last executing test programs:

13m8.748816587s ago: executing program 3 (id=651):
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0xde, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00')
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000280)={0x0})
fsopen(0x0, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl(r7, 0x4048aecb, 0x0)

13m7.758339881s ago: executing program 3 (id=655):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f0000002f40)=""/4097, 0x1001)

13m6.550869007s ago: executing program 3 (id=660):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xffff, 0x7fd, 0x800d, 0x8009}, 'syz1\x00', 0x40})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44)
dup3(r1, r0, 0x80000)

13m6.223187193s ago: executing program 3 (id=663):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)

13m5.693629793s ago: executing program 3 (id=664):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xf, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x20048000)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r3, 0x400, 0x1)
creat(&(0x7f0000000200)='./file1\x00', 0x105)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0x6b)
pread64(r4, &(0x7f00000000c0)=""/23, 0x17, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x10, 0x4}, 0x50)
gettid()
close_range(r0, 0xffffffffffffffff, 0x0)

13m5.373838548s ago: executing program 3 (id=666):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1})

13m5.291994795s ago: executing program 32 (id=666):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1})

1m0.266897659s ago: executing program 1 (id=5212):
unshare(0x64020600)
syz_usb_connect$uac3(0x3, 0x9c, 0x0, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0xef848017bf1be10e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, 0x0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)
fchdir(r1)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x64, r7, 0x1, 0x70bd2c, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0xc084)
recvmmsg(r5, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x100000000)

59.444207737s ago: executing program 1 (id=5215):
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0xde, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00')
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000280)={0x0})
fsopen(0x0, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl(r7, 0x4048aecb, 0x0)

58.558606149s ago: executing program 4 (id=5217):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r3=>0x0)
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r1, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

58.207691691s ago: executing program 1 (id=5219):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000601080000000000000000020000000900010073797a300000000048000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a307a000000000000000000000908000340000000940400098068000000140a01030000000000000000020000080c00064000000000000000030900020073797a32000000000c00064000000000000000030c00064000000000000000010900020073797a32000000000900020073797a31000000000c0006400000000000000001140000001100010000000000000000000200000a"], 0xf8}}, 0x4004050)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000300)=""/4096)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c)

57.032334494s ago: executing program 4 (id=5222):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r3=>0x0)
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r1, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

56.888550758s ago: executing program 1 (id=5223):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00')
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000280)={0x0})
fsopen(0x0, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl(r7, 0x4048aecb, 0x0)

55.297990209s ago: executing program 1 (id=5224):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060400000000000000b6001019af690000000000", @ANYBLOB="c09483f62d187fb94624adb6", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = epoll_create1(0x0)
epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x401, r1, 0x0, 0xa0028000}, 0x38)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002100)="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", 0xfc3, 0xfffffffffffffffa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r5, 0x0, 0x200000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001)

54.594782562s ago: executing program 4 (id=5225):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x2e08, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060400000000000000b6001019af690000000000", @ANYBLOB="c09483f62d187fb94624adb6", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = epoll_create1(0x0)
epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x401, r1, 0x0, 0xa0028000}, 0x38)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002100)="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", 0xfc3, 0xfffffffffffffffa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r5, 0x0, 0x200000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001)

53.980079301s ago: executing program 1 (id=5228):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0)
close(r2)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xc2)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000280)="05", 0x1, 0x200c085, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xfc, 0x6, @multicast}, 0x14)

53.154341288s ago: executing program 4 (id=5230):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060400000000000000b6001019af690000000000", @ANYBLOB="c09483f62d187fb94624adb6", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = epoll_create1(0x0)
epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x401, r1, 0x0, 0xa0028000}, 0x38)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002100)="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", 0xfc3, 0xfffffffffffffffa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r5, 0x0, 0x200000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001)

51.966380613s ago: executing program 4 (id=5233):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r0, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r2=>0x0)
r3 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r0, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

49.754900014s ago: executing program 4 (id=5234):
unshare(0x64020600)
syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[], 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0xef848017bf1be10e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, 0x0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)
fchdir(r1)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x64, r7, 0x1, 0x70bd2c, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0xc084)
recvmmsg(r5, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x100000000)

38.863968583s ago: executing program 33 (id=5228):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0)
close(r2)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xc2)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000280)="05", 0x1, 0x200c085, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xfc, 0x6, @multicast}, 0x14)

34.403210298s ago: executing program 34 (id=5234):
unshare(0x64020600)
syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[], 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0xef848017bf1be10e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, 0x0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)
fchdir(r1)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x64, r7, 0x1, 0x70bd2c, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0xc084)
recvmmsg(r5, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x100000000)

20.064771579s ago: executing program 6 (id=5254):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'})
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800)

18.775586904s ago: executing program 2 (id=5270):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}})
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000601080000000000000000020000000900010073797a300000000048000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a307a000000000000000000000908000340000000940400098068000000140a01030000000000000000020000080c00064000000000000000030900020073797a32000000000c00064000000000000000030c00064000000000000000010900020073797a32000000000900020073797a31000000000c0006400000000000000001140000001100010000000000000000000200000a"], 0xf8}}, 0x4004050)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000300)=""/4096)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c)

16.583766253s ago: executing program 0 (id=5271):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}})
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000601080000000000000000020000000900010073797a300000000048000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a307a000000000000000000000908000340000000940400098068000000140a01030000000000000000020000080c00064000000000000000030900020073797a32000000000c00064000000000000000030c00064000000000000000010900020073797a32000000000900020073797a31000000000c0006400000000000000001140000001100010000000000000000000200000a"], 0xf8}}, 0x4004050)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000300)=""/4096)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c)

16.490423582s ago: executing program 6 (id=5272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r8, 0x9)
recvfrom$inet(r8, 0x0, 0x0, 0x2, 0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16.392241229s ago: executing program 2 (id=5273):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r8, 0x9)
recvfrom$inet(r8, 0x0, 0x0, 0x2, 0x0, 0x0)
r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x10010, r9, 0xa6cca000)

15.225601637s ago: executing program 0 (id=5275):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r3=>0x0)
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r1, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

14.903711906s ago: executing program 5 (id=5276):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060400000000000000b6001019af690000000000", @ANYBLOB="c09483f62d187fb94624adb6", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = epoll_create1(0x0)
epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x401, r1, 0x0, 0xa0028000}, 0x38)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002100)="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", 0xfc3, 0xfffffffffffffffa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r5, 0x0, 0x200000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001)

13.924392829s ago: executing program 2 (id=5277):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000601080000000000000000020000000900010073797a300000000048000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a307a000000000000000000000908000340000000940400098068000000140a01030000000000000000020000080c00064000000000000000030900020073797a32000000000c00064000000000000000030c00064000000000000000010900020073797a32000000000900020073797a31000000000c0006400000000000000001140000001100010000000000000000000200000a"], 0xf8}}, 0x4004050)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000300)=""/4096)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c)

12.045621135s ago: executing program 0 (id=5278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r3=>0x0)
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r1, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

12.036045764s ago: executing program 6 (id=5279):
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0xde, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00')
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000280)={0x0})
fsopen(0x0, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl(r7, 0x4048aecb, 0x0)

11.750244329s ago: executing program 5 (id=5280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r3=>0x0)
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r1, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

8.990190449s ago: executing program 5 (id=5281):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060400000000000000b6001019af690000000000", @ANYBLOB="c09483f62d187fb94624adb6", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = epoll_create1(0x0)
epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x401, r1, 0x0, 0xa0028000}, 0x38)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002100)="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", 0xfc3, 0xfffffffffffffffa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r5, 0x0, 0x200000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001)

7.652586273s ago: executing program 0 (id=5282):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'})
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800)

7.627632423s ago: executing program 5 (id=5283):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'})
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800)

7.404672312s ago: executing program 2 (id=5284):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}})
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000601080000000000000000020000000900010073797a300000000048000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a307a000000000000000000000908000340000000940400098068000000140a01030000000000000000020000080c00064000000000000000030900020073797a32000000000c00064000000000000000030c00064000000000000000010900020073797a32000000000900020073797a31000000000c0006400000000000000001140000001100010000000000000000000200000a"], 0xf8}}, 0x4004050)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000300)=""/4096)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c)

7.249663499s ago: executing program 6 (id=5285):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}})
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000601080000000000000000020000000900010073797a300000000048000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a307a000000000000000000000908000340000000940400098068000000140a01030000000000000000020000080c00064000000000000000030900020073797a32000000000c00064000000000000000030c00064000000000000000010900020073797a32000000000900020073797a31000000000c0006400000000000000001140000001100010000000000000000000200000a"], 0xf8}}, 0x4004050)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000300)=""/4096)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c)

5.8336823s ago: executing program 2 (id=5286):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}})
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015)
r1 = socket$inet6(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000601080000000000000000020000000900010073797a300000000048000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a307a000000000000000000000908000340000000940400098068000000140a01030000000000000000020000080c00064000000000000000030900020073797a32000000000c00064000000000000000030c00064000000000000000010900020073797a32000000000900020073797a31000000000c0006400000000000000001140000001100010000000000000000000200000a"], 0xf8}}, 0x4004050)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000300)=""/4096)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c)

4.039839944s ago: executing program 0 (id=5287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r3=>0x0)
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r1, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

3.681558414s ago: executing program 5 (id=5288):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000002c0)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
r9 = syz_open_pts(0xffffffffffffffff, 0x400000)
futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199)
ioctl$TIOCMBIC(r9, 0x5417, &(0x7f0000000000)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r11=>0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r12 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x9840)
r13 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYRES64=r11, @ANYRES32=r11, @ANYBLOB="0000000100008000ae101a80", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x48008)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioperm(0xe, 0x9, 0x20)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x3, 0x201}}], 0x4, &(0x7f0000001f40)={0x2e, 0x44, 0x0, r8, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r6, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, &(0x7f0000000280))

3.11241905s ago: executing program 2 (id=5289):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'})
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800)

54.356741ms ago: executing program 6 (id=5290):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r8, 0x9)
recvfrom$inet(r8, 0x0, 0x0, 0x2, 0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

40.346726ms ago: executing program 0 (id=5291):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'})
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800)

0s ago: executing program 5 (id=5292):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r3=>0x0)
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000005, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
shutdown(r1, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x6801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

kernel console output (not intermixed with test programs):

0: Interface deactivated: batadv_slave_0
[  793.700279][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  794.195706][   T13] veth1_macvtap: left promiscuous mode
[  794.195751][   T13] 
: left promiscuous mode
[  794.196916][   T13] veth0_vlan: left promiscuous mode
[  795.033802][   T10] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[  795.203707][   T10] usb 6-1: Using ep0 maxpacket: 32
[  795.209247][   T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  795.210259][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  795.210271][   T10] usb 6-1: config 0 has no interfaces?
[  795.212009][   T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  795.212022][   T10] usb 6-1: Product: syz
[  795.212030][   T10] usb 6-1: Manufacturer: syz
[  795.212037][   T10] usb 6-1: SerialNumber: syz
[  795.213386][   T10] usb 6-1: config 0 descriptor??
[  795.471894][   T10] usb 6-1: USB disconnect, device number 114
[  795.953779][T21060] binder: BINDER_SET_CONTEXT_MGR already set
[  795.953789][T21060] binder: 21059:21060 ioctl 4018620d 80004a80 returned -16
[  795.954023][T21060] binder: 21059:21060 ioctl c0306201 80000000 returned -22
[  798.380164][T21085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4710'.
[  800.185861][T21106] binder: BINDER_SET_CONTEXT_MGR already set
[  800.185871][T21106] binder: 21105:21106 ioctl 4018620d 80004a80 returned -16
[  800.186369][T21106] binder: 21105:21106 ioctl c0306201 80000000 returned -22
[  800.714793][T21114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4719'.
[  800.714809][T21114] tc_dump_action: action bad kind
[  801.542653][T21118] loop8: detected capacity change from 0 to 8
[  801.543073][T21118] Dev loop8: unable to read RDB block 8
[  801.543092][T21118]  loop8: unable to read partition table
[  801.543174][T21118] loop8: partition table beyond EOD, truncated
[  801.543184][T21118] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  802.224204][T20680] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[  802.386287][T20680] usb 7-1: Using ep0 maxpacket: 32
[  802.388024][T20680] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  802.389502][T20680] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  802.389544][T20680] usb 7-1: config 0 has no interfaces?
[  802.395001][T20680] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  802.395040][T20680] usb 7-1: Product: syz
[  802.395049][T20680] usb 7-1: Manufacturer: syz
[  802.395084][T20680] usb 7-1: SerialNumber: syz
[  802.405195][T20680] usb 7-1: config 0 descriptor??
[  803.043880][   T10] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  803.061313][T21147] input: syz1 as /devices/virtual/input/input117
[  803.203772][   T10] usb 5-1: Using ep0 maxpacket: 32
[  803.207577][   T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  803.219502][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  803.219911][   T10] usb 5-1: config 0 has no interfaces?
[  803.255799][   T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  803.255843][   T10] usb 5-1: Product: syz
[  803.256840][   T10] usb 5-1: Manufacturer: syz
[  803.256849][   T10] usb 5-1: SerialNumber: syz
[  803.448643][   T10] usb 5-1: config 0 descriptor??
[  804.179701][T16960] usb 7-1: USB disconnect, device number 107
[  804.354879][   T10] usb 5-1: USB disconnect, device number 102
[  804.622985][T21163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4726'.
[  804.913530][T21165] team0: Device ipip0 is up. Set it down before adding it as a team port
[  805.225108][T21178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4729'.
[  805.225124][T21178] tc_dump_action: action bad kind
[  806.303695][   T30] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  806.454029][   T30] usb 5-1: Using ep0 maxpacket: 32
[  806.460777][   T30] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  806.463467][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  806.463491][   T30] usb 5-1: config 0 has no interfaces?
[  806.478003][   T30] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  806.478081][   T30] usb 5-1: Product: syz
[  806.478430][   T30] usb 5-1: Manufacturer: syz
[  806.478713][   T30] usb 5-1: SerialNumber: syz
[  806.526183][   T30] usb 5-1: config 0 descriptor??
[  807.307748][ T5886] usb 5-1: USB disconnect, device number 103
[  808.205195][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  808.205231][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  810.584789][T21172] syz.1.4727 (21172) used greatest stack depth: 18896 bytes left
[  810.641348][T21216] loop8: detected capacity change from 0 to 8
[  810.648675][T21216] Dev loop8: unable to read RDB block 8
[  810.648708][T21216]  loop8: unable to read partition table
[  810.648864][T21216] loop8: partition table beyond EOD, truncated
[  810.648881][T21216] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  811.934683][T21235] input: syz1 as /devices/virtual/input/input118
[  812.603692][T16960] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[  812.763752][T16960] usb 7-1: Using ep0 maxpacket: 32
[  812.764220][T16960] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  812.764995][T16960] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  812.765007][T16960] usb 7-1: config 0 has no interfaces?
[  812.766643][T16960] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  812.766661][T16960] usb 7-1: Product: syz
[  812.766671][T16960] usb 7-1: Manufacturer: syz
[  812.766683][T16960] usb 7-1: SerialNumber: syz
[  812.771966][T16960] usb 7-1: config 0 descriptor??
[  812.934406][   T10] usb 9-1: new high-speed USB device number 85 using dummy_hcd
[  812.998364][T16960] usb 7-1: USB disconnect, device number 108
[  813.105378][   T10] usb 9-1: Using ep0 maxpacket: 32
[  813.112366][   T10] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  813.142308][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  813.142594][   T10] usb 9-1: config 0 has no interfaces?
[  813.157380][   T10] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  813.157435][   T10] usb 9-1: Product: syz
[  813.157475][   T10] usb 9-1: Manufacturer: syz
[  813.157513][   T10] usb 9-1: SerialNumber: syz
[  813.344444][   T10] usb 9-1: config 0 descriptor??
[  814.049138][T21277] loop8: detected capacity change from 0 to 8
[  814.104867][T21277] Dev loop8: unable to read RDB block 8
[  814.105388][T21277]  loop8: unable to read partition table
[  814.111355][T21277] loop8: partition table beyond EOD, truncated
[  814.122213][T21277] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  814.740721][   T10] usb 9-1: USB disconnect, device number 85
[  815.273686][ T5886] usb 5-1: new full-speed USB device number 104 using dummy_hcd
[  815.425983][ T5886] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  815.426920][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  815.426964][ T5886] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  815.428851][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.428871][ T5886] usb 5-1: Product: syz
[  815.428884][ T5886] usb 5-1: Manufacturer: syz
[  815.428898][ T5886] usb 5-1: SerialNumber: syz
[  815.642022][ T5886] snd-usb-caiaq 5-1:1.0: invalid EPs
[  815.642043][ T5886] usb 5-1: unable to init card! (ret=-22)
[  815.642319][ T5886] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  815.849003][   T30] usb 5-1: USB disconnect, device number 104
[  815.905647][T21295] input: syz1 as /devices/virtual/input/input119
[  816.409134][T21300] binder: 21299:21300 ioctl c0306201 800003c0 returned -14
[  816.409348][T21300] binder: 21299:21300 ioctl c0306201 80000000 returned -22
[  816.521909][T21306] veth1_vlan: entered allmulticast mode
[  818.229035][T16960] usb 7-1: new high-speed USB device number 109 using dummy_hcd
[  818.387737][T16960] usb 7-1: Using ep0 maxpacket: 32
[  818.391981][T16960] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  818.399541][T16960] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  818.399556][T16960] usb 7-1: config 0 has no interfaces?
[  818.414716][T16960] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  818.414857][T16960] usb 7-1: Product: syz
[  818.414892][T16960] usb 7-1: Manufacturer: syz
[  818.415131][T16960] usb 7-1: SerialNumber: syz
[  818.427021][T16960] usb 7-1: config 0 descriptor??
[  818.803825][T16960] usb 9-1: new high-speed USB device number 86 using dummy_hcd
[  818.954321][T16960] usb 9-1: Using ep0 maxpacket: 32
[  818.959230][T16960] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  818.964009][T16960] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  818.964060][T16960] usb 9-1: config 0 has no interfaces?
[  818.973159][T16960] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  818.973201][T16960] usb 9-1: Product: syz
[  818.973301][T16960] usb 9-1: Manufacturer: syz
[  818.973393][T16960] usb 9-1: SerialNumber: syz
[  818.998300][T16960] usb 9-1: config 0 descriptor??
[  819.503796][   T30] usb 6-1: new full-speed USB device number 115 using dummy_hcd
[  819.655834][   T30] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  819.658450][   T30] usb 6-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  819.658595][   T30] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  819.676512][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.679675][   T30] usb 6-1: Product: syz
[  819.679687][   T30] usb 6-1: Manufacturer: syz
[  819.679695][   T30] usb 6-1: SerialNumber: syz
[  820.291762][   T30] snd-usb-caiaq 6-1:1.0: invalid EPs
[  820.291793][   T30] usb 6-1: unable to init card! (ret=-22)
[  820.294676][   T30] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  820.556543][   T30] usb 6-1: USB disconnect, device number 115
[  820.624275][T16960] usb 7-1: USB disconnect, device number 109
[  820.819125][T21344] binder: 21343:21344 ioctl c0306201 800003c0 returned -14
[  820.819407][T21344] binder: 21343:21344 ioctl c0306201 80000000 returned -22
[  820.822525][ T5937] usb 9-1: USB disconnect, device number 86
[  821.006041][T21346] input: syz1 as /devices/virtual/input/input120
[  822.873147][T21375] futex_wake_op: syz.1.4774 tries to shift op by 144; fix this program
[  822.980859][T21374] futex_wake_op: syz.4.4775 tries to shift op by 144; fix this program
[  823.392189][T21380] binder: 21379:21380 ioctl c0306201 800003c0 returned -14
[  823.400461][T21380] binder: 21379:21380 ioctl c0306201 80000000 returned -22
[  824.776658][T21396] input: syz1 as /devices/virtual/input/input121
[  824.804346][    T9] usb 7-1: new full-speed USB device number 110 using dummy_hcd
[  824.873652][   T42] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  824.964522][    T9] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  824.965416][    T9] usb 7-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  824.965456][    T9] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  824.967226][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.967238][    T9] usb 7-1: Product: syz
[  824.967246][    T9] usb 7-1: Manufacturer: syz
[  824.967253][    T9] usb 7-1: SerialNumber: syz
[  825.033637][   T42] usb 5-1: Using ep0 maxpacket: 32
[  825.034107][   T42] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  825.035116][   T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  825.035129][   T42] usb 5-1: config 0 has no interfaces?
[  825.036812][   T42] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  825.036824][   T42] usb 5-1: Product: syz
[  825.036833][   T42] usb 5-1: Manufacturer: syz
[  825.036842][   T42] usb 5-1: SerialNumber: syz
[  825.038227][   T42] usb 5-1: config 0 descriptor??
[  825.237298][    T9] snd-usb-caiaq 7-1:1.0: invalid EPs
[  825.237313][    T9] usb 7-1: unable to init card! (ret=-22)
[  825.237481][    T9] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  825.288689][   T30] usb 5-1: USB disconnect, device number 105
[  825.445038][    T9] usb 7-1: USB disconnect, device number 110
[  826.037645][T21412] netlink: 'syz.2.4784': attribute type 10 has an invalid length.
[  826.038745][T21412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4784'.
[  826.668526][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4785'.
[  826.679292][T21420] binder: 21419:21420 ioctl c0306201 800003c0 returned -14
[  826.679766][T21420] binder: 21419:21420 ioctl c0306201 80000000 returned -22
[  827.853691][ T5843] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[  828.003832][ T5843] usb 7-1: Using ep0 maxpacket: 32
[  828.004905][ T5843] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  828.011274][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  828.011327][ T5843] usb 7-1: config 0 has no interfaces?
[  828.034728][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  828.034753][ T5843] usb 7-1: Product: syz
[  828.034778][ T5843] usb 7-1: Manufacturer: syz
[  828.034878][ T5843] usb 7-1: SerialNumber: syz
[  828.115866][ T5843] usb 7-1: config 0 descriptor??
[  828.768391][T21442] input: syz1 as /devices/virtual/input/input122
[  828.804287][T21446] futex_wake_op: syz.0.4791 tries to shift op by 144; fix this program
[  829.521558][ T5886] usb 7-1: USB disconnect, device number 111
[  830.469059][T21461] binder: 21460:21461 ioctl c0306201 80000080 returned -14
[  830.487885][T21461] binder: 21460:21461 ioctl c0306201 800003c0 returned -14
[  830.497890][T21461] binder: 21460:21461 ioctl c0306201 80000000 returned -22
[  832.456885][ T5937] usb 7-1: new high-speed USB device number 112 using dummy_hcd
[  832.604357][ T5937] usb 7-1: Using ep0 maxpacket: 32
[  832.607468][ T5937] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  832.610438][ T5937] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  832.610632][ T5937] usb 7-1: config 0 has no interfaces?
[  832.619449][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  832.619488][ T5937] usb 7-1: Product: syz
[  832.619553][ T5937] usb 7-1: Manufacturer: syz
[  832.619880][ T5937] usb 7-1: SerialNumber: syz
[  832.655777][ T5937] usb 7-1: config 0 descriptor??
[  833.493397][T21500] futex_wake_op: syz.1.4803 tries to shift op by 144; fix this program
[  833.933734][ T5816] kworker/0:3 (5816) used greatest stack depth: 17576 bytes left
[  834.265519][ T5937] usb 7-1: USB disconnect, device number 112
[  834.663784][T16960] usb 9-1: new high-speed USB device number 87 using dummy_hcd
[  834.822346][T21512] binder: 21511:21512 ioctl c0306201 80000080 returned -14
[  834.823141][T21512] binder: 21511:21512 ioctl c0306201 800003c0 returned -14
[  834.823340][T21512] binder: 21511:21512 ioctl c0306201 80000000 returned -22
[  834.907837][T16960] usb 9-1: unable to get BOS descriptor or descriptor too short
[  834.907865][T16960] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  834.908568][T16960] usb 9-1: unable to read config index 0 descriptor/start: -71
[  834.908595][T16960] usb 9-1: can't read configurations, error -71
[  834.953697][ T5937] usb 5-1: new full-speed USB device number 106 using dummy_hcd
[  835.105273][ T5937] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  835.106088][ T5937] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  835.106116][ T5937] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[  835.106133][ T5937] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  835.107647][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.107661][ T5937] usb 5-1: Product: syz
[  835.107669][ T5937] usb 5-1: Manufacturer: syz
[  835.107678][ T5937] usb 5-1: SerialNumber: syz
[  835.314086][ T5937] snd-usb-caiaq 5-1:1.0: invalid EPs
[  835.314102][ T5937] usb 5-1: unable to init card! (ret=-22)
[  835.314273][ T5937] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  835.518073][ T5937] usb 5-1: USB disconnect, device number 106
[  836.153825][T16960] usb 9-1: new high-speed USB device number 89 using dummy_hcd
[  836.313715][T16960] usb 9-1: Using ep0 maxpacket: 32
[  836.327390][T16960] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  836.336805][T16960] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  836.336821][T16960] usb 9-1: config 0 has no interfaces?
[  836.354124][T16960] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  836.354140][T16960] usb 9-1: Product: syz
[  836.354148][T16960] usb 9-1: Manufacturer: syz
[  836.354155][T16960] usb 9-1: SerialNumber: syz
[  836.407629][T16960] usb 9-1: config 0 descriptor??
[  838.034572][   T42] usb 9-1: USB disconnect, device number 89
[  838.356173][T21554] futex_wake_op: syz.0.4813 tries to shift op by 144; fix this program
[  838.436645][ T5937] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[  839.623679][ T5937] usb 6-1: Using ep0 maxpacket: 32
[  839.703768][ T5937] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  839.744163][   T10] usb 7-1: new high-speed USB device number 113 using dummy_hcd
[  839.893862][   T10] usb 7-1: Using ep0 maxpacket: 32
[  839.895872][   T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  839.922551][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  839.923803][   T10] usb 7-1: config 0 has no interfaces?
[  839.928250][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  839.928265][ T5937] usb 6-1: config 0 has no interfaces?
[  839.935074][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  839.935137][ T5937] usb 6-1: Product: syz
[  839.935195][ T5937] usb 6-1: Manufacturer: syz
[  839.935300][ T5937] usb 6-1: SerialNumber: syz
[  839.949540][ T5937] usb 6-1: config 0 descriptor??
[  840.039325][   T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  840.039524][   T10] usb 7-1: Product: syz
[  840.039667][   T10] usb 7-1: Manufacturer: syz
[  840.039714][   T10] usb 7-1: SerialNumber: syz
[  840.202331][   T10] usb 7-1: config 0 descriptor??
[  840.445333][ T5937] usb 6-1: USB disconnect, device number 116
[  840.706978][T21568] input: syz1 as /devices/virtual/input/input123
[  841.105812][ T5886] usb 7-1: USB disconnect, device number 113
[  841.204577][ T5842] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  841.363772][ T5842] usb 5-1: Using ep0 maxpacket: 32
[  841.366209][ T5842] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  841.368132][ T5842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.368170][ T5842] usb 5-1: config 0 has no interfaces?
[  841.371172][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  841.371215][ T5842] usb 5-1: Product: syz
[  841.371249][ T5842] usb 5-1: Manufacturer: syz
[  841.371350][ T5842] usb 5-1: SerialNumber: syz
[  841.697306][ T5842] usb 5-1: config 0 descriptor??
[  842.321370][   T25] usb 5-1: USB disconnect, device number 107
[  842.412066][T21589] futex_wake_op: syz.1.4821 tries to shift op by 144; fix this program
[  842.804336][T21595] netlink: 'syz.1.4822': attribute type 10 has an invalid length.
[  842.856395][T21598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4822'.
[  842.875537][T21595] team0 (unregistering): Port device team_slave_0 removed
[  842.943850][T21595] team0 (unregistering): Port device team_slave_1 removed
[  844.553403][T21612] input: syz1 as /devices/virtual/input/input124
[  845.334051][    T9] usb 7-1: new high-speed USB device number 114 using dummy_hcd
[  845.504546][    T9] usb 7-1: Using ep0 maxpacket: 32
[  845.505470][    T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  845.509470][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  845.509508][    T9] usb 7-1: config 0 has no interfaces?
[  845.515376][    T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  845.515530][    T9] usb 7-1: Product: syz
[  845.515539][    T9] usb 7-1: Manufacturer: syz
[  845.515575][    T9] usb 7-1: SerialNumber: syz
[  845.550864][    T9] usb 7-1: config 0 descriptor??
[  846.133659][ T5743] Bluetooth: hci1: command 0x0405 tx timeout
[  847.407910][T14105] usb 7-1: USB disconnect, device number 114
[  847.733901][   T30] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[  847.895769][   T30] usb 6-1: Using ep0 maxpacket: 32
[  847.910772][   T30] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  847.915995][   T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  847.916010][   T30] usb 6-1: config 0 has no interfaces?
[  847.920605][   T30] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  847.920645][   T30] usb 6-1: Product: syz
[  847.921359][   T30] usb 6-1: Manufacturer: syz
[  847.921767][   T30] usb 6-1: SerialNumber: syz
[  847.983705][   T30] usb 6-1: config 0 descriptor??
[  848.013895][T21651] loop8: detected capacity change from 0 to 8
[  848.015849][T21651] Dev loop8: unable to read RDB block 8
[  848.015882][T21651]  loop8: unable to read partition table
[  848.016043][T21651] loop8: partition table beyond EOD, truncated
[  848.016058][T21651] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  848.474647][   T30] usb 6-1: USB disconnect, device number 117
[  849.463770][   T30] usb 5-1: new full-speed USB device number 108 using dummy_hcd
[  849.652198][   T30] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  849.653069][   T30] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  849.653097][   T30] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[  849.653112][   T30] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  849.655210][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.655230][   T30] usb 5-1: Product: syz
[  849.655242][   T30] usb 5-1: Manufacturer: syz
[  849.655254][   T30] usb 5-1: SerialNumber: syz
[  849.861347][T21662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  849.862019][   T30] snd-usb-caiaq 5-1:1.0: invalid EPs
[  849.862030][   T30] usb 5-1: unable to init card! (ret=-22)
[  849.862201][   T30] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  850.066861][ T5843] usb 5-1: USB disconnect, device number 108
[  850.345868][   T30] wiimote 0005:057E:0306.0018: unknown main item tag 0x0
[  850.345940][   T30] wiimote 0005:057E:0306.0018: unknown main item tag 0x0
[  850.349695][   T30] wiimote 0005:057E:0306.0018: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  850.349936][   T30] wiimote 0005:057E:0306.0018: New device registered
[  850.603807][ T5886] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[  850.776126][ T5886] usb 6-1: Using ep0 maxpacket: 8
[  850.777260][ T5886] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  850.782740][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.782763][ T5886] usb 6-1: Product: syz
[  850.782774][ T5886] usb 6-1: Manufacturer: syz
[  850.782786][ T5886] usb 6-1: SerialNumber: syz
[  851.245999][T21671] wiimote 0005:057E:0306.0018: Device removed
[  851.247659][ T5886] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  851.247684][ T5886] usb 6-1: MIDIStreaming interface descriptor not found
[  851.294292][ T5886] usb 6-1: USB disconnect, device number 118
[  851.390413][T20903] udevd[20903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  851.403932][   T30] wiimote 0005:057E:0306.0018: detected device: Nintendo Wii Remote (Gen 1)
[  851.414710][   T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0018/input/input126
[  851.419915][   T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0018/input/input127
[  851.426425][   T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0018/input/input125
[  852.613794][   T25] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  852.882462][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  852.882490][   T25] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  852.884603][   T25] usb 5-1: unable to read config index 0 descriptor/start: -71
[  852.884636][   T25] usb 5-1: can't read configurations, error -71
[  857.563822][T21695] loop8: detected capacity change from 0 to 8
[  857.566570][T21695] Dev loop8: unable to read RDB block 8
[  857.566602][T21695]  loop8: unable to read partition table
[  857.566772][T21695] loop8: partition table beyond EOD, truncated
[  857.566819][T21695] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  858.438339][T21716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4845'.
[  859.798198][T21726] futex_wake_op: syz.2.4848 tries to shift op by 144; fix this program
[  861.481966][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  861.500727][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  861.503016][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  861.516752][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  861.526106][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  861.713835][T21746] futex_wake_op: syz.1.4853 tries to shift op by 144; fix this program
[  861.946635][T14242] syz_tun (unregistering): left allmulticast mode
[  862.164850][T21751] futex_wake_op: syz.0.4854 tries to shift op by 144; fix this program
[  862.729394][T21742] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.729463][T21742] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.729532][T21742] bridge_slave_0: entered allmulticast mode
[  862.730236][T21742] bridge_slave_0: entered promiscuous mode
[  862.747354][T21742] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.747434][T21742] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.747500][T21742] bridge_slave_1: entered allmulticast mode
[  862.748245][T21742] bridge_slave_1: entered promiscuous mode
[  862.793690][ T5937] usb 9-1: new high-speed USB device number 90 using dummy_hcd
[  862.812153][T21742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.819066][T21742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.878003][T21742] team0: Port device team_slave_0 added
[  862.880227][T21742] team0: Port device team_slave_1 added
[  862.927977][T21742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.927989][T21742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.928002][T21742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  862.928911][T21742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.928919][T21742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.928932][T21742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.056964][T21742] hsr_slave_0: entered promiscuous mode
[  863.057419][T21742] hsr_slave_1: entered promiscuous mode
[  863.086042][ T5937] usb 9-1: unable to get BOS descriptor or descriptor too short
[  863.086085][ T5937] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  863.086872][ T5937] usb 9-1: unable to read config index 0 descriptor/start: -71
[  863.086922][ T5937] usb 9-1: can't read configurations, error -71
[  863.182363][T21775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4856'.
[  863.563705][ T5743] Bluetooth: hci4: command tx timeout
[  863.723767][T21742] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.524056][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  864.885188][T21742] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.621425][T21742] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.653926][ T5743] Bluetooth: hci4: command tx timeout
[  865.972138][T21742] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.357520][T21813] netlink: 'syz.0.4863': attribute type 10 has an invalid length.
[  866.362312][T21813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4863'.
[  866.582471][T21742] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  866.619507][T21742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  866.620936][T21742] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  866.706760][T21742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  866.707497][T21742] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  866.760783][T21742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  866.764485][T21742] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  866.810658][T21742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  866.912025][T21742] 8021q: adding VLAN 0 to HW filter on device bond0
[  866.921837][T21742] 8021q: adding VLAN 0 to HW filter on device team0
[  866.932518][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.932616][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  866.963160][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.963206][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.104431][   T25] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  867.123799][    T9] usb 9-1: new high-speed USB device number 92 using dummy_hcd
[  867.275433][   T25] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  867.276367][   T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.276384][   T25] usb 6-1: config 0 has no interfaces?
[  867.278322][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.278341][   T25] usb 6-1: Product: syz
[  867.278352][   T25] usb 6-1: Manufacturer: syz
[  867.278363][   T25] usb 6-1: SerialNumber: syz
[  867.280513][   T25] usb 6-1: config 0 descriptor??
[  867.286249][T21742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.329375][T21742] veth0_vlan: entered promiscuous mode
[  867.334562][T21742] veth1_vlan: entered promiscuous mode
[  867.349035][T21742] veth0_macvtap: entered promiscuous mode
[  867.351329][T21742] veth1_macvtap: entered promiscuous mode
[  867.358585][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  867.358611][    T9] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  867.359366][T21742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  867.361329][    T9] usb 9-1: unable to read config index 0 descriptor/start: -71
[  867.361349][    T9] usb 9-1: can't read configurations, error -71
[  867.362938][T21742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  867.492792][T21826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  867.493007][T21826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.659501][ T5937] usb 6-1: USB disconnect, device number 119
[  867.703804][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  867.703989][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  867.704203][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  867.704320][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  867.712554][T19611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.712581][T19611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.736270][T19611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.736284][T19611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  868.445286][ T5937] usb 7-1: new high-speed USB device number 115 using dummy_hcd
[  868.615447][ T5937] usb 7-1: Using ep0 maxpacket: 32
[  868.616882][ T5937] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  868.621693][ T5937] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  868.621848][ T5937] usb 7-1: config 0 has no interfaces?
[  868.658046][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  868.658251][ T5937] usb 7-1: Product: syz
[  868.658298][ T5937] usb 7-1: Manufacturer: syz
[  868.658342][ T5937] usb 7-1: SerialNumber: syz
[  868.774475][ T5937] usb 7-1: config 0 descriptor??
[  868.905267][  T970] usb 9-1: new high-speed USB device number 94 using dummy_hcd
[  868.972125][T21859] syzkaller0: entered promiscuous mode
[  868.972148][T21859] syzkaller0: entered allmulticast mode
[  869.074179][  T970] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  869.075173][  T970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  869.075196][  T970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  869.075223][  T970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.081664][  T970] usb 9-1: config 0 descriptor??
[  869.646070][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  869.646220][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  870.146308][  T970] usbhid 9-1:0.0: can't add hid device: -71
[  870.146399][  T970] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  870.354044][ T5843] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  870.358156][  T970] usb 9-1: USB disconnect, device number 94
[  870.513857][ T5843] usb 6-1: Using ep0 maxpacket: 32
[  870.515123][ T5843] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  870.517190][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.517229][ T5843] usb 6-1: config 0 has no interfaces?
[  870.527151][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  870.527192][ T5843] usb 6-1: Product: syz
[  870.527225][ T5843] usb 6-1: Manufacturer: syz
[  870.527259][ T5843] usb 6-1: SerialNumber: syz
[  870.791087][ T5843] usb 6-1: config 0 descriptor??
[  871.558903][    T9] usb 7-1: USB disconnect, device number 115
[  871.923814][   T50] usb 6-1: USB disconnect, device number 120
[  872.095488][  T970] usb 9-1: new high-speed USB device number 95 using dummy_hcd
[  872.257222][  T970] usb 9-1: Using ep0 maxpacket: 32
[  872.266413][  T970] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  872.267261][  T970] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  872.267275][  T970] usb 9-1: config 0 has no interfaces?
[  872.268908][  T970] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  872.268921][  T970] usb 9-1: Product: syz
[  872.268928][  T970] usb 9-1: Manufacturer: syz
[  872.268936][  T970] usb 9-1: SerialNumber: syz
[  872.270215][  T970] usb 9-1: config 0 descriptor??
[  873.038311][    T9] usb 9-1: USB disconnect, device number 95
[  873.164409][T14105] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[  873.486180][   T50] usb 7-1: new high-speed USB device number 116 using dummy_hcd
[  873.496837][T14105] usb 6-1: unable to get BOS descriptor or descriptor too short
[  873.496863][T14105] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  873.497553][T14105] usb 6-1: unable to read config index 0 descriptor/start: -71
[  873.497570][T14105] usb 6-1: can't read configurations, error -71
[  873.687167][   T50] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  873.742713][   T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  873.742739][   T50] usb 7-1: config 0 has no interfaces?
[  873.896846][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.896886][   T50] usb 7-1: Product: syz
[  873.896895][   T50] usb 7-1: Manufacturer: syz
[  873.896903][   T50] usb 7-1: SerialNumber: syz
[  873.954230][T14111] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  874.097910][   T50] usb 7-1: config 0 descriptor??
[  874.124205][T14111] usb 5-1: Using ep0 maxpacket: 32
[  874.127743][T14111] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  874.141768][T14111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  874.141837][T14111] usb 5-1: config 0 has no interfaces?
[  874.166672][T14111] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  874.166730][T14111] usb 5-1: Product: syz
[  874.166778][T14111] usb 5-1: Manufacturer: syz
[  874.166823][T14111] usb 5-1: SerialNumber: syz
[  874.212757][T14111] usb 5-1: config 0 descriptor??
[  874.427358][T21897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.433014][T21897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.268351][T14111] usb 7-1: USB disconnect, device number 116
[  875.293749][ T5885] usb 9-1: new high-speed USB device number 96 using dummy_hcd
[  875.393790][T21916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4881'.
[  875.454599][ T5885] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  875.455546][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.455587][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.455610][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.457115][ T5885] usb 9-1: config 0 descriptor??
[  875.812433][T14111] usb 5-1: USB disconnect, device number 111
[  875.867803][T21919] syzkaller0: entered promiscuous mode
[  875.867817][T21919] syzkaller0: entered allmulticast mode
[  876.067134][ T5885] usbhid 9-1:0.0: can't add hid device: -71
[  876.067189][ T5885] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  876.069563][ T5885] usb 9-1: USB disconnect, device number 96
[  878.363543][T21945] veth1_vlan: entered allmulticast mode
[  879.263920][ T5885] usb 9-1: new high-speed USB device number 97 using dummy_hcd
[  879.440354][ T5885] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  879.468122][ T5885] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  879.468423][ T5885] usb 9-1: config 0 has no interfaces?
[  879.522386][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.522923][ T5885] usb 9-1: Product: syz
[  879.522958][ T5885] usb 9-1: Manufacturer: syz
[  879.523023][ T5885] usb 9-1: SerialNumber: syz
[  879.561135][ T5885] usb 9-1: config 0 descriptor??
[  879.673052][T21954] syzkaller0: entered promiscuous mode
[  879.673212][T21954] syzkaller0: entered allmulticast mode
[  879.768379][T21952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  879.768586][T21952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.260118][   T50] usb 9-1: USB disconnect, device number 97
[  880.724187][   T25] usb 7-1: new high-speed USB device number 117 using dummy_hcd
[  880.884883][   T25] usb 7-1: Using ep0 maxpacket: 32
[  880.887537][   T25] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  880.900335][   T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  880.900379][   T25] usb 7-1: config 0 has no interfaces?
[  880.941788][   T25] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  880.941864][   T25] usb 7-1: Product: syz
[  880.941873][   T25] usb 7-1: Manufacturer: syz
[  880.941880][   T25] usb 7-1: SerialNumber: syz
[  880.992249][   T25] usb 7-1: config 0 descriptor??
[  882.341837][T20680] usb 7-1: USB disconnect, device number 117
[  883.603981][T20680] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  883.753781][T20680] usb 5-1: Using ep0 maxpacket: 32
[  883.755963][T20680] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  883.763497][T20680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.770501][T20680] usb 5-1: config 0 has no interfaces?
[  883.808885][T20680] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  883.808946][T20680] usb 5-1: Product: syz
[  883.808994][T20680] usb 5-1: Manufacturer: syz
[  883.809137][T20680] usb 5-1: SerialNumber: syz
[  883.853838][T20680] usb 5-1: config 0 descriptor??
[  883.997903][T22003] futex_wake_op: syz.2.4900 tries to shift op by 144; fix this program
[  885.063635][T22008] syzkaller0: entered promiscuous mode
[  885.063651][T22008] syzkaller0: entered allmulticast mode
[  885.092721][T20680] usb 5-1: USB disconnect, device number 112
[  885.412207][T22011] team0: Device ipip0 is up. Set it down before adding it as a team port
[  885.512178][T22019] futex_wake_op: syz.1.4905 tries to shift op by 144; fix this program
[  889.055218][T22052] futex_wake_op: syz.4.4912 tries to shift op by 144; fix this program
[  890.431475][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4914'.
[  890.914106][T14105] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  891.075898][T14105] usb 5-1: Using ep0 maxpacket: 32
[  891.089005][T14105] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  891.101042][T14105] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  891.101084][T14105] usb 5-1: config 0 has no interfaces?
[  891.111979][T14105] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  891.112496][T14105] usb 5-1: Product: syz
[  891.113042][T14105] usb 5-1: Manufacturer: syz
[  891.120026][T14105] usb 5-1: SerialNumber: syz
[  891.184369][T14105] usb 5-1: config 0 descriptor??
[  892.555010][ T5937] usb 5-1: USB disconnect, device number 113
[  893.217166][T22093] futex_wake_op: syz.1.4922 tries to shift op by 144; fix this program
[  896.212018][T22137] futex_wake_op: syz.2.4931 tries to shift op by 144; fix this program
[  897.257230][T22143] netlink: 'syz.4.4932': attribute type 10 has an invalid length.
[  897.270194][T22143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4932'.
[  898.285318][    T9] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  898.453674][    T9] usb 5-1: Using ep0 maxpacket: 32
[  898.455710][    T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  898.458996][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.459083][    T9] usb 5-1: config 0 has no interfaces?
[  898.474964][    T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  898.474990][    T9] usb 5-1: Product: syz
[  898.475005][    T9] usb 5-1: Manufacturer: syz
[  898.475020][    T9] usb 5-1: SerialNumber: syz
[  898.481607][    T9] usb 5-1: config 0 descriptor??
[  898.825531][    T9] usb 5-1: USB disconnect, device number 114
[  899.093679][ T5886] usb 7-1: new high-speed USB device number 118 using dummy_hcd
[  899.244435][ T5886] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  899.245443][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  899.245463][ T5886] usb 7-1: config 0 has no interfaces?
[  899.247539][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.247559][ T5886] usb 7-1: Product: syz
[  899.247571][ T5886] usb 7-1: Manufacturer: syz
[  899.247582][ T5886] usb 7-1: SerialNumber: syz
[  899.249817][ T5886] usb 7-1: config 0 descriptor??
[  899.324689][T22165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4937'.
[  899.462877][T22169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  899.463320][T22169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  899.746324][   T25] usb 7-1: USB disconnect, device number 118
[  899.933757][   T10] usb 9-1: new high-speed USB device number 98 using dummy_hcd
[  900.324761][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  900.324788][   T10] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  900.388972][   T10] usb 9-1: unable to read config index 0 descriptor/start: -71
[  900.389001][   T10] usb 9-1: can't read configurations, error -71
[  901.134840][T22199] syzkaller0: entered promiscuous mode
[  901.134890][T22199] syzkaller0: entered allmulticast mode
[  901.155809][T14105] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  901.383740][T14105] usb 6-1: Using ep0 maxpacket: 32
[  901.386543][T14105] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  901.387452][T14105] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  901.387466][T14105] usb 6-1: config 0 has no interfaces?
[  901.389973][T14105] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  901.389990][T14105] usb 6-1: Product: syz
[  901.389998][T14105] usb 6-1: Manufacturer: syz
[  901.390005][T14105] usb 6-1: SerialNumber: syz
[  901.392509][T14105] usb 6-1: config 0 descriptor??
[  901.716419][T14105] usb 6-1: USB disconnect, device number 123
[  902.433711][T14105] usb 5-1: new full-speed USB device number 115 using dummy_hcd
[  902.594496][T14105] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  902.595547][T14105] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  902.595596][T14105] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[  902.595622][T14105] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  902.597611][T14105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.597633][T14105] usb 5-1: Product: syz
[  902.597648][T14105] usb 5-1: Manufacturer: syz
[  902.597662][T14105] usb 5-1: SerialNumber: syz
[  902.617500][T22220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4948'.
[  902.804733][T22211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  902.806707][T14105] snd-usb-caiaq 5-1:1.0: invalid EPs
[  902.806742][T14105] usb 5-1: unable to init card! (ret=-22)
[  902.806931][T14105] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  903.015917][    T9] usb 5-1: USB disconnect, device number 115
[  903.853971][ T5886] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  904.005189][ T5886] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  904.006173][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  904.006199][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  904.006229][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.010965][ T5886] usb 5-1: config 0 descriptor??
[  904.283834][    T9] usb 9-1: new high-speed USB device number 100 using dummy_hcd
[  904.427747][ T5886] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0
[  904.427767][ T5886] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0
[  904.427779][ T5886] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0
[  904.436847][ T5886] cm6533_jd 0003:0D8C:0022.0019: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  904.522081][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  904.522110][    T9] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  904.522776][    T9] usb 9-1: unable to read config index 0 descriptor/start: -71
[  904.522793][    T9] usb 9-1: can't read configurations, error -71
[  904.634602][ T5886] usb 5-1: USB disconnect, device number 116
[  904.703936][   T25] usb 7-1: new high-speed USB device number 119 using dummy_hcd
[  904.863685][   T25] usb 7-1: Using ep0 maxpacket: 32
[  904.864442][   T25] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  904.865371][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.867327][   T25] usb 7-1: config 0 descriptor??
[  904.871841][   T25] as10x_usb: device has been detected
[  904.872500][   T25] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  904.878502][   T25] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  904.894130][   T25] as10x_usb: error during firmware upload part1
[  904.894572][   T25] Registered device nBox DVB-T Dongle
[  905.193446][T22248] futex_wake_op: syz.0.4957 tries to shift op by 144; fix this program
[  905.229738][T20680] usb 7-1: USB disconnect, device number 119
[  906.210652][T20680] Unregistered device nBox DVB-T Dongle
[  906.225762][T20680] as10x_usb: device has been disconnected
[  906.807186][T22266] netlink: 'syz.0.4960': attribute type 10 has an invalid length.
[  907.224554][    T9] usb 7-1: new full-speed USB device number 120 using dummy_hcd
[  907.417050][    T9] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  907.418012][    T9] usb 7-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  907.418057][    T9] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[  907.418078][    T9] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  907.427757][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.427785][    T9] usb 7-1: Product: syz
[  907.427797][    T9] usb 7-1: Manufacturer: syz
[  907.427808][    T9] usb 7-1: SerialNumber: syz
[  907.738943][T22268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  907.764060][    T9] snd-usb-caiaq 7-1:1.0: invalid EPs
[  907.764084][    T9] usb 7-1: unable to init card! (ret=-22)
[  907.764387][    T9] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  907.959940][   T25] usb 7-1: USB disconnect, device number 120
[  908.277266][T22284] futex_wake_op: syz.0.4966 tries to shift op by 144; fix this program
[  908.456833][T21853] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  908.646615][T21853] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  908.653480][T21853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  908.654339][T21853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  908.656244][T21853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.713727][T21853] usb 6-1: config 0 descriptor??
[  909.337764][T21853] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0
[  909.337839][T21853] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0
[  909.337859][T21853] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0
[  909.407285][T21853] cm6533_jd 0003:0D8C:0022.001A: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  909.427221][ T5886] usb 6-1: USB disconnect, device number 124
[  909.710178][T22294] fido_id[22294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory
[  910.063682][   T50] usb 7-1: new high-speed USB device number 121 using dummy_hcd
[  910.213781][   T50] usb 7-1: Using ep0 maxpacket: 32
[  910.214585][   T50] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  910.215403][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.219203][   T50] usb 7-1: config 0 descriptor??
[  910.224028][   T50] as10x_usb: device has been detected
[  910.225187][   T50] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  910.241096][   T50] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  910.245022][   T50] as10x_usb: error during firmware upload part1
[  910.245252][   T50] Registered device nBox DVB-T Dongle
[  910.599345][   T50] usb 7-1: USB disconnect, device number 121
[  911.156614][   T50] Unregistered device nBox DVB-T Dongle
[  911.159579][   T50] as10x_usb: device has been disconnected
[  921.939749][T22329] netlink: 'syz.4.4972': attribute type 10 has an invalid length.
[  922.234945][T14111] usb 7-1: new high-speed USB device number 122 using dummy_hcd
[  922.383753][T14111] usb 7-1: Using ep0 maxpacket: 32
[  922.385526][T14111] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  922.387696][T14111] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  922.387710][T14111] usb 7-1: config 0 has no interfaces?
[  922.391902][T14111] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  922.391919][T14111] usb 7-1: Product: syz
[  922.392302][T14111] usb 7-1: Manufacturer: syz
[  922.392335][T14111] usb 7-1: SerialNumber: syz
[  922.452033][T14111] usb 7-1: config 0 descriptor??
[  923.781153][ T5843] usb 7-1: USB disconnect, device number 122
[  923.864110][   T10] usb 5-1: new full-speed USB device number 117 using dummy_hcd
[  924.025495][   T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  924.032516][   T10] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  924.034037][   T10] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[  924.034173][   T10] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  924.046446][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.046527][   T10] usb 5-1: Product: syz
[  924.046577][   T10] usb 5-1: Manufacturer: syz
[  924.046904][   T10] usb 5-1: SerialNumber: syz
[  924.380395][T22342] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  924.430422][   T10] snd-usb-caiaq 5-1:1.0: invalid EPs
[  924.430530][   T10] usb 5-1: unable to init card! (ret=-22)
[  924.431922][   T10] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  924.544436][T22349] futex_wake_op: syz.2.4976 tries to shift op by 144; fix this program
[  924.596096][T14111] usb 5-1: USB disconnect, device number 117
[  925.093986][T14111] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  925.256905][T14111] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  925.257749][T14111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  925.257765][T14111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  925.257783][T14111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.259456][T14111] usb 6-1: config 0 descriptor??
[  925.669429][T14111] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0
[  925.669456][T14111] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0
[  925.669469][T14111] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0
[  925.672175][T14111] cm6533_jd 0003:0D8C:0022.001B: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  925.885828][    T9] usb 6-1: USB disconnect, device number 125
[  926.112508][T22371] fido_id[22371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory
[  926.549150][T22376] futex_wake_op: syz.0.4983 tries to shift op by 144; fix this program
[  927.786948][T22387] netlink: 'syz.2.4985': attribute type 10 has an invalid length.
[  927.893902][T22389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4985'.
[  927.938948][T22387] team0 (unregistering): Port device team_slave_0 removed
[  927.997652][T22387] team0 (unregistering): Port device team_slave_1 removed
[  928.295935][T14105] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  928.457469][T14105] usb 6-1: Using ep0 maxpacket: 32
[  928.458717][T14105] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  928.461584][T14105] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  928.462085][T14105] usb 6-1: config 0 has no interfaces?
[  928.471755][T14105] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  928.471795][T14105] usb 6-1: Product: syz
[  928.471828][T14105] usb 6-1: Manufacturer: syz
[  928.471946][T14105] usb 6-1: SerialNumber: syz
[  928.797382][T14105] usb 6-1: config 0 descriptor??
[  929.055858][T14105] usb 6-1: USB disconnect, device number 126
[  929.644970][    T9] usb 7-1: new high-speed USB device number 123 using dummy_hcd
[  929.810185][    T9] usb 7-1: Using ep0 maxpacket: 32
[  929.822656][    T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  929.829040][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  929.829380][    T9] usb 7-1: config 0 has no interfaces?
[  929.861319][    T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  929.861365][    T9] usb 7-1: Product: syz
[  929.861374][    T9] usb 7-1: Manufacturer: syz
[  929.861413][    T9] usb 7-1: SerialNumber: syz
[  929.925973][    T9] usb 7-1: config 0 descriptor??
[  931.110448][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  931.110530][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  931.328641][T22425] futex_wake_op: syz.1.4994 tries to shift op by 144; fix this program
[  931.809699][T22431] netlink: 'syz.0.4993': attribute type 10 has an invalid length.
[  932.070254][    T9] usb 7-1: USB disconnect, device number 123
[  932.613794][ T5886] usb 9-1: new high-speed USB device number 102 using dummy_hcd
[  932.763767][ T5886] usb 9-1: Using ep0 maxpacket: 32
[  932.764613][ T5886] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  932.765793][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.768513][ T5886] usb 9-1: config 0 descriptor??
[  932.793966][ T5886] as10x_usb: device has been detected
[  932.794558][ T5886] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  932.798990][ T5886] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  932.811057][ T5886] as10x_usb: error during firmware upload part1
[  932.811504][ T5886] Registered device nBox DVB-T Dongle
[  932.950924][T22446] futex_wake_op: syz.0.4999 tries to shift op by 144; fix this program
[  933.240814][ T5886] usb 9-1: USB disconnect, device number 102
[  933.792337][ T5886] Unregistered device nBox DVB-T Dongle
[  933.806978][ T5886] as10x_usb: device has been disconnected
[  934.201646][ T5886] wiimote 0005:057E:0306.001C: unknown main item tag 0x0
[  934.201835][ T5886] wiimote 0005:057E:0306.001C: unknown main item tag 0x0
[  934.240439][ T5886] wiimote 0005:057E:0306.001C: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  934.257322][ T5886] wiimote 0005:057E:0306.001C: New device registered
[  934.448301][ T5842] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[  934.465551][   T50] usb 7-1: new high-speed USB device number 124 using dummy_hcd
[  934.604165][ T5842] usb 6-1: Using ep0 maxpacket: 32
[  934.606006][ T5842] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  934.612563][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  934.612657][ T5842] usb 6-1: config 0 has no interfaces?
[  934.613745][   T50] usb 7-1: Using ep0 maxpacket: 8
[  934.614491][   T50] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  934.618020][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.618043][   T50] usb 7-1: Product: syz
[  934.618056][   T50] usb 7-1: Manufacturer: syz
[  934.618070][   T50] usb 7-1: SerialNumber: syz
[  934.633032][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  934.633164][ T5842] usb 6-1: Product: syz
[  934.633320][ T5842] usb 6-1: Manufacturer: syz
[  934.633421][ T5842] usb 6-1: SerialNumber: syz
[  934.680327][ T5842] usb 6-1: config 0 descriptor??
[  934.885611][T22453] wiimote 0005:057E:0306.001C: Device removed
[  934.889763][   T50] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  934.889799][   T50] usb 7-1: MIDIStreaming interface descriptor not found
[  934.935593][   T50] usb 7-1: USB disconnect, device number 124
[  935.128374][T22468] udevd[22468]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  935.338035][   T30] wiimote 0005:057E:0306.001C: detected device: Nintendo Wii Remote (Gen 1)
[  935.856967][   T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001C/input/input129
[  936.155040][   T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001C/input/input130
[  936.264294][   T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001C/input/input128
[  936.945036][T21853] usb 6-1: USB disconnect, device number 127
[  937.675402][T22481] netlink: 'syz.1.5005': attribute type 10 has an invalid length.
[  939.084381][ T5842] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  939.233691][ T5842] usb 5-1: Using ep0 maxpacket: 32
[  939.234931][ T5842] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  939.236041][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.238708][ T5842] usb 5-1: config 0 descriptor??
[  939.266117][ T5842] as10x_usb: device has been detected
[  939.266881][ T5842] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  939.287414][ T5842] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  939.306700][ T5842] as10x_usb: error during firmware upload part1
[  939.307067][ T5842] Registered device nBox DVB-T Dongle
[  939.581374][ T5842] usb 5-1: USB disconnect, device number 118
[  939.791142][ T5842] Unregistered device nBox DVB-T Dongle
[  939.792212][ T5842] as10x_usb: device has been disconnected
[  940.864476][T22521] futex_wake_op: syz.0.5015 tries to shift op by 144; fix this program
[  941.880665][T22526] netlink: 'syz.4.5016': attribute type 10 has an invalid length.
[  944.447577][ T5842] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  944.597546][ T5842] usb 5-1: Using ep0 maxpacket: 32
[  944.611026][ T5842] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  944.634296][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.703134][ T5842] usb 5-1: config 0 descriptor??
[  944.809921][ T5842] as10x_usb: device has been detected
[  944.820784][ T5842] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  944.991804][ T5842] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  945.043945][T20680] usb 7-1: new high-speed USB device number 125 using dummy_hcd
[  945.152221][ T5842] as10x_usb: error during firmware upload part1
[  945.161050][ T5842] Registered device nBox DVB-T Dongle
[  945.204096][T20680] usb 7-1: Using ep0 maxpacket: 32
[  945.219102][T20680] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  945.233031][T20680] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  945.233650][T20680] usb 7-1: config 0 has no interfaces?
[  945.242673][T20680] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  945.255477][T20680] usb 7-1: Product: syz
[  945.255631][T20680] usb 7-1: Manufacturer: syz
[  945.255669][T20680] usb 7-1: SerialNumber: syz
[  945.302015][T20680] usb 7-1: config 0 descriptor??
[  945.411996][   T10] usb 5-1: USB disconnect, device number 119
[  946.440727][   T10] Unregistered device nBox DVB-T Dongle
[  946.462092][T20680] usb 7-1: USB disconnect, device number 125
[  946.472474][   T10] as10x_usb: device has been disconnected
[  948.000943][T14111] wiimote 0005:057E:0306.001D: unknown main item tag 0x0
[  948.001001][T14111] wiimote 0005:057E:0306.001D: unknown main item tag 0x0
[  948.002455][T14111] wiimote 0005:057E:0306.001D: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  948.002731][T14111] wiimote 0005:057E:0306.001D: New device registered
[  948.253987][T14105] usb 9-1: new high-speed USB device number 103 using dummy_hcd
[  948.423757][T14105] usb 9-1: Using ep0 maxpacket: 8
[  948.424285][T14105] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  948.428787][T14105] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.428803][T14105] usb 9-1: Product: syz
[  948.428810][T14105] usb 9-1: Manufacturer: syz
[  948.428818][T14105] usb 9-1: SerialNumber: syz
[  948.542613][T22602] futex_wake_op: syz.1.5035 tries to shift op by 144; fix this program
[  948.781922][T22591] wiimote 0005:057E:0306.001D: Device removed
[  948.964251][T14105] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  948.964278][T14105] usb 9-1: MIDIStreaming interface descriptor not found
[  949.103628][T14111] wiimote 0005:057E:0306.001D: detected device: Nintendo Wii Remote (Gen 1)
[  949.333392][T14111] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001D/input/input132
[  949.334779][T14105] usb 9-1: USB disconnect, device number 103
[  949.336186][T14111] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001D/input/input133
[  949.337693][T14111] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001D/input/input131
[  949.455498][T22607] udevd[22607]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  949.915166][    T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  950.073785][    T9] usb 5-1: Using ep0 maxpacket: 32
[  950.076680][    T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  950.081418][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.094191][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  950.109480][    T9] usb 5-1: config 0 descriptor??
[  950.253942][ T5843] usb 6-1: Using ep0 maxpacket: 32
[  950.255706][    T9] as10x_usb: device has been detected
[  950.262174][ T5843] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  950.274602][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  950.275715][ T5843] usb 6-1: config 0 has no interfaces?
[  950.280167][    T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  950.300200][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  950.300240][ T5843] usb 6-1: Product: syz
[  950.301307][ T5843] usb 6-1: Manufacturer: syz
[  950.301340][ T5843] usb 6-1: SerialNumber: syz
[  950.369634][ T5843] usb 6-1: config 0 descriptor??
[  950.557600][    T9] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  950.726950][    T9] as10x_usb: error during firmware upload part1
[  950.731357][    T9] Registered device nBox DVB-T Dongle
[  950.784843][    T9] usb 5-1: USB disconnect, device number 120
[  951.060267][    T9] Unregistered device nBox DVB-T Dongle
[  951.090948][    T9] as10x_usb: device has been disconnected
[  951.600873][    T9] usb 6-1: USB disconnect, device number 2
[  953.583219][T22653] input: syz1 as /devices/virtual/input/input134
[  954.554073][T20680] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  954.713712][T20680] usb 5-1: Using ep0 maxpacket: 32
[  954.824384][T20680] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  955.043776][T22677] netlink: 'syz.1.5051': attribute type 10 has an invalid length.
[  955.045329][T22677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5051'.
[  955.148671][T20680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  955.148691][T20680] usb 5-1: config 0 has no interfaces?
[  955.393965][T20680] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  955.393986][T20680] usb 5-1: Product: syz
[  955.393995][T20680] usb 5-1: Manufacturer: syz
[  955.394003][T20680] usb 5-1: SerialNumber: syz
[  955.395299][T20680] usb 5-1: config 0 descriptor??
[  955.810444][T20680] usb 5-1: USB disconnect, device number 121
[  955.984064][ T8043] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  956.144424][ T8043] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  956.145349][ T8043] usb 6-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  956.145401][ T8043] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[  956.145426][ T8043] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  956.148107][ T8043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.148129][ T8043] usb 6-1: Product: syz
[  956.148143][ T8043] usb 6-1: Manufacturer: syz
[  956.148156][ T8043] usb 6-1: SerialNumber: syz
[  956.357937][T22682] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  956.360886][ T8043] snd-usb-caiaq 6-1:1.0: invalid EPs
[  956.360944][ T8043] usb 6-1: unable to init card! (ret=-22)
[  956.362032][ T8043] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  956.564545][ T5937] usb 6-1: USB disconnect, device number 3
[  957.205162][T22698] input: syz1 as /devices/virtual/input/input135
[  957.834234][ T5843] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  958.031584][ T5843] usb 6-1: Using ep0 maxpacket: 32
[  958.038958][ T5843] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  958.048814][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  958.048830][ T5843] usb 6-1: config 0 has no interfaces?
[  958.092135][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  958.092192][ T5843] usb 6-1: Product: syz
[  958.092229][ T5843] usb 6-1: Manufacturer: syz
[  958.093043][ T5843] usb 6-1: SerialNumber: syz
[  958.246143][ T5843] usb 6-1: config 0 descriptor??
[  959.590336][   T10] usb 9-1: new high-speed USB device number 104 using dummy_hcd
[  959.769559][ T5843] wiimote 0005:057E:0306.001E: unknown main item tag 0x0
[  959.771125][ T5843] wiimote 0005:057E:0306.001E: unknown main item tag 0x0
[  959.783937][   T10] usb 9-1: Using ep0 maxpacket: 8
[  959.791135][   T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  959.822257][T22722] netlink: 'syz.2.5064': attribute type 10 has an invalid length.
[  959.825167][T22719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5064'.
[  959.854244][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.854321][   T10] usb 9-1: Product: syz
[  959.854366][   T10] usb 9-1: Manufacturer: syz
[  959.854481][   T10] usb 9-1: SerialNumber: syz
[  959.898885][ T5843] wiimote 0005:057E:0306.001E: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  959.907762][ T5843] wiimote 0005:057E:0306.001E: New device registered
[  959.981636][    T9] usb 6-1: USB disconnect, device number 4
[  960.177503][T22727] netlink: 'syz.2.5065': attribute type 10 has an invalid length.
[  960.179570][T22714] wiimote 0005:057E:0306.001E: Device removed
[  960.181110][T22727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5065'.
[  960.260809][   T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  960.260837][   T10] usb 9-1: MIDIStreaming interface descriptor not found
[  960.941952][ T5885] wiimote 0005:057E:0306.001E: detected device: Nintendo Wii Remote (Gen 1)
[  961.093997][ T5937] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  961.244435][ T5937] usb 5-1: Using ep0 maxpacket: 32
[  961.245417][ T5937] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  961.246537][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.261355][ T5937] usb 5-1: config 0 descriptor??
[  961.263355][ T5885] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001E/input/input137
[  961.264838][ T5885] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001E/input/input138
[  961.299245][ T5937] as10x_usb: device has been detected
[  961.299420][ T5885] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001E/input/input136
[  961.299555][ T5937] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  961.299839][   T10] usb 9-1: USB disconnect, device number 104
[  961.387825][ T5937] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  961.416979][ T5937] as10x_usb: error during firmware upload part1
[  961.417942][ T5937] Registered device nBox DVB-T Dongle
[  961.450570][T22334] udevd[22334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  961.592058][   T30] usb 5-1: USB disconnect, device number 122
[  961.763411][T22745] input: syz1 as /devices/virtual/input/input139
[  961.810057][   T30] Unregistered device nBox DVB-T Dongle
[  961.813418][   T30] as10x_usb: device has been disconnected
[  963.010553][   T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  963.018582][   T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  963.020119][   T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  963.020637][   T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  963.020927][   T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  964.294077][T22752] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.294385][T22752] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.294663][T22752] bridge_slave_0: entered allmulticast mode
[  964.299697][T22752] bridge_slave_0: entered promiscuous mode
[  964.315419][T22752] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.315618][T22752] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.316396][T22752] bridge_slave_1: entered allmulticast mode
[  964.327091][T22752] bridge_slave_1: entered promiscuous mode
[  964.447402][T22752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  964.466470][T22752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  964.595944][T22752] team0: Port device team_slave_0 added
[  964.614324][T22752] team0: Port device team_slave_1 added
[  964.637545][T22752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  964.637565][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  964.637593][T22752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  964.639506][T22752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  964.639520][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  964.639539][T22752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  964.708480][T22752] hsr_slave_0: entered promiscuous mode
[  964.709018][T22752] hsr_slave_1: entered promiscuous mode
[  964.709413][T22752] debugfs: 'hsr0' already exists in 'hsr'
[  964.709427][T22752] Cannot create hsr debugfs directory
[  964.745062][T22782] tc_dump_action: action bad kind
[  965.101516][   T66] Bluetooth: hci3: command tx timeout
[  965.137406][T22752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  965.524484][T22752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.136184][T22752] bond0: (slave netdevsim1): Releasing backup interface
[  966.176773][T22752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.273743][   T30] usb 7-1: new high-speed USB device number 126 using dummy_hcd
[  966.433805][   T30] usb 7-1: Using ep0 maxpacket: 32
[  966.434586][   T30] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  966.435572][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.439132][   T30] usb 7-1: config 0 descriptor??
[  966.442230][   T30] as10x_usb: device has been detected
[  966.442590][   T30] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  966.451891][   T30] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  966.460669][   T30] as10x_usb: error during firmware upload part1
[  966.460963][   T30] Registered device nBox DVB-T Dongle
[  966.474725][T22752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.756584][T22752] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  966.761435][ T8111] usb 7-1: USB disconnect, device number 126
[  966.805953][T22752] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  966.806657][T22752] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  966.845726][T22752] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  966.846207][T22752] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  966.907383][T22752] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  966.908231][T22752] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  966.946355][T22752] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  966.973475][ T8111] Unregistered device nBox DVB-T Dongle
[  966.975350][ T8111] as10x_usb: device has been disconnected
[  966.992243][T22807] netlink: 'syz.0.5081': attribute type 10 has an invalid length.
[  967.027027][T22752] 8021q: adding VLAN 0 to HW filter on device bond0
[  967.041939][T22752] 8021q: adding VLAN 0 to HW filter on device team0
[  967.056446][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.056537][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  967.063024][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.063114][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  967.362415][T22752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.387008][T22752] veth0_vlan: entered promiscuous mode
[  967.390724][T22752] veth1_vlan: entered promiscuous mode
[  967.408070][T22752] veth0_macvtap: entered promiscuous mode
[  967.410402][T22752] veth1_macvtap: entered promiscuous mode
[  967.420904][T22752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  967.428455][T22752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  967.575057][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  967.575255][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  967.575488][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  967.575508][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  967.586511][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.586527][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.612911][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.612927][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  969.591939][T22841] tc_dump_action: action bad kind
[  969.947990][T20680] usb 7-1: new high-speed USB device number 127 using dummy_hcd
[  970.021035][T22851] input: syz1 as /devices/virtual/input/input140
[  970.096000][T20680] usb 7-1: Using ep0 maxpacket: 32
[  970.106857][T20680] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  970.109210][T20680] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  970.109284][T20680] usb 7-1: config 0 has no interfaces?
[  970.133703][T20680] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  970.133727][T20680] usb 7-1: Product: syz
[  970.133740][T20680] usb 7-1: Manufacturer: syz
[  970.133753][T20680] usb 7-1: SerialNumber: syz
[  970.190436][T20680] usb 7-1: config 0 descriptor??
[  970.921257][T20680] usb 7-1: USB disconnect, device number 127
[  970.958334][T22863] netlink: 'syz.1.5090': attribute type 10 has an invalid length.
[  971.027033][T22863] team0 (unregistering): Port device team_slave_0 removed
[  971.078768][T22863] team0 (unregistering): Port device team_slave_1 removed
[  971.633798][T20680] usb 9-1: new high-speed USB device number 105 using dummy_hcd
[  971.964576][T20680] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  972.083810][T20680] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  972.083826][T20680] usb 9-1: config 0 has no interfaces?
[  972.326053][T20680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.326072][T20680] usb 9-1: Product: syz
[  972.326080][T20680] usb 9-1: Manufacturer: syz
[  972.326087][T20680] usb 9-1: SerialNumber: syz
[  972.413706][T22737] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  972.467920][T20680] usb 9-1: config 0 descriptor??
[  972.565916][T22737] usb 5-1: Using ep0 maxpacket: 32
[  972.585689][T22737] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  972.593236][T22737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  972.593276][T22737] usb 5-1: config 0 has no interfaces?
[  972.607149][T22737] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  972.607177][T22737] usb 5-1: Product: syz
[  972.607272][T22737] usb 5-1: Manufacturer: syz
[  972.607376][T22737] usb 5-1: SerialNumber: syz
[  972.707683][T22737] usb 5-1: config 0 descriptor??
[  972.760156][T22869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.760522][T22869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.939271][T20680] usb 9-1: USB disconnect, device number 105
[  972.949966][T22882] tc_dump_action: action bad kind
[  973.934787][T22737] usb 5-1: USB disconnect, device number 123
[  975.806830][T22923] netlink: 'syz.2.5103': attribute type 10 has an invalid length.
[  977.161320][T22934] tc_dump_action: action bad kind
[  978.393897][ T8043] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  978.555038][ T8043] usb 5-1: Using ep0 maxpacket: 32
[  978.587099][ T8043] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  978.591138][ T8043] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  978.591186][ T8043] usb 5-1: config 0 has no interfaces?
[  978.609142][ T8043] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  978.609184][ T8043] usb 5-1: Product: syz
[  978.609240][ T8043] usb 5-1: Manufacturer: syz
[  978.609251][ T8043] usb 5-1: SerialNumber: syz
[  978.662442][ T8043] usb 5-1: config 0 descriptor??
[  980.198895][ T8043] usb 5-1: USB disconnect, device number 124
[  980.647948][T22960] netlink: 'syz.1.5110': attribute type 10 has an invalid length.
[  980.652309][T22960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5110'.
[  981.730863][T22971] netlink: 'syz.0.5113': attribute type 10 has an invalid length.
[  982.521899][T22988] tc_dump_action: action bad kind
[  984.363928][ T5743] Bluetooth: hci4: command 0x0419 tx timeout
[  984.372628][   T30] wiimote 0005:057E:0306.001F: unknown main item tag 0x0
[  984.372664][   T30] wiimote 0005:057E:0306.001F: unknown main item tag 0x0
[  984.376111][   T30] wiimote 0005:057E:0306.001F: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  984.376246][   T30] wiimote 0005:057E:0306.001F: New device registered
[  984.483677][ T5885] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  984.623800][ T8043] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  984.654426][ T5885] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  984.655356][ T5885] usb 6-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  984.655396][ T5885] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[  984.655414][ T5885] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  984.657253][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.657265][ T5885] usb 6-1: Product: syz
[  984.657272][ T5885] usb 6-1: Manufacturer: syz
[  984.657280][ T5885] usb 6-1: SerialNumber: syz
[  984.664586][T23005] input: syz1 as /devices/virtual/input/input141
[  984.773733][ T8043] usb 5-1: Using ep0 maxpacket: 8
[  984.774295][ T8043] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  984.777186][ T8043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.777202][ T8043] usb 5-1: Product: syz
[  984.777211][ T8043] usb 5-1: Manufacturer: syz
[  984.777220][ T8043] usb 5-1: SerialNumber: syz
[  984.979028][T22999] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  984.980089][ T5885] snd-usb-caiaq 6-1:1.0: invalid EPs
[  984.980109][ T5885] usb 6-1: unable to init card! (ret=-22)
[  984.980383][ T5885] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  985.068437][T23000] wiimote 0005:057E:0306.001F: Device removed
[  985.073520][ T8043] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  985.074970][ T8043] usb 5-1: MIDIStreaming interface descriptor not found
[  985.218054][ T5885] usb 6-1: USB disconnect, device number 5
[  985.266906][ T8043] usb 5-1: USB disconnect, device number 125
[  985.349623][T22332] udevd[22332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  985.404190][   T30] wiimote 0005:057E:0306.001F: detected device: Nintendo Wii Remote (Gen 1)
[  985.423535][   T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001F/input/input143
[  985.427895][   T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001F/input/input144
[  985.431739][   T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001F/input/input142
[  986.039115][T23019] netlink: 'syz.1.5125': attribute type 10 has an invalid length.
[  986.045502][T23019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5125'.
[  986.445275][   T66] Bluetooth: hci4: command 0x0419 tx timeout
[  988.533825][   T66] Bluetooth: hci4: command 0x0419 tx timeout
[  989.313662][ T8043] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  989.464407][ T8043] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  989.465286][ T8043] usb 7-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  989.465316][ T8043] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64
[  989.465330][ T8043] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  989.467677][ T8043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.467693][ T8043] usb 7-1: Product: syz
[  989.467701][ T8043] usb 7-1: Manufacturer: syz
[  989.467708][ T8043] usb 7-1: SerialNumber: syz
[  989.673370][T23054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  989.674197][ T8043] snd-usb-caiaq 7-1:1.0: invalid EPs
[  989.674208][ T8043] usb 7-1: unable to init card! (ret=-22)
[  989.676194][ T8043] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[  989.877935][ T8043] usb 7-1: USB disconnect, device number 2
[  990.469798][T23067] netlink: 'syz.1.5144': attribute type 10 has an invalid length.
[  990.473430][T23067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5144'.
[  990.955225][T20680] usb 9-1: new high-speed USB device number 106 using dummy_hcd
[  991.103901][T20680] usb 9-1: Using ep0 maxpacket: 32
[  991.106076][T20680] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  991.108054][T20680] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  991.108137][T20680] usb 9-1: config 0 has no interfaces?
[  991.111706][T20680] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  991.111750][T20680] usb 9-1: Product: syz
[  991.111759][T20680] usb 9-1: Manufacturer: syz
[  991.111824][T20680] usb 9-1: SerialNumber: syz
[  991.184714][T20680] usb 9-1: config 0 descriptor??
[  992.528998][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  992.529177][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  992.611013][ T5842] usb 9-1: USB disconnect, device number 106
[  994.595558][T23101] netlink: 'syz.4.5142': attribute type 10 has an invalid length.
[  994.599351][T23101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5142'.
[  996.043950][T22737] wiimote 0005:057E:0306.0020: unknown main item tag 0x0
[  996.043985][T22737] wiimote 0005:057E:0306.0020: unknown main item tag 0x0
[  996.061707][T22737] wiimote 0005:057E:0306.0020: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  996.061922][T22737] wiimote 0005:057E:0306.0020: New device registered
[  996.303695][   T10] usb 9-1: new high-speed USB device number 107 using dummy_hcd
[  996.453678][   T10] usb 9-1: Using ep0 maxpacket: 8
[  996.454431][   T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  996.459191][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.459211][   T10] usb 9-1: Product: syz
[  996.459222][   T10] usb 9-1: Manufacturer: syz
[  996.459234][   T10] usb 9-1: SerialNumber: syz
[  996.945578][T23114] wiimote 0005:057E:0306.0020: Device removed
[  996.958477][   T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  996.958526][   T10] usb 9-1: MIDIStreaming interface descriptor not found
[  997.045611][T23140] netlink: 'syz.2.5151': attribute type 10 has an invalid length.
[  997.072421][T23137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5151'.
[  997.084676][T22737] wiimote 0005:057E:0306.0020: detected device: Nintendo Wii Remote (Gen 1)
[  997.105905][   T10] usb 9-1: USB disconnect, device number 107
[  997.159370][T22737] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0020/input/input146
[  997.313972][T22737] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0020/input/input147
[  997.521135][T22737] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0020/input/input145
[  997.968141][T22334] udevd[22334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  998.444231][ T8111] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  998.636016][ T8111] usb 6-1: Using ep0 maxpacket: 32
[  998.682950][ T8111] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  998.688975][ T8111] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  998.689000][ T8111] usb 6-1: config 0 has no interfaces?
[  998.728042][ T8111] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  998.728119][ T8111] usb 6-1: Product: syz
[  998.728131][ T8111] usb 6-1: Manufacturer: syz
[  998.728144][ T8111] usb 6-1: SerialNumber: syz
[  998.811193][ T8111] usb 6-1: config 0 descriptor??
[ 1000.054539][   T25] usb 6-1: USB disconnect, device number 6
[ 1000.631479][T23169] futex_wake_op: syz.2.5157 tries to shift op by 144; fix this program
[ 1001.313745][   T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1001.630969][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1001.631002][   T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1001.632849][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1001.632882][   T10] usb 5-1: can't read configurations, error -71
[ 1002.414558][T21853] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1002.568091][T21853] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1002.571855][T21853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1002.572077][T21853] usb 6-1: config 0 has no interfaces?
[ 1002.591256][T21853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.591272][T21853] usb 6-1: Product: syz
[ 1002.591280][T21853] usb 6-1: Manufacturer: syz
[ 1002.591288][T21853] usb 6-1: SerialNumber: syz
[ 1002.631091][T21853] usb 6-1: config 0 descriptor??
[ 1002.863270][   T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1002.914997][T23188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1002.936858][T23188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.013800][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1003.014304][   T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1003.015861][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1003.015883][   T10] usb 5-1: config 0 has no interfaces?
[ 1003.018529][   T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1003.018551][   T10] usb 5-1: Product: syz
[ 1003.018563][   T10] usb 5-1: Manufacturer: syz
[ 1003.018576][   T10] usb 5-1: SerialNumber: syz
[ 1003.030552][   T10] usb 5-1: config 0 descriptor??
[ 1003.717940][T14111] usb 6-1: USB disconnect, device number 7
[ 1003.917647][ T5937] usb 5-1: USB disconnect, device number 127
[ 1004.691033][T23214] veth1_vlan: entered allmulticast mode
[ 1006.007992][T23233] netlink: 'syz.1.5170': attribute type 10 has an invalid length.
[ 1006.029115][T23233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5170'.
[ 1006.153813][ T5885] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1007.303788][ T5885] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1007.303818][ T5885] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1007.304462][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1007.304479][ T5885] usb 7-1: can't read configurations, error -71
[ 1007.873792][T23246] futex_wake_op: syz.0.5175 tries to shift op by 144; fix this program
[ 1008.060361][T14111] usb 9-1: new high-speed USB device number 108 using dummy_hcd
[ 1008.253763][T14111] usb 9-1: Using ep0 maxpacket: 32
[ 1008.256974][T14111] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1008.262097][T14111] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.320915][T14111] usb 9-1: config 0 descriptor??
[ 1008.493384][T14111] as10x_usb: device has been detected
[ 1008.501590][T14111] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1008.642479][T23250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5176'.
[ 1008.741157][T14111] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1008.883761][T14111] as10x_usb: error during firmware upload part1
[ 1008.885548][T14111] Registered device nBox DVB-T Dongle
[ 1008.908118][T14111] usb 9-1: USB disconnect, device number 108
[ 1009.109143][T14111] Unregistered device nBox DVB-T Dongle
[ 1009.111323][T14111] as10x_usb: device has been disconnected
[ 1009.129896][ T5937] wiimote 0005:057E:0306.0021: unknown main item tag 0x0
[ 1009.129933][ T5937] wiimote 0005:057E:0306.0021: unknown main item tag 0x0
[ 1009.130790][ T5937] wiimote 0005:057E:0306.0021: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[ 1009.130952][ T5937] wiimote 0005:057E:0306.0021: New device registered
[ 1009.393782][T21853] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1009.543957][T21853] usb 7-1: Using ep0 maxpacket: 8
[ 1009.544419][T21853] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[ 1009.547449][T21853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.547470][T21853] usb 7-1: Product: syz
[ 1009.547481][T21853] usb 7-1: Manufacturer: syz
[ 1009.547493][T21853] usb 7-1: SerialNumber: syz
[ 1009.644328][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1009.814459][ T5885] usb 5-1: Using ep0 maxpacket: 32
[ 1009.817659][ T5885] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1009.838077][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.838120][ T5885] usb 5-1: config 0 has no interfaces?
[ 1009.873505][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1009.878638][ T5885] usb 5-1: Product: syz
[ 1009.878905][ T5885] usb 5-1: Manufacturer: syz
[ 1009.878980][ T5885] usb 5-1: SerialNumber: syz
[ 1009.909019][ T5885] usb 5-1: config 0 descriptor??
[ 1009.976980][T23253] wiimote 0005:057E:0306.0021: Device removed
[ 1009.980235][T21853] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1009.980263][T21853] usb 7-1: MIDIStreaming interface descriptor not found
[ 1010.014253][T21853] usb 7-1: USB disconnect, device number 5
[ 1010.113287][T22607] udevd[22607]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1010.203717][ T5937] wiimote 0005:057E:0306.0021: detected device: Nintendo Wii Remote (Gen 1)
[ 1010.217649][ T5937] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0021/input/input149
[ 1010.225760][ T5937] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0021/input/input150
[ 1010.228297][ T5937] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0021/input/input148
[ 1010.771623][ T5885] usb 5-1: USB disconnect, device number 2
[ 1014.214274][ T5886] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1014.613883][   T50] usb 9-1: new high-speed USB device number 109 using dummy_hcd
[ 1014.773806][   T50] usb 9-1: Using ep0 maxpacket: 32
[ 1014.776307][   T50] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1014.781280][   T50] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.781514][   T50] usb 9-1: config 0 has no interfaces?
[ 1014.829794][   T50] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1014.830054][   T50] usb 9-1: Product: syz
[ 1014.830879][   T50] usb 9-1: Manufacturer: syz
[ 1014.830999][   T50] usb 9-1: SerialNumber: syz
[ 1014.950138][   T50] usb 9-1: config 0 descriptor??
[ 1016.433891][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1016.433921][ T5886] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1016.434554][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1016.434573][ T5886] usb 5-1: can't read configurations, error -71
[ 1016.435274][   T30] usb 9-1: USB disconnect, device number 109
[ 1016.764135][   T50] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1016.934646][   T50] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1016.935451][   T50] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1016.935464][   T50] usb 6-1: config 0 has no interfaces?
[ 1016.937009][   T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.937022][   T50] usb 6-1: Product: syz
[ 1016.937029][   T50] usb 6-1: Manufacturer: syz
[ 1016.937036][   T50] usb 6-1: SerialNumber: syz
[ 1016.938386][   T50] usb 6-1: config 0 descriptor??
[ 1017.148480][T23313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1017.154716][T23313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1017.419487][ T5886] usb 6-1: USB disconnect, device number 8
[ 1017.887273][T23333] futex_wake_op: syz.2.5193 tries to shift op by 144; fix this program
[ 1020.453701][ T5937] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1020.613739][ T5937] usb 6-1: Using ep0 maxpacket: 32
[ 1020.616152][ T5937] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1020.624205][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1020.624336][ T5937] usb 6-1: config 0 has no interfaces?
[ 1020.715627][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1020.715645][ T5937] usb 6-1: Product: syz
[ 1020.715652][ T5937] usb 6-1: Manufacturer: syz
[ 1020.715660][ T5937] usb 6-1: SerialNumber: syz
[ 1020.761261][ T5937] usb 6-1: config 0 descriptor??
[ 1021.041748][   T30] wiimote 0005:057E:0306.0022: unknown main item tag 0x0
[ 1021.041785][   T30] wiimote 0005:057E:0306.0022: unknown main item tag 0x0
[ 1021.053856][   T30] wiimote 0005:057E:0306.0022: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[ 1021.054000][   T30] wiimote 0005:057E:0306.0022: New device registered
[ 1021.244143][ T5886] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1021.400222][ T5886] usb 7-1: Using ep0 maxpacket: 8
[ 1021.401127][ T5886] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[ 1021.413311][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.413333][ T5886] usb 7-1: Product: syz
[ 1021.413347][ T5886] usb 7-1: Manufacturer: syz
[ 1021.413359][ T5886] usb 7-1: SerialNumber: syz
[ 1022.077277][T23346] wiimote 0005:057E:0306.0022: Device removed
[ 1022.085623][ T5886] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1022.085667][ T5886] usb 7-1: MIDIStreaming interface descriptor not found
[ 1022.204874][   T30] wiimote 0005:057E:0306.0022: detected device: Nintendo Wii Remote (Gen 1)
[ 1022.241866][T21853] usb 6-1: USB disconnect, device number 9
[ 1022.421846][ T5886] usb 7-1: USB disconnect, device number 6
[ 1022.442159][   T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0022/input/input152
[ 1022.454848][   T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0022/input/input153
[ 1022.461495][   T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0022/input/input151
[ 1022.619638][T23158] udevd[23158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1024.056824][T23390] netlink: 'syz.0.5205': attribute type 10 has an invalid length.
[ 1024.058479][T23390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5205'.
[ 1025.620582][T23405] netlink: 'syz.0.5208': attribute type 10 has an invalid length.
[ 1025.621170][T23405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5208'.
[ 1025.623789][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1025.783718][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1025.786645][   T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1025.802727][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.803457][   T10] usb 6-1: config 0 has no interfaces?
[ 1025.819438][   T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1025.820406][   T10] usb 6-1: Product: syz
[ 1025.820439][   T10] usb 6-1: Manufacturer: syz
[ 1025.821092][   T10] usb 6-1: SerialNumber: syz
[ 1025.872701][   T10] usb 6-1: config 0 descriptor??
[ 1026.853826][   T10] usb 6-1: USB disconnect, device number 10
[ 1030.342893][T23448] netlink: 'syz.1.5219': attribute type 10 has an invalid length.
[ 1030.355017][T23448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5219'.
[ 1034.072853][T23484] input: syz1 as /devices/virtual/input/input154
[ 1036.893917][ T5937] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1037.053753][ T5937] usb 7-1: Using ep0 maxpacket: 32
[ 1037.055321][ T5937] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1037.115426][   T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1037.274484][   T50] usb 5-1: Using ep0 maxpacket: 32
[ 1037.277507][   T50] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1037.281252][   T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1037.281272][   T50] usb 5-1: config 0 has no interfaces?
[ 1037.294402][   T50] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1037.294458][   T50] usb 5-1: Product: syz
[ 1037.294501][   T50] usb 5-1: Manufacturer: syz
[ 1037.294545][   T50] usb 5-1: SerialNumber: syz
[ 1037.379132][   T50] usb 5-1: config 0 descriptor??
[ 1038.037501][ T5937] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1038.057786][ T5937] usb 7-1: config 0 has no interfaces?
[ 1038.390209][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1038.390360][ T5937] usb 7-1: Product: syz
[ 1038.390434][ T5937] usb 7-1: Manufacturer: syz
[ 1038.390471][ T5937] usb 7-1: SerialNumber: syz
[ 1038.428134][ T5937] usb 7-1: config 0 descriptor??
[ 1038.714076][ T5937] usb 7-1: USB disconnect, device number 7
[ 1038.934613][  T970] usb 5-1: USB disconnect, device number 5
[ 1039.203972][ T5842] usb 9-1: new high-speed USB device number 110 using dummy_hcd
[ 1039.333862][ T5842] usb 9-1: device descriptor read/64, error -71
[ 1039.593985][ T5842] usb 9-1: new high-speed USB device number 111 using dummy_hcd
[ 1039.736181][ T5842] usb 9-1: device descriptor read/64, error -71
[ 1039.853999][ T5842] usb usb9-port1: attempt power cycle
[ 1040.214266][ T5842] usb 9-1: new high-speed USB device number 112 using dummy_hcd
[ 1040.234756][ T5842] usb 9-1: device descriptor read/8, error -71
[ 1040.493815][ T5842] usb 9-1: new high-speed USB device number 113 using dummy_hcd
[ 1040.515073][ T5842] usb 9-1: device descriptor read/8, error -71
[ 1040.638941][ T5842] usb usb9-port1: unable to enumerate USB device
[ 1041.935626][T23548] input: syz1 as /devices/virtual/input/input155
[ 1043.253949][   T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1043.404000][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 1043.416146][   T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1043.419188][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.419554][   T10] usb 7-1: config 0 has no interfaces?
[ 1043.436839][   T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1043.436861][   T10] usb 7-1: Product: syz
[ 1043.436869][   T10] usb 7-1: Manufacturer: syz
[ 1043.437210][   T10] usb 7-1: SerialNumber: syz
[ 1043.488014][   T10] usb 7-1: config 0 descriptor??
[ 1043.732014][   T10] usb 7-1: USB disconnect, device number 8
[ 1047.783784][ T5842] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1047.943749][ T5842] usb 5-1: Using ep0 maxpacket: 32
[ 1047.944498][ T5842] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1047.945416][ T5842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1047.945436][ T5842] usb 5-1: config 0 has no interfaces?
[ 1047.947251][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1047.947271][ T5842] usb 5-1: Product: syz
[ 1047.947285][ T5842] usb 5-1: Manufacturer: syz
[ 1047.947299][ T5842] usb 5-1: SerialNumber: syz
[ 1047.964119][ T5842] usb 5-1: config 0 descriptor??
[ 1048.283305][ T5842] usb 5-1: USB disconnect, device number 6
[ 1048.999100][T23600] futex_wake_op: syz.0.5247 tries to shift op by 144; fix this program
[ 1049.423830][T23604] input: syz1 as /devices/virtual/input/input156
[ 1050.096515][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1050.097455][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1050.100460][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1050.101278][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1050.101660][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1052.214409][   T66] Bluetooth: hci0: command tx timeout
[ 1053.040188][T23625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5252'.
[ 1053.040204][T23625] tc_dump_action: action bad kind
[ 1053.869322][T23608] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.869368][T23608] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.869427][T23608] bridge_slave_0: entered allmulticast mode
[ 1053.870182][T23608] bridge_slave_0: entered promiscuous mode
[ 1053.890589][T23608] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.890737][T23608] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.890896][T23608] bridge_slave_1: entered allmulticast mode
[ 1053.892303][T23608] bridge_slave_1: entered promiscuous mode
[ 1053.924749][T23608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1053.927942][T23608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1053.948171][T23608] team0: Port device team_slave_0 added
[ 1053.949453][T23608] team0: Port device team_slave_1 added
[ 1053.966497][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.966533][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[ 1053.968632][T23608] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1053.968644][T23608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1053.968657][T23608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1053.969598][T23608] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1053.969607][T23608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1053.969620][T23608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1054.005871][T23608] hsr_slave_0: entered promiscuous mode
[ 1054.006659][T23608] hsr_slave_1: entered promiscuous mode
[ 1054.007359][T23608] debugfs: 'hsr0' already exists in 'hsr'
[ 1054.007378][T23608] Cannot create hsr debugfs directory
[ 1054.075955][T23644] futex_wake_op: syz.0.5255 tries to shift op by 144; fix this program
[ 1054.283844][   T66] Bluetooth: hci0: command tx timeout
[ 1054.753959][T20680] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1054.908123][T20680] usb 7-1: Using ep0 maxpacket: 32
[ 1054.912684][T20680] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1054.931097][T20680] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.931174][T20680] usb 7-1: config 0 has no interfaces?
[ 1054.961570][T20680] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1054.961658][T20680] usb 7-1: Product: syz
[ 1054.961675][T20680] usb 7-1: Manufacturer: syz
[ 1054.961727][T20680] usb 7-1: SerialNumber: syz
[ 1055.077776][T20680] usb 7-1: config 0 descriptor??
[ 1055.507996][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1055.515631][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1055.528566][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1055.544302][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1055.548474][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1056.366696][ T5743] Bluetooth: hci0: command tx timeout
[ 1056.434094][ T5885] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1056.593854][ T5885] usb 5-1: Using ep0 maxpacket: 32
[ 1056.596582][ T5885] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1056.603191][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.603215][ T5885] usb 5-1: config 0 has no interfaces?
[ 1056.633051][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1056.633261][ T5885] usb 5-1: Product: syz
[ 1056.633273][ T5885] usb 5-1: Manufacturer: syz
[ 1056.633283][ T5885] usb 5-1: SerialNumber: syz
[ 1056.733890][T23608] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1056.885022][ T5885] usb 5-1: config 0 descriptor??
[ 1057.125910][T23608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1057.141553][T23608] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1057.171520][T20680] usb 7-1: USB disconnect, device number 9
[ 1057.194102][T23608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1057.194846][T23608] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1057.226730][T23608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1057.227495][T23608] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1057.269491][T23608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1057.402288][T23608] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1057.414451][T23608] 8021q: adding VLAN 0 to HW filter on device team0
[ 1057.417894][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1057.417943][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1057.423249][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1057.423306][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1057.655102][ T5743] Bluetooth: hci2: command tx timeout
[ 1058.445384][   T66] Bluetooth: hci0: command tx timeout
[ 1058.695239][   T10] usb 5-1: USB disconnect, device number 7
[ 1058.768579][T23608] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1058.859551][T23653] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1058.859668][T23653] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.859818][T23653] bridge_slave_0: entered allmulticast mode
[ 1058.861810][T23653] bridge_slave_0: entered promiscuous mode
[ 1058.865607][T23653] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.865766][T23653] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1058.865913][T23653] bridge_slave_1: entered allmulticast mode
[ 1058.867723][T23653] bridge_slave_1: entered promiscuous mode
[ 1058.895173][T23653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1058.899090][T23653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1058.923097][T23653] team0: Port device team_slave_0 added
[ 1058.931161][T23653] team0: Port device team_slave_1 added
[ 1058.973282][T23653] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1058.973313][T23653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1058.973337][T23653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1058.976267][T23653] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1058.976288][T23653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1058.976319][T23653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1059.019573][T23653] hsr_slave_0: entered promiscuous mode
[ 1059.020379][T23653] hsr_slave_1: entered promiscuous mode
[ 1059.020919][T23653] debugfs: 'hsr0' already exists in 'hsr'
[ 1059.020938][T23653] Cannot create hsr debugfs directory
[ 1059.484849][T23608] veth0_vlan: entered promiscuous mode
[ 1059.521412][T23608] veth1_vlan: entered promiscuous mode
[ 1059.560057][T23653] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1059.599377][T23653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1059.600135][T23653] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1059.638143][T23653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1059.651820][T23653] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1059.675634][T23653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1059.676116][T23653] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1059.719198][T23653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1059.724126][ T5743] Bluetooth: hci2: command tx timeout
[ 1059.762433][T23608] veth0_macvtap: entered promiscuous mode
[ 1059.845413][T23608] veth1_macvtap: entered promiscuous mode
[ 1060.050306][T23608] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1060.120760][T23608] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1060.449412][ T5814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.450108][ T5814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.450326][ T5814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.450415][ T5814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.650418][T23653] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1060.652974][T19615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1060.652992][T19615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1060.714886][T23653] 8021q: adding VLAN 0 to HW filter on device team0
[ 1060.731244][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.731322][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.768530][T19615] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.768635][T19615] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.936432][T19615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1060.936473][T19615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1061.444310][T23733] netlink: 'syz.2.5262': attribute type 10 has an invalid length.
[ 1061.471837][T23733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5262'.
[ 1061.831458][ T5743] Bluetooth: hci2: command tx timeout
[ 1063.894312][ T5743] Bluetooth: hci2: command tx timeout
[ 1064.058126][T23653] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1064.183992][ T5885] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1064.344210][ T5885] usb 10-1: Using ep0 maxpacket: 32
[ 1064.347109][ T5885] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1064.359204][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.360733][ T5885] usb 10-1: config 0 descriptor??
[ 1064.971803][ T5885] as10x_usb: device has been detected
[ 1064.985716][ T5885] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1065.403758][T21853] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1065.554197][T21853] usb 7-1: Using ep0 maxpacket: 32
[ 1065.555187][T21853] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1065.556522][T21853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.556536][T21853] usb 7-1: config 0 has no interfaces?
[ 1065.560440][T21853] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1065.560455][T21853] usb 7-1: Product: syz
[ 1065.560463][T21853] usb 7-1: Manufacturer: syz
[ 1065.560557][T21853] usb 7-1: SerialNumber: syz
[ 1065.587886][T21853] usb 7-1: config 0 descriptor??
[ 1065.617133][ T5885] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1065.786145][ T5885] as10x_usb: error during firmware upload part1
[ 1065.804845][ T5885] Registered device nBox DVB-T Dongle
[ 1065.969161][ T5885] usb 10-1: USB disconnect, device number 2
[ 1066.492917][ T5885] Unregistered device nBox DVB-T Dongle
[ 1066.493948][ T5885] as10x_usb: device has been disconnected
[ 1066.995202][   T76] usb 7-1: USB disconnect, device number 10
[ 1067.405772][T23653] veth0_vlan: entered promiscuous mode
[ 1067.421906][T23653] veth1_vlan: entered promiscuous mode
[ 1067.469598][T23653] veth0_macvtap: entered promiscuous mode
[ 1067.473458][T23653] veth1_macvtap: entered promiscuous mode
[ 1067.487420][T23653] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1067.498635][T23653] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1067.636774][T11535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.636803][T11535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.636821][T11535] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.636839][T11535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.943536][T19615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1067.943711][T19615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1068.026775][T19610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1068.026825][T19610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1068.072289][T23772] futex_wake_op: syz.2.5267 tries to shift op by 144; fix this program
[ 1069.760716][T23795] netlink: 'syz.2.5270': attribute type 10 has an invalid length.
[ 1069.784533][T23795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5270'.
[ 1070.298153][T14111] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1071.003639][T20680] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[ 1071.054548][T14111] usb 5-1: Using ep0 maxpacket: 32
[ 1071.267622][T14111] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1071.378324][T14111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1071.378341][T14111] usb 5-1: config 0 has no interfaces?
[ 1071.403830][T14111] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1071.403949][T14111] usb 5-1: Product: syz
[ 1071.403959][T14111] usb 5-1: Manufacturer: syz
[ 1071.403968][T14111] usb 5-1: SerialNumber: syz
[ 1071.437910][T14111] usb 5-1: config 0 descriptor??
[ 1071.473680][T20680] usb 11-1: Using ep0 maxpacket: 32
[ 1071.569830][T14111] usb 5-1: can't set config #0, error -71
[ 1071.574280][T14111] usb 5-1: USB disconnect, device number 8
[ 1071.603094][T20680] usb 11-1: device descriptor read/all, error -71
[ 1071.922316][T23803] netlink: 'syz.0.5271': attribute type 10 has an invalid length.
[ 1071.937902][T23803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5271'.
[ 1072.019926][T23805] team0: Device ipip0 is up. Set it down before adding it as a team port
[ 1077.892975][T23844] netlink: 'syz.2.5277': attribute type 10 has an invalid length.
[ 1078.227194][T23844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5277'.
[ 1081.237866][T23861] netlink: 'syz.2.5284': attribute type 10 has an invalid length.
[ 1081.257067][T23861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5284'.
[ 1082.862177][   T76] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1083.145788][T23886] netlink: 'syz.2.5286': attribute type 10 has an invalid length.
[ 1083.467076][T23886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5286'.
[ 1083.773676][   T76] usb 5-1: Using ep0 maxpacket: 32
[ 1083.883677][   T50] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1083.976371][   T76] usb 5-1: device descriptor read/all, error -71
[ 1084.164727][T23893] netlink: 'syz.6.5285': attribute type 10 has an invalid length.
[ 1084.320180][T23893] team0 (unregistering): Port device team_slave_0 removed
[ 1084.348570][T23894] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5285'.
[ 1084.505263][T23893] team0 (unregistering): Port device team_slave_1 removed
[ 1084.808610][T23902] futex_wake_op: syz.5.5288 tries to shift op by 144; fix this program
[ 1086.634067][   T76] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1086.879393][   T76] usb 7-1: Using ep0 maxpacket: 32
[ 1086.891269][   T76] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1086.910961][   T76] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1086.911091][   T76] usb 7-1: config 0 has no interfaces?
[ 1086.971087][   T76] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1086.971108][   T76] usb 7-1: Product: syz
[ 1086.971207][   T76] usb 7-1: Manufacturer: syz
[ 1086.971244][   T76] usb 7-1: SerialNumber: syz
[ 1087.293015][   T76] usb 7-1: config 0 descriptor??
[ 1087.602374][T23893] syz.6.5285 (23893) used greatest stack depth: 17568 bytes left
[ 1088.832936][   T30] usb 7-1: USB disconnect, device number 11
[ 1089.219582][T23813] ------------[ cut here ]------------
[ 1089.219599][T23813] current->flags & PF_MEMALLOC
[ 1089.219608][T23813] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#1: syz.6.5272/23813
[ 1089.230841][T23813] Modules linked in:
[ 1089.232654][T23813] CPU: 1 UID: 0 PID: 23813 Comm: syz.6.5272 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1089.238032][T23813] Tainted: [L]=SOFTLOCKUP
[ 1089.239513][T23813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1089.243747][T23813] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1089.246448][T23813] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03
[ 1089.253057][T23813] RSP: 0000:ffffc90004665838 EFLAGS: 00010202
[ 1089.255289][T23813] RAX: ffff888014254b00 RBX: 0000000000000000 RCX: 1ffff1100fffad29
[ 1089.258253][T23813] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938
[ 1089.261456][T23813] RBP: ffff888014254b2c R08: 0000000000008000 R09: 0000000000000001
[ 1089.264736][T23813] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40
[ 1089.267582][T23813] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920008ccb21
[ 1089.270419][T23813] FS:  0000000000000000(0000) GS:ffff888096a60000(0063) knlGS:00000000f53b5b40
[ 1089.273445][T23813] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1089.275916][T23813] CR2: 00000000f7058a94 CR3: 000000005fa26000 CR4: 0000000000352ef0
[ 1089.279413][T23813] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1089.282668][T23813] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1089.285345][T23813] Call Trace:
[ 1089.286436][T23813]  <TASK>
[ 1089.287451][T23813]  ? __lock_acquire+0x561/0x1f40
[ 1089.289144][T23813]  ? unwind_next_frame+0xbd/0x2090
[ 1089.290932][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.292567][T23813]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1089.294887][T23813]  ? do_raw_spin_lock+0x128/0x260
[ 1089.296910][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.298800][T23813]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1089.301107][T23813]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1089.303417][T23813]  ? rcu_is_watching+0x13/0xc0
[ 1089.305357][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.307123][T23813]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1089.309071][T23813]  ? policy_nodemask+0xed/0x4f0
[ 1089.310739][T23813]  alloc_pages_mpol+0x201/0x550
[ 1089.312610][T23813]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1089.314539][T23813]  ? filemap_get_entry+0x22d/0x450
[ 1089.316901][T23813]  ? filemap_get_entry+0x22d/0x450
[ 1089.318712][T23813]  folio_alloc_noprof+0x22/0x250
[ 1089.320306][T23813]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[ 1089.322330][T23813]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[ 1089.324723][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.326611][T23813]  ? ext4_get_group_info+0x146/0x480
[ 1089.328750][T23813]  ? find_held_lock+0x2b/0x80
[ 1089.330851][T23813]  __filemap_get_folio_mpol+0x653/0x1320
[ 1089.332838][T23813]  ext4_mb_load_buddy_gfp+0x70d/0x1b20
[ 1089.334581][T23813]  ext4_discard_preallocations+0x584/0x10c0
[ 1089.336781][T23813]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[ 1089.339059][T23813]  ? __pfx_xa_destroy+0x10/0x10
[ 1089.340610][T23813]  ? inode_wait_for_writeback+0x171/0x390
[ 1089.342489][T23813]  ? inode_lru_isolate+0x37/0xf00
[ 1089.344205][T23813]  ext4_clear_inode+0x6e/0x280
[ 1089.345764][T23813]  ext4_evict_inode+0x1de/0x17d0
[ 1089.347682][T23813]  ? evict+0x37e/0xad0
[ 1089.349131][T23813]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1089.350985][T23813]  evict+0x3c2/0xad0
[ 1089.352322][T23813]  ? _raw_spin_unlock+0x28/0x50
[ 1089.354288][T23813]  ? __list_lru_walk_one+0x26d/0x550
[ 1089.356139][T23813]  ? __pfx_evict+0x10/0x10
[ 1089.357698][T23813]  ? xa_load+0x149/0x2c0
[ 1089.359152][T23813]  ? xa_load+0x149/0x2c0
[ 1089.360701][T23813]  dispose_list+0x117/0x1e0
[ 1089.362164][T23813]  prune_icache_sb+0xea/0x150
[ 1089.364104][T23813]  ? list_lru_count_one+0x147/0x320
[ 1089.365747][T23813]  ? __pfx_prune_icache_sb+0x10/0x10
[ 1089.367594][T23813]  super_cache_scan+0x3ac/0x5c0
[ 1089.369401][T23813]  do_shrink_slab+0x416/0x1200
[ 1089.370939][T23813]  shrink_slab+0xa82/0x12e0
[ 1089.372395][T23813]  ? shrink_slab+0x677/0x12e0
[ 1089.373953][T23813]  ? __pfx_shrink_slab+0x10/0x10
[ 1089.375518][T23813]  ? __pfx_get_random_u8+0x10/0x10
[ 1089.377348][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.378972][T23813]  shrink_one+0x398/0x850
[ 1089.380397][T23813]  ? shrink_node+0x2b00/0x4320
[ 1089.381961][T23813]  shrink_node+0x2b20/0x4320
[ 1089.383415][T23813]  ? __queue_work+0x4d6/0x1370
[ 1089.385039][T23813]  ? shrink_node+0x286e/0x4320
[ 1089.386591][T23813]  ? __pfx_shrink_node+0x10/0x10
[ 1089.388255][T23813]  ? queue_work_on+0x141/0x1e0
[ 1089.389873][T23813]  ? do_try_to_free_pages+0x33e/0x16d0
[ 1089.391662][T23813]  do_try_to_free_pages+0x33e/0x16d0
[ 1089.393345][T23813]  ? __pfx_do_try_to_free_pages+0x10/0x10
[ 1089.395239][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.396924][T23813]  try_to_free_pages+0x2a0/0x740
[ 1089.398667][T23813]  ? __pfx_try_to_free_pages+0x10/0x10
[ 1089.400780][T23813]  ? find_held_lock+0x2b/0x80
[ 1089.402536][T23813]  ? fs_reclaim_acquire+0x70/0x100
[ 1089.405020][T23813]  ? fs_reclaim_acquire+0x70/0x100
[ 1089.407334][T23813]  __alloc_frozen_pages_noprof+0xf8a/0x3300
[ 1089.409524][T23813]  ? find_held_lock+0x2b/0x80
[ 1089.411079][T23813]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[ 1089.413037][T23813]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1089.415124][T23813]  ? mark_held_locks+0x40/0x70
[ 1089.416903][T23813]  ? finish_task_switch.isra.0+0x3b3/0x10d0
[ 1089.418776][T23813]  ? rcu_is_watching+0x13/0xc0
[ 1089.420406][T23813]  ? trace_sched_exit_tp+0x120/0x160
[ 1089.422041][T23813]  ? __schedule+0x126b/0x6920
[ 1089.423750][T23813]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1089.425762][T23813]  ? policy_nodemask+0xed/0x4f0
[ 1089.427350][T23813]  alloc_pages_mpol+0x201/0x550
[ 1089.429135][T23813]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1089.431308][T23813]  folio_alloc_mpol_noprof+0x36/0x260
[ 1089.433399][T23813]  shmem_alloc_folio+0x135/0x160
[ 1089.435114][T23813]  shmem_alloc_and_add_folio+0x371/0xd40
[ 1089.436911][T23813]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1089.438912][T23813]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 1089.440813][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.442383][T23813]  shmem_get_folio_gfp+0x75b/0x1980
[ 1089.444032][T23813]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1089.445930][T23813]  ? inode_set_ctime_current+0x9c/0x850
[ 1089.447804][T23813]  ? find_held_lock+0x2b/0x80
[ 1089.449649][T23813]  ? timestamp_truncate+0x22e/0x2f0
[ 1089.451922][T23813]  shmem_write_begin+0x1a4/0x420
[ 1089.454027][T23813]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1089.456325][T23813]  ? inode_set_ctime_current+0x283/0x850
[ 1089.458188][T23813]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[ 1089.460483][T23813]  ? inode_maybe_inc_iversion+0x169/0x220
[ 1089.462440][T23813]  generic_perform_write+0x292/0xa40
[ 1089.464669][T23813]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1089.466834][T23813]  ? __pfx_generic_perform_write+0x10/0x10
[ 1089.469129][T23813]  ? mnt_put_write_access_file+0x4e/0x100
[ 1089.471387][T23813]  ? file_update_time_flags+0x38c/0x520
[ 1089.473420][T23813]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1089.475391][T23813]  shmem_file_write_iter+0x10e/0x140
[ 1089.477053][T23813]  __kernel_write_iter+0x2ac/0x930
[ 1089.479022][T23813]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1089.481022][T23813]  ? __up_read+0x333/0x980
[ 1089.482634][T23813]  ? dump_user_range+0x65e/0xad0
[ 1089.484482][T23813]  dump_user_range+0x3f9/0xad0
[ 1089.486032][T23813]  ? __pfx_dump_user_range+0x10/0x10
[ 1089.487741][T23813]  ? __pfx_writenote+0x10/0x10
[ 1089.489428][T23813]  ? elf_core_dump+0x2276/0x42f0
[ 1089.491113][T23813]  elf_core_dump+0x31f8/0x42f0
[ 1089.492773][T23813]  ? __pfx_elf_core_dump+0x10/0x10
[ 1089.494634][T23813]  ? __kasan_kmalloc+0xaa/0xb0
[ 1089.496309][T23813]  ? __kvmalloc_node_noprof+0x35b/0x9b0
[ 1089.498243][T23813]  ? vfs_coredump+0x21f6/0x54a0
[ 1089.499904][T23813]  ? get_signal+0x1f2a/0x21e0
[ 1089.501418][T23813]  ? arch_do_signal_or_restart+0x91/0x7a0
[ 1089.503243][T23813]  ? asm_exc_page_fault+0x26/0x30
[ 1089.504966][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.506568][T23813]  ? get_signal+0x1f2a/0x21e0
[ 1089.508081][T23813]  ? vfs_coredump+0x281a/0x54a0
[ 1089.509660][T23813]  vfs_coredump+0x281a/0x54a0
[ 1089.511234][T23813]  ? __pfx_vfs_coredump+0x10/0x10
[ 1089.512934][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.514754][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.516577][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.518357][T23813]  ? unwind_next_frame+0xbd/0x2090
[ 1089.520073][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.521571][T23813]  ? bpf_ksym_find+0x124/0x1c0
[ 1089.523087][T23813]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1089.525083][T23813]  ? arch_stack_walk+0xa6/0xf0
[ 1089.526675][T23813]  ? __sigqueue_free+0xbe/0x2a0
[ 1089.528259][T23813]  ? stack_trace_save+0x8e/0xc0
[ 1089.529865][T23813]  ? __pfx_stack_trace_save+0x10/0x10
[ 1089.531657][T23813]  ? stack_depot_save_flags+0x27/0x9f0
[ 1089.533708][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.535646][T23813]  ? proc_coredump_connector+0x2d3/0x4f0
[ 1089.537639][T23813]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1089.539627][T23813]  ? rcu_is_watching+0x13/0xc0
[ 1089.541195][T23813]  get_signal+0x1f2a/0x21e0
[ 1089.542702][T23813]  ? __pfx_get_signal+0x10/0x10
[ 1089.544358][T23813]  ? __pfx_force_sig_fault+0x10/0x10
[ 1089.546086][T23813]  arch_do_signal_or_restart+0x91/0x7a0
[ 1089.547946][T23813]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1089.550007][T23813]  irqentry_exit+0x402/0xa10
[ 1089.551577][T23813]  asm_exc_page_fault+0x26/0x30
[ 1089.553201][T23813] RIP: 0023:0xf7f14fec
[ 1089.554617][T23813] Code: Unable to access opcode bytes at 0xf7f14fc2.
[ 1089.556733][T23813] RSP: 002b:00000000fffffc70 EFLAGS: 00010202
[ 1089.558916][T23813] RAX: 0000000000000000 RBX: 0000000001022000 RCX: 00000000fffffc70
[ 1089.561378][T23813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1089.564015][T23813] RBP: 00000000f53b55ec R08: 0000000000000000 R09: 0000000000000000
[ 1089.566693][T23813] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1089.569474][T23813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1089.572218][T23813]  </TASK>
[ 1089.573287][T23813] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1089.575587][T23813] CPU: 1 UID: 0 PID: 23813 Comm: syz.6.5272 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1089.578972][T23813] Tainted: [L]=SOFTLOCKUP
[ 1089.580335][T23813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1089.583444][T23813] Call Trace:
[ 1089.584498][T23813]  <TASK>
[ 1089.585437][T23813]  dump_stack_lvl+0x100/0x190
[ 1089.586933][T23813]  vpanic+0x553/0x970
[ 1089.588237][T23813]  ? __pfx_vpanic+0x10/0x10
[ 1089.589700][T23813]  panic+0xd1/0xe0
[ 1089.590914][T23813]  ? __pfx_panic+0x10/0x10
[ 1089.592364][T23813]  check_panic_on_warn.cold+0x19/0x34
[ 1089.594105][T23813]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1089.595930][T23813]  __warn.cold+0x191/0x318
[ 1089.597354][T23813]  __report_bug+0x30f/0x440
[ 1089.598804][T23813]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1089.600715][T23813]  ? __pfx___report_bug+0x10/0x10
[ 1089.602304][T23813]  ? __zone_watermark_ok+0x281/0x500
[ 1089.603972][T23813]  ? get_page_from_freelist+0x344/0x35d0
[ 1089.605726][T23813]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1089.607875][T23813]  report_bug+0xb3/0x220
[ 1089.609262][T23813]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1089.611246][T23813]  handle_bug+0x16a/0x2a0
[ 1089.612610][T23813]  exc_invalid_op+0x17/0x50
[ 1089.614049][T23813]  asm_exc_invalid_op+0x1a/0x20
[ 1089.615603][T23813] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1089.617733][T23813] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03
[ 1089.623648][T23813] RSP: 0000:ffffc90004665838 EFLAGS: 00010202
[ 1089.625540][T23813] RAX: ffff888014254b00 RBX: 0000000000000000 RCX: 1ffff1100fffad29
[ 1089.628190][T23813] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938
[ 1089.630694][T23813] RBP: ffff888014254b2c R08: 0000000000008000 R09: 0000000000000001
[ 1089.633273][T23813] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40
[ 1089.635964][T23813] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920008ccb21
[ 1089.638527][T23813]  ? __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 1089.640429][T23813]  ? __lock_acquire+0x561/0x1f40
[ 1089.642005][T23813]  ? unwind_next_frame+0xbd/0x2090
[ 1089.643608][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.645084][T23813]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1089.647128][T23813]  ? do_raw_spin_lock+0x128/0x260
[ 1089.648769][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.650548][T23813]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1089.652436][T23813]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1089.654758][T23813]  ? rcu_is_watching+0x13/0xc0
[ 1089.656612][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.658237][T23813]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1089.660233][T23813]  ? policy_nodemask+0xed/0x4f0
[ 1089.661792][T23813]  alloc_pages_mpol+0x201/0x550
[ 1089.663351][T23813]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1089.665049][T23813]  ? filemap_get_entry+0x22d/0x450
[ 1089.666666][T23813]  ? filemap_get_entry+0x22d/0x450
[ 1089.668327][T23813]  folio_alloc_noprof+0x22/0x250
[ 1089.669957][T23813]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[ 1089.671957][T23813]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[ 1089.674281][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.675776][T23813]  ? ext4_get_group_info+0x146/0x480
[ 1089.677466][T23813]  ? find_held_lock+0x2b/0x80
[ 1089.678959][T23813]  __filemap_get_folio_mpol+0x653/0x1320
[ 1089.680816][T23813]  ext4_mb_load_buddy_gfp+0x70d/0x1b20
[ 1089.682543][T23813]  ext4_discard_preallocations+0x584/0x10c0
[ 1089.684383][T23813]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[ 1089.686419][T23813]  ? __pfx_xa_destroy+0x10/0x10
[ 1089.687976][T23813]  ? inode_wait_for_writeback+0x171/0x390
[ 1089.689765][T23813]  ? inode_lru_isolate+0x37/0xf00
[ 1089.691360][T23813]  ext4_clear_inode+0x6e/0x280
[ 1089.692870][T23813]  ext4_evict_inode+0x1de/0x17d0
[ 1089.694364][T23813]  ? evict+0x37e/0xad0
[ 1089.695676][T23813]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1089.697403][T23813]  evict+0x3c2/0xad0
[ 1089.698654][T23813]  ? _raw_spin_unlock+0x28/0x50
[ 1089.700192][T23813]  ? __list_lru_walk_one+0x26d/0x550
[ 1089.701819][T23813]  ? __pfx_evict+0x10/0x10
[ 1089.703156][T23813]  ? xa_load+0x149/0x2c0
[ 1089.704503][T23813]  ? xa_load+0x149/0x2c0
[ 1089.705893][T23813]  dispose_list+0x117/0x1e0
[ 1089.707352][T23813]  prune_icache_sb+0xea/0x150
[ 1089.708843][T23813]  ? list_lru_count_one+0x147/0x320
[ 1089.710496][T23813]  ? __pfx_prune_icache_sb+0x10/0x10
[ 1089.712151][T23813]  super_cache_scan+0x3ac/0x5c0
[ 1089.713685][T23813]  do_shrink_slab+0x416/0x1200
[ 1089.715233][T23813]  shrink_slab+0xa82/0x12e0
[ 1089.716682][T23813]  ? shrink_slab+0x677/0x12e0
[ 1089.718381][T23813]  ? __pfx_shrink_slab+0x10/0x10
[ 1089.719962][T23813]  ? __pfx_get_random_u8+0x10/0x10
[ 1089.721569][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.723056][T23813]  shrink_one+0x398/0x850
[ 1089.724422][T23813]  ? shrink_node+0x2b00/0x4320
[ 1089.725915][T23813]  shrink_node+0x2b20/0x4320
[ 1089.727408][T23813]  ? __queue_work+0x4d6/0x1370
[ 1089.728914][T23813]  ? shrink_node+0x286e/0x4320
[ 1089.730490][T23813]  ? __pfx_shrink_node+0x10/0x10
[ 1089.732070][T23813]  ? queue_work_on+0x141/0x1e0
[ 1089.733582][T23813]  ? do_try_to_free_pages+0x33e/0x16d0
[ 1089.735332][T23813]  do_try_to_free_pages+0x33e/0x16d0
[ 1089.737040][T23813]  ? __pfx_do_try_to_free_pages+0x10/0x10
[ 1089.738834][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.740406][T23813]  try_to_free_pages+0x2a0/0x740
[ 1089.741976][T23813]  ? __pfx_try_to_free_pages+0x10/0x10
[ 1089.743712][T23813]  ? find_held_lock+0x2b/0x80
[ 1089.745231][T23813]  ? fs_reclaim_acquire+0x70/0x100
[ 1089.746864][T23813]  ? fs_reclaim_acquire+0x70/0x100
[ 1089.748506][T23813]  __alloc_frozen_pages_noprof+0xf8a/0x3300
[ 1089.750389][T23813]  ? find_held_lock+0x2b/0x80
[ 1089.751865][T23813]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[ 1089.753734][T23813]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1089.755713][T23813]  ? mark_held_locks+0x40/0x70
[ 1089.757263][T23813]  ? finish_task_switch.isra.0+0x3b3/0x10d0
[ 1089.759142][T23813]  ? rcu_is_watching+0x13/0xc0
[ 1089.760759][T23813]  ? trace_sched_exit_tp+0x120/0x160
[ 1089.762528][T23813]  ? __schedule+0x126b/0x6920
[ 1089.764079][T23813]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1089.765957][T23813]  ? policy_nodemask+0xed/0x4f0
[ 1089.767559][T23813]  alloc_pages_mpol+0x201/0x550
[ 1089.769096][T23813]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1089.770812][T23813]  folio_alloc_mpol_noprof+0x36/0x260
[ 1089.772481][T23813]  shmem_alloc_folio+0x135/0x160
[ 1089.774051][T23813]  shmem_alloc_and_add_folio+0x371/0xd40
[ 1089.776065][T23813]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1089.778274][T23813]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 1089.780230][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.781893][T23813]  shmem_get_folio_gfp+0x75b/0x1980
[ 1089.783559][T23813]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1089.785381][T23813]  ? inode_set_ctime_current+0x9c/0x850
[ 1089.787149][T23813]  ? find_held_lock+0x2b/0x80
[ 1089.788634][T23813]  ? timestamp_truncate+0x22e/0x2f0
[ 1089.790296][T23813]  shmem_write_begin+0x1a4/0x420
[ 1089.791859][T23813]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1089.793572][T23813]  ? inode_set_ctime_current+0x283/0x850
[ 1089.795349][T23813]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[ 1089.797508][T23813]  ? inode_maybe_inc_iversion+0x169/0x220
[ 1089.799302][T23813]  generic_perform_write+0x292/0xa40
[ 1089.800970][T23813]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1089.802805][T23813]  ? __pfx_generic_perform_write+0x10/0x10
[ 1089.804598][T23813]  ? mnt_put_write_access_file+0x4e/0x100
[ 1089.806405][T23813]  ? file_update_time_flags+0x38c/0x520
[ 1089.808227][T23813]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1089.810131][T23813]  shmem_file_write_iter+0x10e/0x140
[ 1089.811781][T23813]  __kernel_write_iter+0x2ac/0x930
[ 1089.813523][T23813]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1089.815386][T23813]  ? __up_read+0x333/0x980
[ 1089.816832][T23813]  ? dump_user_range+0x65e/0xad0
[ 1089.818455][T23813]  dump_user_range+0x3f9/0xad0
[ 1089.819993][T23813]  ? __pfx_dump_user_range+0x10/0x10
[ 1089.821680][T23813]  ? __pfx_writenote+0x10/0x10
[ 1089.823220][T23813]  ? elf_core_dump+0x2276/0x42f0
[ 1089.824882][T23813]  elf_core_dump+0x31f8/0x42f0
[ 1089.826918][T23813]  ? __pfx_elf_core_dump+0x10/0x10
[ 1089.828960][T23813]  ? __kasan_kmalloc+0xaa/0xb0
[ 1089.830528][T23813]  ? __kvmalloc_node_noprof+0x35b/0x9b0
[ 1089.832274][T23813]  ? vfs_coredump+0x21f6/0x54a0
[ 1089.833824][T23813]  ? get_signal+0x1f2a/0x21e0
[ 1089.835391][T23813]  ? arch_do_signal_or_restart+0x91/0x7a0
[ 1089.837215][T23813]  ? asm_exc_page_fault+0x26/0x30
[ 1089.838989][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.840498][T23813]  ? get_signal+0x1f2a/0x21e0
[ 1089.842011][T23813]  ? vfs_coredump+0x281a/0x54a0
[ 1089.843565][T23813]  vfs_coredump+0x281a/0x54a0
[ 1089.845104][T23813]  ? __pfx_vfs_coredump+0x10/0x10
[ 1089.846788][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.848615][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.850336][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.851948][T23813]  ? unwind_next_frame+0xbd/0x2090
[ 1089.853663][T23813]  ? lock_acquire+0x1d1/0x380
[ 1089.855162][T23813]  ? bpf_ksym_find+0x124/0x1c0
[ 1089.856680][T23813]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1089.858664][T23813]  ? arch_stack_walk+0xa6/0xf0
[ 1089.860181][T23813]  ? __sigqueue_free+0xbe/0x2a0
[ 1089.861718][T23813]  ? stack_trace_save+0x8e/0xc0
[ 1089.863265][T23813]  ? __pfx_stack_trace_save+0x10/0x10
[ 1089.864957][T23813]  ? stack_depot_save_flags+0x27/0x9f0
[ 1089.866708][T23813]  ? __lock_acquire+0x5c0/0x1f40
[ 1089.868320][T23813]  ? proc_coredump_connector+0x2d3/0x4f0
[ 1089.870128][T23813]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1089.872020][T23813]  ? rcu_is_watching+0x13/0xc0
[ 1089.873527][T23813]  get_signal+0x1f2a/0x21e0
[ 1089.874917][T23813]  ? __pfx_get_signal+0x10/0x10
[ 1089.876383][T23813]  ? __pfx_force_sig_fault+0x10/0x10
[ 1089.878049][T23813]  arch_do_signal_or_restart+0x91/0x7a0
[ 1089.879714][T23813]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1089.881598][T23813]  irqentry_exit+0x402/0xa10
[ 1089.883045][T23813]  asm_exc_page_fault+0x26/0x30
[ 1089.884551][T23813] RIP: 0023:0xf7f14fec
[ 1089.885842][T23813] Code: Unable to access opcode bytes at 0xf7f14fc2.
[ 1089.887973][T23813] RSP: 002b:00000000fffffc70 EFLAGS: 00010202
[ 1089.889906][T23813] RAX: 0000000000000000 RBX: 0000000001022000 RCX: 00000000fffffc70
[ 1089.892362][T23813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1089.894791][T23813] RBP: 00000000f53b55ec R08: 0000000000000000 R09: 0000000000000000
[ 1089.897199][T23813] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1089.899670][T23813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1089.902151][T23813]  </TASK>
[ 1089.903853][T23813] Kernel Offset: disabled
[ 1089.905231][T23813] Rebooting in 86400 seconds..