 44 24 10 68 49 83 c6 68 48 83 44 24 18 68 49 83 c4 68 49 83 ff 0b 0f 84 8d 01 00 00 41 83 ff 0c <48> 89 14 24 0f 83 5d 01 00 00 4c 8d 6c 1d 00 48 8d bc 13 a0 01 00
[  686.289129][    C1] RSP: 0018:ffffc900034bf630 EFLAGS: 00000297
[  686.295202][    C1] RAX: ffff88813fffb870 RBX: 0000000000000208 RCX: dffffc0000000000
[  686.303276][    C1] RDX: ffff88813fffb700 RSI: 0000000000000008 RDI: ffff88813fffbd90
[  686.311291][    C1] RBP: ffff88813fffb840 R08: dffffc0000000000 R09: ffffed1027fff7b3
[  686.319281][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88813fffb880
[  686.327260][    C1] R13: 0000000000000005 R14: ffff88813fffb850 R15: 0000000000000005
[  686.335267][    C1]  zone_watermark_fast+0x171/0x240
[  686.340387][    C1]  get_page_from_freelist+0x4cb/0x3d40
[  686.345882][    C1]  ? __alloc_pages+0x700/0x700
[  686.350666][    C1]  ? __next_zones_zonelist+0xa4/0x130
[  686.356340][    C1]  ? prepare_alloc_pages+0x35d/0x5b0
[  686.361635][    C1]  __alloc_pages+0x272/0x700
[  686.366234][    C1]  ? __rmqueue_pcplist+0x23a0/0x23a0
[  686.371521][    C1]  ? end_current_label_crit_section+0x170/0x170
[  686.377757][    C1]  ? read_lock_is_recursive+0x10/0x10
[  686.383137][    C1]  kmalloc_large_node+0x7c/0x180
[  686.388077][    C1]  __kmalloc_node+0x22d/0x390
[  686.392841][    C1]  kvmalloc_node+0x80/0x140
[  686.397366][    C1]  proc_sys_call_handler+0x3d0/0x8a0
[  686.402771][    C1]  ? proc_sys_open+0x270/0x270
[  686.407534][    C1]  ? end_current_label_crit_section+0x147/0x170
[  686.413792][    C1]  ? iov_iter_init+0x4a/0x170
[  686.418475][    C1]  vfs_read+0xa93/0xe10
[  686.422629][    C1]  ? kernel_read+0x1f0/0x1f0
[  686.427228][    C1]  ? read_lock_is_recursive+0x10/0x10
[  686.432613][    C1]  ? __fdget_pos+0x2d2/0x380
[  686.437208][    C1]  ksys_read+0x1a2/0x2c0
[  686.441457][    C1]  ? print_irqtrace_events+0x210/0x210
[  686.447056][    C1]  ? vfs_write+0xe50/0xe50
[  686.451520][    C1]  ? syscall_enter_from_user_mode+0x2e/0x240
[  686.457604][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  686.462898][    C1]  ? syscall_enter_from_user_mode+0x2e/0x240
[  686.468893][    C1]  do_syscall_64+0x3b/0xb0
[  686.473332][    C1]  ? clear_bhb_loop+0x15/0x70
[  686.478092][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  686.483981][    C1] RIP: 0033:0x7fe29845fb6a
[  686.488394][    C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
[  686.507998][    C1] RSP: 002b:00007ffcd34402e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  686.516445][    C1] RAX: ffffffffffffffda RBX: 00000000000100a0 RCX: 00007fe29845fb6a
[  686.524427][    C1] RDX: 00000000000100a0 RSI: 00007ffcd3440388 RDI: 0000000000000012
[  686.532390][    C1] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000
[  686.540371][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
[  686.548344][    C1] R13: 00007ffcd3440388 R14: 00007ffcd3440388 R15: 0000000000000000
[  686.556329][    C1]  </TASK>
[  687.681169][    C1] Shutting down cpus with NMI
[  687.686218][    C1] Kernel Offset: disabled
[  687.690562][    C1] Rebooting in 86400 seconds..