last executing test programs:

11m53.63062841s ago: executing program 4 (id=242):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/237, 0xed}], 0x1, 0x1ef, 0xfffffffd)

11m51.677795173s ago: executing program 4 (id=244):
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x0)

11m49.711627426s ago: executing program 4 (id=247):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
userfaultfd(0x801)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x8, 0x0)
bind$packet(r0, 0x0, 0x0)
bind$packet(r1, &(0x7f0000000100)={0x11, 0x4}, 0x14)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x20)

11m47.1210528s ago: executing program 4 (id=252):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

11m45.783521021s ago: executing program 4 (id=254):
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='zonefs\x00', 0x0)

11m44.033237291s ago: executing program 4 (id=258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1)

11m28.462789175s ago: executing program 32 (id=258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1)

4m15.950494165s ago: executing program 1 (id=1101):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, 0x0, &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'})

4m15.080780552s ago: executing program 1 (id=1106):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = epoll_create1(0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0x20000014})
finit_module(r5, 0x0, 0x0)

4m9.749182337s ago: executing program 3 (id=1113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r2, &(0x7f0000000140)="c5cbff3b2e626ab0f365245510bf38c7fcf9f78fdad9e04464", 0x19, 0x3b00, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket(0x1e, 0x4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x80000003, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a000000000000000000000010000300"], 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

4m9.702420315s ago: executing program 1 (id=1114):
io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7})
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)
openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000)
shmctl$IPC_RMID(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket(0x1e, 0x4, 0x0)
sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0)

4m7.771707761s ago: executing program 1 (id=1115):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
userfaultfd(0x801)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$qrtrtun(0xffffff9c, &(0x7f0000000080), 0x80002)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x601, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f})

4m7.51034673s ago: executing program 3 (id=1117):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r8=>0x0})
quotactl$Q_SETQUOTA(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x7, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x3, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0)

4m6.15836048s ago: executing program 3 (id=1119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2001}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
preadv2(r4, 0x0, 0x0, 0x2b, 0xfffffff9, 0x0)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18)

4m3.150127911s ago: executing program 1 (id=1123):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x4000800)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0xd, 0x18, 0x0, 0x100, 0x9, 0x9, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0xa, 0x8a, 0x7, 0x13, 0x33, '\x00', 0x8, 0x4})

4m2.174025825s ago: executing program 3 (id=1126):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0)

3m59.512705704s ago: executing program 3 (id=1128):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, 0x0, &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'})

3m59.169471515s ago: executing program 3 (id=1131):
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x44000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010)
ptrace$setregs(0xd, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0)

3m59.120135772s ago: executing program 1 (id=1132):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x3, 0x9, 0x0, @tick, {0xbc}, {0x0, 0x8}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}], 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000008e64500e0000001000c00003000000020000001200000e0200"/43], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

3m43.866926939s ago: executing program 33 (id=1132):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x3, 0x9, 0x0, @tick, {0xbc}, {0x0, 0x8}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}], 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000008e64500e0000001000c00003000000020000001200000e0200"/43], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

3m43.784127861s ago: executing program 34 (id=1131):
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x44000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010)
ptrace$setregs(0xd, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0)

29.161098532s ago: executing program 7 (id=1611):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0)

23.343636063s ago: executing program 7 (id=1615):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
fsopen(&(0x7f0000001300)='hugetlbfs\x00', 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000000000007000000ffffffff", @ANYRESHEX=r0])

23.049729422s ago: executing program 7 (id=1620):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x20000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, &(0x7f00000006c0)="55bb4cf961631e9a93b57c227efc78e766e91c3625ee889cd47f56f3c8bb93daf4b64dea9f887e9d2ce42fc21384e7d7508468a8e7d3402a9e7cdae59b733a2e226cabce9d2a41c971b4158c7ddd963d0d80e537fd8d1088b5600b70a88dc20202d647a9046b8b7f48f34d552748e250554298f61a1d4312654b16adfdd3670109e58d48a33619b37b1a90973924dacbb5e50f50093b5d498da2e9029572cecea3336d899aa09c72cf163ad32e0fec0f11cc024751fe48ed68cf7baac3245e15be2316ec92ce847595b34046c5b1004fbe8abb36705190c53b4387f74ed7a3e47bb00d42900fa1")

17.404359246s ago: executing program 6 (id=1630):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000000000007000000ffffffff", @ANYRESHEX=r0])

16.436062647s ago: executing program 6 (id=1633):
socket$inet6(0xa, 0x806, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_dccp(0x2, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
iopl(0x3)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000)
setpriority(0x1, 0x0, 0x3d65da38)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x1d6)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x8}, 0x286ec82388ce2729}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0xffffffffffffffff, 0x3f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x40080)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f0000000000)=0x800007)
syz_open_dev$cec(0x0, 0x0, 0x1)

15.519722162s ago: executing program 2 (id=1635):
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000007, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800010600000000000000001c140000fe000001000000007f090000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4009}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x8, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

13.079236714s ago: executing program 6 (id=1639):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x2, 0x733, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffc, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x4, 0x0, 0x1}}, 0x2e)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)

12.890898006s ago: executing program 7 (id=1640):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0x2fe}, &(0x7f00000000c0), &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

11.964446966s ago: executing program 2 (id=1643):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x67fd, &(0x7f0000000400)={0x0, 0xfffffffc, 0x0, 0xfffffffc}, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2})
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
clock_gettime(0xb, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
dup(r7)

8.053931256s ago: executing program 0 (id=1649):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @local, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c00}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0x7fff, 0x1bc4, 0x80000001, 0x8, 0xfffffffa, 0x7, 0x7]}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)

7.012172672s ago: executing program 0 (id=1651):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000001c0)=0x100000000003, 0x12)

7.011784548s ago: executing program 5 (id=1652):
r0 = memfd_create(&(0x7f0000000680)='y\x105\b\xf7u\x83%:r7\xe7a\xdenJ\xeb\x87\x9a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00@\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\x9a\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xf2\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xc7/\x97X\xac\b\xb0\xc2<\x00E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7o\xebF8\x9dL\x01vRf\xab\xbc\xbd\xa8w\x06.\xf3k\x01\x00B\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\x01\x00\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2\xadg\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j \x92\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae\'\xc5\x11\xbbYW\xfc\xaf\x06\x94!\xdf\x90\xf22T\'+\xa9\x1c\xe8\x99T\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xda\xc5\xba\x84\xd5\x16\x83jI#W\x84\x1bi\xc2\x12o\xaf2\x19\xac\xb1]\xa6\xae\xec\x8fw\x17\x1d\xae\xd3i\xd4\'\x10R\xf8\xf9+\x83K\x96s#\x88\xa6\xf3\xfc\xe4\xcd\xe5\x9e\xfd&\xb5\xe4\x88\xff-\xa6]R\x91\x98\x17(\xc4C\xd6<\x15\xe5.9\xaa\xecQ', 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0)
syz_open_dev$sndmidi(0x0, 0x80, 0x200)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0)
fcntl$addseals(r0, 0x409, 0x7)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x4, &(0x7f0000000240)=[{0xb, 0x8, 0x9, 0xfffffffe}, {0x5, 0x7, 0x6, 0x200000}, {0x4, 0x0, 0x2, 0x2}, {0x462, 0x5, 0x80, 0xbb7f}]})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {<r4=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={r4, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)

6.974373736s ago: executing program 2 (id=1653):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x54, r2, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}}, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(0x0, r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10081}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace(0x10, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00')
write$cgroup_pid(r4, &(0x7f0000003400), 0x12)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x8004500f, 0xffffffffffffffff)
connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x20)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1)
r9 = socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x880)

6.841786533s ago: executing program 0 (id=1654):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)})
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fanotify_init(0x0, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pipe2(&(0x7f0000000840)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)={0xb, {{0xa, 0xfffc, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, {{0xa, 0x0, 0x6, @remote}}]}, 0x190)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x29, 0xfffffffe, 0x0, 0x21, 0x0, 0x4, 0x8}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r7, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x24)
close_range(r3, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r0)

4.682783358s ago: executing program 5 (id=1655):
userfaultfd(0x801)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000deff00000800000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r5, 0x0, 0x14)
close_range(r4, 0xffffffffffffffff, 0x0)

4.675659901s ago: executing program 0 (id=1656):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

4.537804858s ago: executing program 2 (id=1657):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/32, 0x20, 0x6, 0x3, 0x3, 0x0, 0xa0}}, 0x120)
write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006)

3.895913357s ago: executing program 5 (id=1658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000040)='./file1\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff})
fcntl$lock(r1, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8})
socket(0x5, 0x4, 0x127)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3.791001769s ago: executing program 0 (id=1659):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$TIOCCONS(r2, 0x541d)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
poll(0x0, 0x7, 0xffffb188)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x8000, 0x4, 0x800, 0x11, 0xffff, 0x6c, 0x0, 0x8f53, 0xfff9, 0x3]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4004000)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r8 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x3, 0xb}})
r9 = socket(0x10, 0x3, 0x0)
r10 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r10, &(0x7f0000000140)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f0000000040)='!M~', 0x3}], 0x2)
ioctl$IOC_PR_REGISTER(r10, 0x401870c8, &(0x7f00000003c0)={0x7, 0x10000})
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0)

2.653900654s ago: executing program 0 (id=1660):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_control_io(r0, 0x0, 0x0)

2.072836394s ago: executing program 5 (id=1661):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0xa, &(0x7f0000000040)='tlb_flush\x00'}, 0x30)

1.701609441s ago: executing program 6 (id=1662):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x877}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x14}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.532103279s ago: executing program 5 (id=1663):
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r2 = dup(r1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x89ffc)

917.235015ms ago: executing program 2 (id=1664):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000001c0)=0x100000000003, 0x12)

877.917237ms ago: executing program 7 (id=1665):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102376, 0x18fe8)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x4188a})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$packet(0x11, 0x2, 0x300)
userfaultfd(0x80801)

808.149748ms ago: executing program 6 (id=1666):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00)

771.981139ms ago: executing program 5 (id=1667):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB, @ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$inet6(0xa, 0x80002, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})

49.339595ms ago: executing program 6 (id=1668):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
syz_clone(0x800500, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

48.642531ms ago: executing program 7 (id=1669):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="200616000000d2"], 0x0, 0x0})

0s ago: executing program 2 (id=1670):
socket$unix(0x1, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

kernel console output (not intermixed with test programs):

h0
[  274.668158][ T7065] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  274.696895][ T7065] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  274.719824][ T7065] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  275.984441][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.005755][ T7065] 8021q: adding VLAN 0 to HW filter on device team0
[  276.023321][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.030927][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.059177][  T730] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.066364][  T730] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.543473][ T7303] No control pipe specified
[  282.733004][ T7065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  283.332664][ T7326] netlink: 64 bytes leftover after parsing attributes in process `syz.0.349'.
[  283.477752][ T7332] netlink: 68 bytes leftover after parsing attributes in process `syz.3.350'.
[  283.496339][ T5921] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  283.550411][   T12] hsr_slave_0: left promiscuous mode
[  283.560487][   T12] hsr_slave_1: left promiscuous mode
[  283.575211][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.588196][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.601996][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.613781][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.651388][   T12] veth1_macvtap: left promiscuous mode
[  283.659263][   T12] veth0_macvtap: left promiscuous mode
[  283.664932][   T12] veth1_vlan: left promiscuous mode
[  283.671446][   T12] veth0_vlan: left promiscuous mode
[  283.930571][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  283.942528][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.962749][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  283.975004][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.219235][ T5921] usb 2-1: config 0 descriptor??
[  284.369916][ T5921] hub 2-1:0.0: USB hub found
[  285.033400][ T7321] PKCS7: Unknown OID: [4] 0.38.35.34.956032.117(bad)
[  285.059202][ T7321] PKCS7: Only support pkcs7_signedData type
[  285.072111][ T5921] hub 2-1:0.0: 7 ports detected
[  285.092870][ T5921] hub 2-1:0.0: insufficient power available to use all downstream ports
[  285.991356][   T12] team0 (unregistering): Port device team_slave_1 removed
[  286.052474][ T5921] usb 2-1: USB disconnect, device number 4
[  286.058884][   T12] team0 (unregistering): Port device team_slave_0 removed
[  286.389175][   T12] lo (unregistering): left allmulticast mode
[  286.680720][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.799351][ T7382] netdevsim netdevsim2: Direct firmware load for .
[  289.799351][ T7382]  failed with error -2
[  289.810196][ T7382] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  289.810196][ T7382] 
[  289.990525][ T7388] netlink: 64 bytes leftover after parsing attributes in process `syz.3.361'.
[  290.488455][ T5921] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  290.592614][ T7065] veth0_vlan: entered promiscuous mode
[  290.649878][ T7065] veth1_vlan: entered promiscuous mode
[  290.727061][ T5921] usb 2-1: Using ep0 maxpacket: 16
[  290.728589][ T7065] veth0_macvtap: entered promiscuous mode
[  290.758852][ T5921] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  290.776277][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.779114][ T7065] veth1_macvtap: entered promiscuous mode
[  290.818057][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  290.830101][ T7402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.364'.
[  290.881105][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  290.928039][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.929957][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.972613][ T5921] usb 2-1: Product: syz
[  291.000922][ T5921] usb 2-1: Manufacturer: syz
[  291.032154][ T5921] usb 2-1: SerialNumber: syz
[  291.246739][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.272068][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.339109][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.434023][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.532342][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.646881][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.662716][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.711497][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.774644][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.795520][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.088697][ T5921] usb 2-1: 0:2 : does not exist
[  292.135884][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.196399][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.226278][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.246467][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.257101][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.276280][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.297905][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.327652][ T7065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.338757][ T7065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.352311][ T7065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.361968][ T7065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.164899][ T5921] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  295.232342][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.271794][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.350490][ T5921] usb 2-1: USB disconnect, device number 5
[  295.489799][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.531186][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.671593][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  297.450524][ T7454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.374'.
[  297.500627][ T7458] netlink: 64 bytes leftover after parsing attributes in process `syz.2.372'.
[  297.528810][ T7457] syz_tun: entered allmulticast mode
[  297.568233][ T7456] syz_tun: left allmulticast mode
[  302.126672][ T5921] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  302.532826][ T5921] usb 6-1: Using ep0 maxpacket: 16
[  302.714696][ T5921] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  302.901611][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.152457][ T5921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  303.220722][ T5921] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  303.255737][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.294041][ T5921] usb 6-1: Product: syz
[  303.483626][ T5921] usb 6-1: Manufacturer: syz
[  303.489171][ T5921] usb 6-1: SerialNumber: syz
[  304.431188][ T7513] netlink: 68 bytes leftover after parsing attributes in process `syz.3.387'.
[  305.122735][ T5921] usb 6-1: 0:2 : does not exist
[  305.557224][ T7525] netlink: 64 bytes leftover after parsing attributes in process `syz.2.390'.
[  305.856904][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  306.426691][   T10] usb 2-1: Using ep0 maxpacket: 16
[  306.450698][   T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  306.507846][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.543240][   T10] usb 2-1: config 0 has no interface number 0
[  306.592314][   T10] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b
[  306.630023][ T5921] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[  306.671613][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.692183][ T5921] usb 6-1: USB disconnect, device number 2
[  306.736317][   T10] usb 2-1: config 0 descriptor??
[  306.964504][   T10] usb 2-1: Found UVC 0.00 device <unnamed> (0bd3:0555)
[  307.353045][   T10] usb 2-1: No valid video chain found.
[  307.503221][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.697654][   T10] usb 2-1: USB disconnect, device number 6
[  307.804603][ T7554] fuse: Bad value for 'fd'
[  308.949726][ T7562] ALSA: mixer_oss: invalid OSS volume 'u'
[  311.102774][ T7588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.403'.
[  311.303558][  T877] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  311.508281][  T877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  311.530806][  T877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.552339][  T877] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  311.567883][  T877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.584982][  T877] usb 2-1: config 0 descriptor??
[  311.596092][  T877] hub 2-1:0.0: USB hub found
[  312.772882][ T7575] PKCS7: Unknown OID: [4] 0.38.35.34.956032.117(bad)
[  312.822997][ T7575] PKCS7: Only support pkcs7_signedData type
[  312.884971][  T877] hub 2-1:0.0: 7 ports detected
[  312.892082][  T877] hub 2-1:0.0: insufficient power available to use all downstream ports
[  315.487503][ T5878] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  315.695139][ T7599] ALSA: mixer_oss: invalid OSS volume 'u'
[  316.253581][  T877] usb 2-1: USB disconnect, device number 7
[  316.886824][ T7634] syz_tun: entered allmulticast mode
[  316.956906][ T7632] syz_tun: left allmulticast mode
[  318.226464][ T5839] Bluetooth: hci5: command 0x0405 tx timeout
[  318.230450][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  318.249714][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  320.378803][ T7662] netlink: 64 bytes leftover after parsing attributes in process `syz.5.418'.
[  322.616984][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  323.022265][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  323.042236][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  323.056740][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  323.819042][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  324.509985][ T5878] usb 6-1: string descriptor 0 read error: -71
[  324.516441][ T5878] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  324.528039][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.556887][ T5878] usb 6-1: config 0 descriptor??
[  324.597479][ T5878] usb 6-1: can't set config #0, error -71
[  324.647465][ T5878] usb 6-1: USB disconnect, device number 3
[  326.562384][ T7728] No control pipe specified
[  326.881072][ T7735] netlink: 64 bytes leftover after parsing attributes in process `syz.0.432'.
[  330.072835][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  330.280256][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  330.295422][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  330.314206][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  330.326159][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  330.889147][   T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  330.890362][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.893912][   T10] usb 4-1: Product: syz
[  330.895090][   T10] usb 4-1: Manufacturer: syz
[  330.896144][   T10] usb 4-1: SerialNumber: syz
[  330.977952][   T10] usb 4-1: config 0 descriptor??
[  330.990656][ T7747] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  330.991990][   T10] usb 4-1: ucan: probing device on interface #0
[  330.992016][   T10] usb 4-1: ucan: invalid endpoint configuration
[  330.992033][   T10] usb 4-1: ucan: probe failed; try to update the device firmware
[  333.529619][   T10] usb 4-1: USB disconnect, device number 8
[  333.641409][ T7767] No control pipe specified
[  335.432246][ T7779] netlink: 64 bytes leftover after parsing attributes in process `syz.0.447'.
[  342.141679][   T26] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  342.456258][   T26] usb 1-1: Using ep0 maxpacket: 16
[  342.560875][   T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  342.646838][   T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.769744][   T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  343.050492][   T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  343.064919][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.093578][   T26] usb 1-1: Product: syz
[  343.098587][   T26] usb 1-1: Manufacturer: syz
[  343.104321][   T26] usb 1-1: SerialNumber: syz
[  344.406825][ T7859] netlink: 64 bytes leftover after parsing attributes in process `syz.1.463'.
[  344.413843][   T26] usb 1-1: 0:2 : does not exist
[  346.673362][   T26] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[  346.731783][   T26] usb 1-1: USB disconnect, device number 12
[  347.008175][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  350.251697][ T7890] fuse: Unknown parameter 'group_id00000000000000000000'
[  352.524938][ T7879] netlink: 71 bytes leftover after parsing attributes in process `syz.0.469'.
[  360.186401][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  360.387836][    T9] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  360.407376][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.415542][    T9] usb 2-1: Product: syz
[  360.462417][    T9] usb 2-1: Manufacturer: syz
[  360.483367][    T9] usb 2-1: SerialNumber: syz
[  360.512702][    T9] usb 2-1: config 0 descriptor??
[  360.553179][    T9] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  360.611502][    T9] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[  360.633957][    T9] usb-storage 2-1:0.0: USB Mass Storage device detected
[  360.666798][    T9] usb-storage 2-1:0.0: device ignored
[  360.761738][    T9] usb 2-1: USB disconnect, device number 8
[  365.315315][ T7972] netlink: 71 bytes leftover after parsing attributes in process `syz.0.488'.
[  366.043805][ T8019] input: syz0 as /devices/virtual/input/input6
[  369.710784][ T8046] netlink: 64 bytes leftover after parsing attributes in process `syz.0.505'.
[  370.671155][ T5843] Bluetooth: hci5: command 0x0405 tx timeout
[  371.120106][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  371.297213][ T5878] usb 2-1: Using ep0 maxpacket: 16
[  371.320818][ T5878] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  371.337246][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  371.348338][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  371.387082][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  371.405378][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.423695][ T5878] usb 2-1: Product: syz
[  371.428585][ T5878] usb 2-1: Manufacturer: syz
[  371.433607][ T5878] usb 2-1: SerialNumber: syz
[  372.500747][ T5878] usb 2-1: 0:2 : does not exist
[  373.152848][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  373.160927][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  373.169011][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  373.195159][ T5878] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  373.228575][ T5878] usb 2-1: USB disconnect, device number 9
[  373.442220][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.700355][ T8104] netdevsim netdevsim3: Direct firmware load for .
[  376.700355][ T8104]  failed with error -2
[  376.718502][ T8103] netlink: 64 bytes leftover after parsing attributes in process `syz.0.520'.
[  376.864754][ T8104] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  376.864754][ T8104] 
[  378.226794][ T5865] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  378.630221][ T5865] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  378.735135][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.837450][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.844511][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  378.895651][ T5865] usb 1-1: Product: syz
[  378.929565][ T5865] usb 1-1: Manufacturer: syz
[  378.993988][ T5865] usb 1-1: SerialNumber: syz
[  379.240229][ T5865] usb 1-1: config 0 descriptor??
[  379.291018][ T5865] gspca_main: sq905c-2.14.0 probing 2770:9052
[  379.619811][ T5865] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  380.598556][ T5865] sq905c 1-1:0.0: Get version command failed
[  380.604685][ T5865] sq905c 1-1:0.0: probe with driver sq905c failed with error -71
[  380.623874][ T5865] usb 1-1: USB disconnect, device number 13
[  382.132324][ T8151] netlink: 'syz.0.532': attribute type 10 has an invalid length.
[  382.919719][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  382.928085][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.532'.
[  383.200443][   T10] usb 6-1: Using ep0 maxpacket: 16
[  383.244008][   T10] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  383.286302][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.311441][ T8158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.532'.
[  383.311913][   T10] usb 6-1: config 0 has no interface number 0
[  383.336387][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.532'.
[  383.420588][   T10] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b
[  383.436481][ T8158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.532'.
[  383.437146][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.485538][ T8158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.532'.
[  383.641198][   T10] usb 6-1: config 0 descriptor??
[  383.659901][   T10] usb 6-1: Found UVC 0.00 device <unnamed> (0bd3:0555)
[  383.680952][   T10] usb 6-1: No valid video chain found.
[  383.781611][ T8160] netlink: 64 bytes leftover after parsing attributes in process `syz.3.534'.
[  383.916022][   T10] usb 6-1: USB disconnect, device number 4
[  387.938282][ T8151] team0: Port device geneve0 added
[  389.622761][   T26] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  390.705949][   T26] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  390.814194][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.915756][   T26] usb 3-1: Product: syz
[  390.954727][   T26] usb 3-1: Manufacturer: syz
[  391.000852][   T26] usb 3-1: SerialNumber: syz
[  391.285149][   T26] usb 3-1: config 0 descriptor??
[  392.326058][ T8194] ALSA: mixer_oss: invalid OSS volume 'u'
[  392.360232][   T26] usb 3-1: can't set config #0, error -71
[  392.394443][   T26] usb 3-1: USB disconnect, device number 13
[  392.468533][ T8216] netlink: 64 bytes leftover after parsing attributes in process `syz.5.546'.
[  396.585096][ T8259] fuse: Bad value for 'fd'
[  399.188841][ T8277] netlink: 'syz.3.559': attribute type 10 has an invalid length.
[  399.436703][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'.
[  399.799851][ T8277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.559'.
[  399.818774][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.559'.
[  399.828411][ T8277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.559'.
[  399.837661][ T8277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.559'.
[  399.886281][ T5878] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  400.138002][  T977] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  400.326867][  T977] usb 1-1: Using ep0 maxpacket: 16
[  400.410671][  T977] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  400.471084][ T5878] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  400.496614][  T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.766330][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.776293][  T977] usb 1-1: config 0 has no interface number 0
[  400.782458][  T977] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b
[  400.796265][ T5878] usb 2-1: Product: syz
[  400.806618][ T5878] usb 2-1: Manufacturer: syz
[  400.828513][ T5878] usb 2-1: SerialNumber: syz
[  400.855485][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.863153][ T5878] usb 2-1: config 0 descriptor??
[  400.915967][  T977] usb 1-1: config 0 descriptor??
[  400.917264][ T5878] gspca_main: sq905c-2.14.0 probing 2770:9052
[  400.962400][  T977] usb 1-1: Found UVC 0.00 device <unnamed> (0bd3:0555)
[  400.994468][  T977] usb 1-1: No valid video chain found.
[  401.244569][ T5878] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  401.604926][  T977] usb 1-1: USB disconnect, device number 14
[  401.985406][ T5878] sq905c 2-1:0.0: Get version command failed
[  401.993246][ T5878] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  402.019736][ T5878] usb 2-1: USB disconnect, device number 10
[  404.031265][ T8326] fuse: Bad value for 'fd'
[  408.535962][ T8373] netlink: 'syz.5.578': attribute type 10 has an invalid length.
[  408.615361][ T8373] netlink: 40 bytes leftover after parsing attributes in process `syz.5.578'.
[  408.666429][ T5865] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  409.141984][ T5865] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  409.178228][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.365162][ T5865] usb 3-1: Product: syz
[  409.539822][ T5865] usb 3-1: Manufacturer: syz
[  409.545704][ T5865] usb 3-1: SerialNumber: syz
[  409.683253][ T5865] usb 3-1: config 0 descriptor??
[  409.728258][ T5865] gspca_main: sq905c-2.14.0 probing 2770:9052
[  409.772711][ T8378] netlink: 36 bytes leftover after parsing attributes in process `syz.5.578'.
[  409.802294][ T8373] team0: Failed to send options change via netlink (err -105)
[  409.854628][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.578'.
[  409.873842][ T8373] team0: Port device geneve0 added
[  409.895808][ T8378] netlink: 36 bytes leftover after parsing attributes in process `syz.5.578'.
[  409.927795][ T5865] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  409.966285][ T5865] sq905c 3-1:0.0: Get version command failed
[  409.995304][ T5865] sq905c 3-1:0.0: probe with driver sq905c failed with error -71
[  410.011262][ T8378] netlink: 36 bytes leftover after parsing attributes in process `syz.5.578'.
[  410.045136][ T5865] usb 3-1: USB disconnect, device number 14
[  410.341612][ T8391] fuse: Bad value for 'fd'
[  416.397527][ T5843] Bluetooth: hci5: command 0x0405 tx timeout
[  416.439144][ T8441] fuse: Unknown parameter 'group_id00000000000000000000'
[  417.077850][ T5881] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  417.334408][ T5881] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  417.380241][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.426470][ T5881] usb 6-1: Product: syz
[  417.430779][ T5881] usb 6-1: Manufacturer: syz
[  417.444394][ T5881] usb 6-1: SerialNumber: syz
[  417.477301][ T5881] usb 6-1: config 0 descriptor??
[  417.498971][ T5881] gspca_main: sq905c-2.14.0 probing 2770:9052
[  418.716417][ T5881] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  418.734194][ T5881] sq905c 6-1:0.0: Get version command failed
[  418.764607][ T5881] sq905c 6-1:0.0: probe with driver sq905c failed with error -71
[  419.751440][ T5881] usb 6-1: USB disconnect, device number 5
[  421.199594][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  421.469327][ T8497] fuse: Bad value for 'user_id'
[  421.474299][ T8497] fuse: Bad value for 'user_id'
[  422.079136][   T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  422.222757][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.351484][   T10] usb 3-1: Product: syz
[  422.586248][ T5865] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  422.709630][   T10] usb 3-1: Manufacturer: syz
[  422.714292][   T10] usb 3-1: SerialNumber: syz
[  422.851028][   T10] usb 3-1: config 0 descriptor??
[  422.930522][ T5865] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  422.996755][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.054580][ T5865] usb 1-1: Product: syz
[  423.111971][ T5865] usb 1-1: Manufacturer: syz
[  423.170488][ T5865] usb 1-1: SerialNumber: syz
[  423.347701][ T5865] usb 1-1: config 0 descriptor??
[  423.574870][ T5865] usb 1-1: can't set config #0, error -71
[  423.584642][ T5865] usb 1-1: USB disconnect, device number 15
[  423.650110][   T10] usb 3-1: USB disconnect, device number 15
[  425.338081][ T8445] udevd[8445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  427.444895][ T8538] fuse: Bad value for 'user_id'
[  427.449986][ T8538] fuse: Bad value for 'user_id'
[  430.726561][ T8562] fuse: Bad value for 'fd'
[  433.037325][ T8573] netlink: 'syz.2.623': attribute type 10 has an invalid length.
[  433.045134][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.623'.
[  433.212409][ T8573] team0: Port device geneve0 added
[  433.359834][ T8573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.623'.
[  433.552833][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'.
[  433.694163][ T8573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.623'.
[  433.815846][ T8573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.623'.
[  435.424642][ T8591] fuse: Bad value for 'user_id'
[  435.430426][ T8591] fuse: Bad value for 'user_id'
[  440.659911][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.669708][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  440.816905][ T8611] netdevsim netdevsim2: Direct firmware load for .
[  440.816905][ T8611]  failed with error -2
[  440.896795][ T8611] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  440.896795][ T8611] 
[  444.680011][   T26] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  445.491209][   T26] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  445.500597][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.561115][   T26] usb 6-1: Product: syz
[  445.736934][   T26] usb 6-1: Manufacturer: syz
[  445.768817][   T26] usb 6-1: SerialNumber: syz
[  446.604123][   T26] usb 6-1: config 0 descriptor??
[  446.623851][   T26] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  446.636448][   T26] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5
[  446.655344][   T26] usb-storage 6-1:0.0: USB Mass Storage device detected
[  446.695082][   T26] usb-storage 6-1:0.0: device ignored
[  446.857984][ T5878] usb 6-1: USB disconnect, device number 6
[  447.837912][   T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  448.346181][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.397757][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.461689][   T26] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  448.660387][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.697412][   T26] usb 2-1: config 0 descriptor??
[  449.549920][ T8687] fuse: Bad value for 'fd'
[  449.563909][   T26] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  449.966126][   T26] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71
[  449.987397][   T26] usb 2-1: USB disconnect, device number 11
[  451.495948][ T8699] netlink: 71 bytes leftover after parsing attributes in process `syz.3.655'.
[  457.905383][ T8751] fuse: Bad value for 'fd'
[  461.409997][ T8769] netlink: 71 bytes leftover after parsing attributes in process `syz.2.673'.
[  465.910476][ T8820] netlink: 71 bytes leftover after parsing attributes in process `syz.2.688'.
[  472.786651][ T8875] netlink: 71 bytes leftover after parsing attributes in process `syz.1.704'.
[  474.137671][ T8885] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  474.152736][ T8885] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  476.041294][ T8902] syz_tun: entered allmulticast mode
[  476.063013][ T8901] syz_tun: left allmulticast mode
[  477.669738][ T8920] netlink: 64 bytes leftover after parsing attributes in process `syz.0.717'.
[  477.796350][ T5877] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  477.968640][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short
[  478.006700][ T5877] usb 3-1: not running at top speed; connect to a high speed hub
[  478.021449][ T5877] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  478.050712][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  478.074690][ T5877] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  478.145080][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  478.180863][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.225103][ T5877] usb 3-1: Product: syz
[  478.244295][ T5877] usb 3-1: Manufacturer: syz
[  479.086221][ T5877] usb 3-1: SerialNumber: syz
[  479.354224][ T8938] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  479.368574][ T8938] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  479.743641][ T5877] usb 3-1: 0:2 : does not exist
[  480.830387][ T5877] usb 3-1: USB disconnect, device number 16
[  480.980191][ T8944] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  481.318854][ T8495] udevd[8495]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  484.226547][ T8963] netdevsim netdevsim0: Direct firmware load for .
[  484.226547][ T8963]  failed with error -2
[  484.238056][ T8963] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  484.238056][ T8963] 
[  487.086377][ T5878] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  488.008354][ T5878] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  488.126488][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.236333][ T5878] usb 3-1: Product: syz
[  488.312901][ T5878] usb 3-1: Manufacturer: syz
[  488.387639][ T5878] usb 3-1: SerialNumber: syz
[  488.440101][ T5878] usb 3-1: config 0 descriptor??
[  488.494658][ T5878] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  488.513948][ T5878] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5
[  489.492362][ T5878] usb-storage 3-1:0.0: USB Mass Storage device detected
[  489.538125][ T5878] usb-storage 3-1:0.0: device ignored
[  490.226376][ T9004] erspan1: entered promiscuous mode
[  490.231652][ T9004] erspan1: entered allmulticast mode
[  490.285976][ T5878] usb 3-1: USB disconnect, device number 17
[  493.643389][ T5839] Bluetooth: hci5: command 0x0405 tx timeout
[  498.647117][ T5865] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  498.814461][ T5880] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  499.037567][ T5865] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  499.125524][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.157035][ T9059] trusted_key: encrypted_key: key user:syz not found
[  499.164649][ T5865] usb 4-1: Product: syz
[  499.180124][ T5865] usb 4-1: Manufacturer: syz
[  499.249847][ T5880] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  499.343923][ T5865] usb 4-1: SerialNumber: syz
[  499.364150][ T5865] usb 4-1: config 0 descriptor??
[  499.395027][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.196211][ T5880] usb 1-1: Product: syz
[  500.200447][ T5880] usb 1-1: Manufacturer: syz
[  500.205077][ T5880] usb 1-1: SerialNumber: syz
[  500.234009][ T5880] usb 1-1: config 0 descriptor??
[  500.251173][ T5880] gspca_main: sq905c-2.14.0 probing 2770:9052
[  500.767257][ T5880] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  500.935481][ T5880] sq905c 1-1:0.0: Get version command failed
[  501.269222][ T5880] sq905c 1-1:0.0: probe with driver sq905c failed with error -110
[  501.330146][ T5880] usb 1-1: USB disconnect, device number 16
[  501.709675][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  501.722768][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  503.240276][ T5881] usb 4-1: USB disconnect, device number 9
[  508.905185][ T5877] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  509.362601][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  509.451047][ T5877] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  509.574419][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  509.633785][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  509.874092][ T5877] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  509.886305][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.909924][ T5877] usb 4-1: Product: syz
[  509.914157][ T5877] usb 4-1: Manufacturer: syz
[  510.097765][ T5877] usb 4-1: SerialNumber: syz
[  510.497265][ T5877] usb 4-1: config 0 descriptor??
[  510.506786][ T9127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  510.549200][ T5877] usb 4-1: ucan: probing device on interface #0
[  510.569015][ T5877] usb 4-1: ucan: invalid endpoint configuration
[  510.575338][ T5877] usb 4-1: ucan: probe failed; try to update the device firmware
[  510.676862][ T9144] lo: entered allmulticast mode
[  513.342914][ T5877] usb 4-1: USB disconnect, device number 10
[  516.987389][ T9189] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[9189]
[  518.816450][ T5882] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  519.163879][ T5882] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  519.260823][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.378682][ T5882] usb 6-1: Product: syz
[  519.449324][ T5882] usb 6-1: Manufacturer: syz
[  519.512937][ T5882] usb 6-1: SerialNumber: syz
[  519.673321][ T5882] usb 6-1: config 0 descriptor??
[  524.584818][ T9227] erspan1: entered promiscuous mode
[  524.590197][ T9227] erspan1: entered allmulticast mode
[  525.414012][ T5878] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  526.106690][ T5878] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  526.116045][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.124274][ T5878] usb 1-1: Product: syz
[  526.129441][ T5878] usb 1-1: Manufacturer: syz
[  526.134097][ T5878] usb 1-1: SerialNumber: syz
[  526.208612][ T5878] usb 1-1: config 0 descriptor??
[  526.234445][ T5878] gspca_main: sq905c-2.14.0 probing 2770:9052
[  526.498820][ T5878] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  526.521760][ T5878] sq905c 1-1:0.0: Get version command failed
[  526.536774][ T5878] sq905c 1-1:0.0: probe with driver sq905c failed with error -71
[  526.575645][ T5878] usb 1-1: USB disconnect, device number 17
[  527.977613][ T5878] usb 6-1: USB disconnect, device number 7
[  537.186936][ T5877] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  539.231693][ T5877] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  539.513247][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.522328][ T5877] usb 2-1: Product: syz
[  539.526909][ T5877] usb 2-1: Manufacturer: syz
[  539.531543][ T5877] usb 2-1: SerialNumber: syz
[  539.538938][ T5877] usb 2-1: config 0 descriptor??
[  539.592307][ T5877] gspca_main: sq905c-2.14.0 probing 2770:9052
[  540.632157][ T9330] erspan1: entered promiscuous mode
[  540.637567][ T9330] erspan1: entered allmulticast mode
[  540.643735][ T5877] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  540.664315][ T5877] sq905c 2-1:0.0: Get version command failed
[  540.676585][ T5877] sq905c 2-1:0.0: probe with driver sq905c failed with error -110
[  541.353254][ T5882] usb 2-1: USB disconnect, device number 12
[  543.458515][ T9349] overlayfs: failed to resolve './bus': -2
[  547.476239][ T5878] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  548.613176][ T5878] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  548.646704][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.665201][ T5878] usb 1-1: Product: syz
[  548.675355][ T5878] usb 1-1: Manufacturer: syz
[  548.685508][ T5878] usb 1-1: SerialNumber: syz
[  548.703999][ T5878] usb 1-1: config 0 descriptor??
[  548.724225][ T5878] gspca_main: sq905c-2.14.0 probing 2770:9052
[  549.307171][ T5878] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  549.314818][ T5878] sq905c 1-1:0.0: Get version command failed
[  549.340839][ T5878] sq905c 1-1:0.0: probe with driver sq905c failed with error -110
[  549.381545][ T5878] usb 1-1: USB disconnect, device number 18
[  552.211701][ T9394] ALSA: mixer_oss: invalid OSS volume 'u'
[  553.876291][ T5839] Bluetooth: hci5: command 0x0405 tx timeout
[  554.687054][ T9423] fuse: Bad value for 'fd'
[  561.370559][ T9470] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  561.395299][ T9470] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  563.158043][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  563.164445][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  568.028401][ T9523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.883'.
[  574.841194][ T9581] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  574.885921][ T9581] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  580.457023][ T9610] ALSA: mixer_oss: invalid OSS volume 'u'
[  588.036736][ T9671] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[9671]
[  588.153921][ T9671] syz.1.925 (9671): /proc/9671/oom_adj is deprecated, please use /proc/9671/oom_score_adj instead.
[  588.245017][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'.
[  596.676657][ T5880] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  597.267219][ T5880] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  597.276808][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.776549][ T5880] usb 2-1: Product: syz
[  597.780945][ T5880] usb 2-1: Manufacturer: syz
[  597.798975][ T5880] usb 2-1: SerialNumber: syz
[  597.960799][ T5880] usb 2-1: config 0 descriptor??
[  597.990275][ T5880] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  598.012067][ T5880] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[  598.063245][ T5880] usb-storage 2-1:0.0: USB Mass Storage device detected
[  598.139103][ T5880] usb-storage 2-1:0.0: device ignored
[  598.492299][ T9753] erspan1: entered promiscuous mode
[  598.497701][ T9753] erspan1: entered allmulticast mode
[  599.353122][ T5880] usb 2-1: USB disconnect, device number 13
[  606.359916][ T9800] overlayfs: failed to resolve './file1': -2
[  608.942621][ T9829] syz_tun: entered allmulticast mode
[  608.997909][ T9827] syz_tun: left allmulticast mode
[  609.026566][ T9832] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[9832]
[  611.045734][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'.
[  613.888974][ T9845] autofs: Bad value for 'fd'
[  620.976178][ T5882] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  621.167803][ T5882] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  621.201574][ T5882] usb 3-1: config 0 has no interface number 0
[  621.226177][ T5882] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  621.256797][ T5882] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  621.572159][ T5882] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58
[  621.596203][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.604290][ T5882] usb 3-1: Product: syz
[  621.676229][ T5882] usb 3-1: Manufacturer: syz
[  621.693086][ T5882] usb 3-1: SerialNumber: syz
[  621.718251][ T5882] usb 3-1: config 0 descriptor??
[  621.744014][ T5882] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input7
[  621.959354][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'.
[  622.236276][ T5877] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  622.429483][ T5877] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  622.463570][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.489301][ T5877] usb 2-1: Product: syz
[  622.493528][ T5877] usb 2-1: Manufacturer: syz
[  622.498315][ T5877] usb 2-1: SerialNumber: syz
[  622.505348][ T5877] usb 2-1: config 0 descriptor??
[  622.519128][ T5877] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  622.529527][ T5877] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[  622.548783][ T5877] usb-storage 2-1:0.0: USB Mass Storage device detected
[  622.573150][ T5877] usb-storage 2-1:0.0: device ignored
[  622.745031][ T5882] usb 2-1: USB disconnect, device number 14
[  624.270527][ T5881] usb 3-1: USB disconnect, device number 18
[  624.667697][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  624.686209][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  627.476446][ T5881] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  627.686164][ T9971] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[9971]
[  627.710235][ T5881] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  627.741016][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.934382][ T5881] usb 4-1: config 0 descriptor??
[  628.276372][ T5881] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  628.295371][ T5881] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  628.355691][ T5881] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  628.395015][ T5881] [drm] Initialized udl on minor 2
[  628.527220][ T5881] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  628.641915][ T5881] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  628.725206][ T5921] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  628.779037][ T5881] usb 4-1: USB disconnect, device number 11
[  628.821468][ T5921] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  629.534842][ T9987] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[9987]
[  629.651498][ T5877] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  630.136202][ T5877] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  630.144466][ T5877] usb 3-1: config 0 has no interface number 0
[  630.196191][ T5877] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  630.229106][ T5877] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  630.271398][ T5877] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58
[  630.296449][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.314788][ T5877] usb 3-1: Product: syz
[  630.319429][ T5877] usb 3-1: Manufacturer: syz
[  630.329558][ T5877] usb 3-1: SerialNumber: syz
[  630.347314][ T5877] usb 3-1: config 0 descriptor??
[  630.385711][ T5877] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input8
[  630.709423][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'.
[  632.061602][T10001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1018'.
[  632.481370][ T5921] usb 3-1: USB disconnect, device number 19
[  633.632630][T10017] ptrace attach of "./syz-executor exec"[7065] was attempted by "./syz-executor exec"[10017]
[  635.889020][ T9972] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  637.019275][ T9972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.298177][ T9972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  637.363390][ T9972] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  637.443351][ T9972] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  637.498303][ T9972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.612605][ T9972] usb 4-1: config 0 descriptor??
[  637.757065][T10035] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1028'.
[  638.203990][ T9972] usbhid 4-1:0.0: can't add hid device: -71
[  638.220229][ T9972] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  638.294649][ T9972] usb 4-1: USB disconnect, device number 12
[  639.842921][T10054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1034'.
[  640.092871][   T30] audit: type=1326 audit(1742730521.426:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10048 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9d8d169 code=0x7ffc0000
[  640.879194][ T5878] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  640.979737][   T30] audit: type=1326 audit(1742730521.426:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10048 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9d8d169 code=0x7ffc0000
[  641.036192][ T5878] usb 3-1: Using ep0 maxpacket: 32
[  641.054493][   T30] audit: type=1326 audit(1742730521.436:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10048 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbaa9d8d169 code=0x7ffc0000
[  641.058013][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.186232][   T30] audit: type=1326 audit(1742730521.436:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10048 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  641.208682][   T30] audit: type=1326 audit(1742730521.436:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10048 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9d8d169 code=0x7ffc0000
[  641.233782][   T30] audit: type=1326 audit(1742730521.436:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10048 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9d8d169 code=0x7ffc0000
[  641.270661][T10061] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[10061]
[  641.686868][ T5878] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  642.226242][ T5878] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d
[  642.244714][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.307187][ T5878] usb 3-1: config 0 descriptor??
[  642.536278][ T5880] usb 3-1: USB disconnect, device number 20
[  643.763399][T10070] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  644.146965][T10070] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  644.578544][T10076] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1040'.
[  646.906372][ T5877] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  647.979336][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short
[  648.010639][ T5877] usb 4-1: not running at top speed; connect to a high speed hub
[  648.033763][ T5877] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  648.054537][ T5877] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  648.072852][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  648.082316][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  648.110831][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  648.139869][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.192337][ T5877] usb 4-1: Product: syz
[  648.202563][ T5877] usb 4-1: Manufacturer: syz
[  648.221385][ T5877] usb 4-1: SerialNumber: syz
[  648.641842][ T5877] usb 4-1: 0:2 : does not exist
[  648.748025][ T5877] usb 4-1: USB disconnect, device number 13
[  649.662417][ T9457] udevd[9457]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  651.057002][ T5921] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  651.807621][ T5921] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  651.817754][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.843283][ T5921] usb 1-1: config 0 descriptor??
[  652.223618][ T5921] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  652.341469][ T5921] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  652.747189][ T5921] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  652.747220][ T5921] [drm] Initialized udl on minor 2
[  652.748134][ T5921] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  652.748365][ T5921] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  653.289582][ T5921] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  653.309360][ T5880] usb 1-1: USB disconnect, device number 19
[  653.371075][ T5921] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  653.413628][ T5921] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  654.715428][T10167] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1063'.
[  656.967364][T10179] ALSA: mixer_oss: invalid OSS volume 'u'
[  659.061918][ T5880] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  659.257019][ T5880] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  659.290444][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.316189][ T5880] usb 4-1: Product: syz
[  659.324508][ T5880] usb 4-1: Manufacturer: syz
[  659.341335][ T5880] usb 4-1: SerialNumber: syz
[  659.356995][ T5880] usb 4-1: config 0 descriptor??
[  659.390002][ T5880] gspca_main: sq905c-2.14.0 probing 2770:9052
[  660.558008][ T5880] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  660.565531][ T5880] sq905c 4-1:0.0: Get version command failed
[  660.572856][T10220] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1079'.
[  660.584491][ T5880] sq905c 4-1:0.0: probe with driver sq905c failed with error -110
[  661.775612][    T9] usb 4-1: USB disconnect, device number 14
[  663.006369][T10235] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10235]
[  663.705700][T10240] netdevsim netdevsim5: Direct firmware load for .
[  663.705700][T10240]  failed with error -2
[  663.716938][T10240] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  663.716938][T10240] 
[  667.957988][ T5921] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  668.023273][T10280] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1098'.
[  668.965202][ T5921] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  668.974430][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.983181][ T5921] usb 4-1: Product: syz
[  668.993041][ T5921] usb 4-1: Manufacturer: syz
[  669.003391][ T5921] usb 4-1: SerialNumber: syz
[  669.032168][ T5921] usb 4-1: config 0 descriptor??
[  669.242898][ T5921] gspca_main: sq905c-2.14.0 probing 2770:9052
[  669.279576][ T5921] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  669.287074][ T5921] sq905c 4-1:0.0: Get version command failed
[  670.256173][ T5921] sq905c 4-1:0.0: probe with driver sq905c failed with error -71
[  670.270102][ T5921] usb 4-1: USB disconnect, device number 15
[  670.303324][ T9457] udevd[9457]: setting owner of /dev/bus/usb/004/015 to uid=0, gid=0 failed: No such file or directory
[  673.908276][ T5880] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  675.002334][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short
[  675.043596][ T5880] usb 4-1: not running at top speed; connect to a high speed hub
[  675.078034][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  675.106250][ T5880] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 4
[  675.176545][ T5880] usb 4-1: config 1 interface 1 has no altsetting 0
[  675.197790][ T5880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  675.215850][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.225386][ T5880] usb 4-1: Product: syz
[  675.244389][ T5880] usb 4-1: Manufacturer: syz
[  675.250895][ T5880] usb 4-1: SerialNumber: syz
[  675.483506][ T5880] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc
[  675.535638][ T5880] usb 4-1: USB disconnect, device number 16
[  676.025231][ T9457] udevd[9457]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  676.176558][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  676.338273][    T9] usb 3-1: Using ep0 maxpacket: 16
[  676.359919][    T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  676.396516][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  676.426126][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  676.471275][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  676.494227][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.986760][    T9] usb 3-1: Product: syz
[  677.006269][    T9] usb 3-1: Manufacturer: syz
[  677.021300][    T9] usb 3-1: SerialNumber: syz
[  677.161159][T10336] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1113'.
[  677.311615][ T5843] Bluetooth: hci5: command 0x0405 tx timeout
[  678.430031][    T9] usb 3-1: 0:2 : does not exist
[  678.816252][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  679.104975][    T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  679.282507][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.371347][    T9] usb 2-1: Product: syz
[  679.415657][    T9] usb 2-1: Manufacturer: syz
[  679.464703][    T9] usb 2-1: SerialNumber: syz
[  679.571962][    T9] usb 2-1: config 0 descriptor??
[  679.908305][    T9] gspca_main: sq905c-2.14.0 probing 2770:9052
[  680.075972][ T5878] usb 3-1: USB disconnect, device number 21
[  680.116000][    T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  680.156248][    T9] sq905c 2-1:0.0: Get version command failed
[  680.182158][    T9] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  680.223139][    T9] usb 2-1: USB disconnect, device number 15
[  683.986190][ T5921] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  685.523160][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  686.029339][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  686.035699][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  686.536244][ T5921] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  686.546469][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  686.558187][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  686.720130][ T5921] usb 6-1: string descriptor 0 read error: -71
[  686.732360][ T5921] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  686.762482][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.803071][ T5921] usb 6-1: config 0 descriptor??
[  686.853454][ T5921] usb 6-1: can't set config #0, error -71
[  686.952682][ T5921] usb 6-1: USB disconnect, device number 8
[  688.097126][ T5921] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  688.342749][ T5921] usb 6-1: unable to get BOS descriptor or descriptor too short
[  688.351906][ T5921] usb 6-1: not running at top speed; connect to a high speed hub
[  688.377463][ T5921] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  688.417364][ T5921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 4
[  688.455142][ T5921] usb 6-1: config 1 interface 1 has no altsetting 0
[  688.473965][ T5921] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  688.483605][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.516301][ T5911] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  688.526540][ T5921] usb 6-1: Product: syz
[  688.593776][T10412] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[10412]
[  688.910417][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'.
[  689.062389][ T5921] usb 6-1: Manufacturer: syz
[  689.076997][ T5921] usb 6-1: SerialNumber: syz
[  689.230031][ T5911] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  689.267539][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.316408][ T5911] usb 1-1: Product: syz
[  689.320974][ T5911] usb 1-1: Manufacturer: syz
[  689.325634][ T5911] usb 1-1: SerialNumber: syz
[  689.535002][ T5921] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc
[  689.555358][ T5911] usb 1-1: config 0 descriptor??
[  690.956591][ T5911] gspca_main: sq905c-2.14.0 probing 2770:9052
[  691.139040][ T5921] usb 6-1: USB disconnect, device number 9
[  692.085951][ T5911] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  692.649953][ T5911] sq905c 1-1:0.0: Get version command failed
[  692.732305][ T5911] sq905c 1-1:0.0: probe with driver sq905c failed with error -71
[  692.775791][ T5911] usb 1-1: USB disconnect, device number 20
[  692.840409][T10432] ptrace attach of "./syz-executor exec"[7065] was attempted by "./syz-executor exec"[10432]
[  692.938166][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1140'.
[  693.337189][ T9457] udevd[9457]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  693.715687][T10435] overlayfs: failed to resolve './file0': -2
[  695.648234][T10452] ptrace attach of "./syz-executor exec"[7065] was attempted by "./syz-executor exec"[10452]
[  699.126291][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1149'.
[  699.346785][T10469] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10469]
[  700.284682][T10477] 9pnet_virtio: no channels available for device 127.0.0.1
[  703.440870][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  703.471031][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  703.483830][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  703.507983][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  703.524071][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  703.534993][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  704.408581][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  704.419130][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  705.207376][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  705.217638][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  705.225203][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  705.234275][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  705.301328][T10514] Bluetooth: MGMT ver 1.23
[  705.626387][ T5839] Bluetooth: hci0: command tx timeout
[  706.471940][T10505] chnl_net:caif_netlink_parms(): no params data found
[  707.085434][T10544] process 'syz.0.1171' launched './file0' with NULL argv: empty string added
[  707.108314][T10544] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  707.314284][ T5839] Bluetooth: hci4: command tx timeout
[  707.706155][ T5839] Bluetooth: hci0: command tx timeout
[  707.729785][T10505] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.753935][T10505] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.775827][T10505] bridge_slave_0: entered allmulticast mode
[  707.784819][T10505] bridge_slave_0: entered promiscuous mode
[  707.794374][T10513] chnl_net:caif_netlink_parms(): no params data found
[  707.828848][T10505] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.836000][T10505] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.843738][T10505] bridge_slave_1: entered allmulticast mode
[  707.851243][T10505] bridge_slave_1: entered promiscuous mode
[  707.961088][T10505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  708.387741][T10505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  708.436562][ T5921] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  708.565921][ T9279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.759442][ T5921] usb 6-1: Using ep0 maxpacket: 32
[  708.831623][ T5921] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  708.890841][ T5921] usb 6-1: config 0 has no interface number 0
[  708.907735][ T5921] usb 6-1: config 0 interface 184 has no altsetting 0
[  708.949603][ T5921] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  708.959458][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.967713][ T5921] usb 6-1: Product: syz
[  708.972364][ T5921] usb 6-1: Manufacturer: syz
[  708.980003][ T5921] usb 6-1: SerialNumber: syz
[  709.080224][ T5921] usb 6-1: config 0 descriptor??
[  709.126820][ T5921] smsc75xx v1.0.0
[  709.150853][ T9279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.224754][T10505] team0: Port device team_slave_0 added
[  709.324871][ T9279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.338702][ T5921] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  709.353946][ T5921] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  709.373788][T10505] team0: Port device team_slave_1 added
[  709.380749][ T5921] usb 6-1: USB disconnect, device number 10
[  709.387379][ T5839] Bluetooth: hci4: command tx timeout
[  709.568330][T10513] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.579224][T10513] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.605745][T10513] bridge_slave_0: entered allmulticast mode
[  709.631808][T10513] bridge_slave_0: entered promiscuous mode
[  709.702433][ T9279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.672958][ T5839] Bluetooth: hci0: command tx timeout
[  710.711181][T10513] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.719485][T10513] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.727808][T10513] bridge_slave_1: entered allmulticast mode
[  711.466145][ T5839] Bluetooth: hci4: command tx timeout
[  711.847412][T10513] bridge_slave_1: entered promiscuous mode
[  711.870677][T10505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  711.951453][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  711.979496][T10505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  712.164005][T10513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  712.184686][T10505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  712.204030][    T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  712.205658][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.315341][T10505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  712.400715][T10505] hsr_slave_0: entered promiscuous mode
[  712.413503][T10505] hsr_slave_1: entered promiscuous mode
[  712.423109][T10505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  712.437153][T10505] Cannot create hsr debugfs directory
[  712.458259][T10513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.507622][T10513] team0: Port device team_slave_0 added
[  712.600716][T10513] team0: Port device team_slave_1 added
[  712.756826][ T5839] Bluetooth: hci0: command tx timeout
[  713.239756][T10513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.266319][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.303721][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[  713.313621][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  713.326237][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  713.351672][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  713.366232][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.374275][    T9] usb 1-1: Product: syz
[  713.386587][T10513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.401830][    T9] usb 1-1: Manufacturer: syz
[  713.409744][    T9] usb 1-1: SerialNumber: syz
[  713.433911][T10574] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  713.456826][T10574] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  713.457434][T10513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.502305][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.536602][T10513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.547635][ T5839] Bluetooth: hci4: command tx timeout
[  713.575699][ T9279] bridge_slave_1: left allmulticast mode
[  713.586232][ T9279] bridge_slave_1: left promiscuous mode
[  713.595602][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.614316][ T9279] bridge_slave_0: left allmulticast mode
[  713.620127][ T9279] bridge_slave_0: left promiscuous mode
[  713.626677][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.692397][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1184'.
[  713.773468][    T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  713.796361][    T9] usb 1-1: USB disconnect, device number 21
[  715.198837][ T9279] team0: Port device geneve0 removed
[  715.293886][T10602] CUSE: unknown device info "ÿ
"
[  715.299099][T10602] CUSE: zero length info key specified
[  717.054355][ T9279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  717.067483][ T9279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  717.078670][ T9279] bond0 (unregistering): Released all slaves
[  719.037407][T10513] hsr_slave_0: entered promiscuous mode
[  719.045524][T10513] hsr_slave_1: entered promiscuous mode
[  719.055719][T10513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  719.081008][T10513] Cannot create hsr debugfs directory
[  719.936347][ T9972] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  720.124832][ T9972] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  720.149609][ T5878] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  720.218850][ T9972] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  720.241067][ T9972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  720.344404][ T5878] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  720.381268][ T5878] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  720.444593][T10505] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  720.751635][ T5878] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  721.132967][T10505] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  721.146378][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0
[  721.154434][ T5878] usb 6-1: Product: syz
[  721.185202][T10505] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  721.210656][ T9972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  721.221751][ T9972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  721.230175][T10630] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  721.236190][ T9972] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  721.250927][ T9972] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  721.276427][T10630] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  721.291700][ T9972] usb 3-1: Product: syz
[  721.295937][ T9972] usb 3-1: Manufacturer: syz
[  721.309258][ T5878] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  721.340703][ T9972] cdc_wdm 3-1:1.0: skipping garbage
[  721.345968][ T9972] cdc_wdm 3-1:1.0: skipping garbage
[  721.368262][ T9972] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  721.374388][ T9972] cdc_wdm 3-1:1.0: Unknown control protocol
[  721.419672][T10505] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  721.793646][T10630] netlink: 187320 bytes leftover after parsing attributes in process `syz.5.1194'.
[  721.803078][T10630] netlink: zone id is out of range
[  721.848997][ T5878] usb 6-1: USB disconnect, device number 11
[  722.415967][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE
[  722.461257][  T877] usb 3-1: USB disconnect, device number 22
[  722.532200][ T9279] hsr_slave_0: left promiscuous mode
[  722.583666][T10649] block device autoloading is deprecated and will be removed.
[  722.602869][ T9279] hsr_slave_1: left promiscuous mode
[  722.623404][ T9279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.634964][ T9279] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.655592][T10649] syz.0.1196: attempt to access beyond end of device
[  722.655592][T10649] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  722.673908][ T9279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.726467][ T9279] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.769308][T10652] udevd[10652]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  722.878579][ T9279] veth1_macvtap: left promiscuous mode
[  722.936283][ T9279] veth0_macvtap: left promiscuous mode
[  723.064522][ T9279] veth1_vlan: left promiscuous mode
[  725.870397][ T9279] team0 (unregistering): Port device team_slave_1 removed
[  725.930031][ T9279] team0 (unregistering): Port device team_slave_0 removed
[  726.650688][T10513] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  726.719726][T10513] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  726.974860][T10693] hub 9-0:1.0: USB hub found
[  726.981103][T10693] hub 9-0:1.0: 1 port detected
[  727.033950][T10513] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  727.054030][T10513] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  727.960698][T10505] 8021q: adding VLAN 0 to HW filter on device bond0
[  728.062432][T10505] 8021q: adding VLAN 0 to HW filter on device team0
[  728.192288][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.199424][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  728.232143][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.239348][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.413667][T10513] 8021q: adding VLAN 0 to HW filter on device bond0
[  728.506564][T10720] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1209'.
[  729.275260][T10505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  729.315200][T10513] 8021q: adding VLAN 0 to HW filter on device team0
[  729.432075][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.439293][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.472618][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.479840][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  731.726719][T10745] openvswitch: netlink: IPv4 tun info is not correct
[  732.625104][T10505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  732.668549][T10747] 9pnet_virtio: no channels available for device 127.0.0.1
[  732.828736][T10513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  734.732671][T10505] veth0_vlan: entered promiscuous mode
[  734.811582][T10505] veth1_vlan: entered promiscuous mode
[  734.871690][T10513] veth0_vlan: entered promiscuous mode
[  734.918274][T10505] veth0_macvtap: entered promiscuous mode
[  734.966682][T10505] veth1_macvtap: entered promiscuous mode
[  734.986473][T10513] veth1_vlan: entered promiscuous mode
[  735.073696][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  735.113269][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.126535][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  735.146666][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.176161][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  735.215408][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.256186][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  735.274092][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.333001][T10786] syz.0.1219 (10786): drop_caches: 2
[  735.338003][T10505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  735.452616][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  735.485588][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.505832][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  735.545760][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.566318][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  735.603966][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.624600][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  735.645639][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  735.671883][T10505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  735.708594][T10505] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  735.735656][T10505] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  735.756122][T10505] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  735.794307][T10505] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  735.824585][T10513] veth0_macvtap: entered promiscuous mode
[  736.059520][T10818] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  736.080121][T10817] bridge0: port 3(team0) entered blocking state
[  736.087339][T10817] bridge0: port 3(team0) entered disabled state
[  736.097021][T10817] team0: entered allmulticast mode
[  736.102421][T10817] team_slave_0: entered allmulticast mode
[  736.109094][T10817] team_slave_1: entered allmulticast mode
[  736.114983][T10817] geneve0: entered allmulticast mode
[  736.156868][T10817] team0: entered promiscuous mode
[  736.162174][T10817] team_slave_0: entered promiscuous mode
[  736.170192][T10817] team_slave_1: entered promiscuous mode
[  736.178413][T10817] geneve0: entered promiscuous mode
[  736.206937][T10817] bridge0: port 3(team0) entered blocking state
[  736.213548][T10817] bridge0: port 3(team0) entered forwarding state
[  736.352999][T10513] veth1_macvtap: entered promiscuous mode
[  736.575413][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  736.607072][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.636118][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  736.652891][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.669328][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  736.685358][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.699001][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  736.714744][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.765725][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  736.795084][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.844286][T10513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  736.931200][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  737.770209][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  737.796119][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  737.837107][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  737.881285][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  737.935698][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  737.957693][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  737.994266][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.046268][T10513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  738.093861][T10513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.168588][T10513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  740.001395][T10513] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  740.032279][T10513] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  740.041905][T10513] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  740.060711][T10513] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  740.689825][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  740.727593][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  740.814131][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  740.833149][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  740.857218][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  740.875077][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  740.984300][ T6100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.028185][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.948758][T10878] netlink: 'syz.7.1159': attribute type 2 has an invalid length.
[  741.978611][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1159'.
[  745.390134][T10908] 9pnet_fd: p9_fd_create_tcp (10908): problem connecting socket to 127.0.0.1
[  747.389164][T10934] Illegal XDP return value 4294967274 on prog  (id 180) dev syz_tun, expect packet loss!
[  747.468700][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  747.475061][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  749.596218][ T5878] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  749.815726][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  749.828172][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  749.859171][ T5878] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  749.925114][ T5878] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  749.977574][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.031884][ T5878] usb 8-1: config 0 descriptor??
[  750.868815][ T5878] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  750.912767][ T5878] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  752.204531][ T9972] usb 8-1: USB disconnect, device number 2
[  752.679662][T10989] tipc: Started in network mode
[  752.684770][T10989] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  752.692886][T10989] tipc: Enabled bearer <eth:team0>, priority 0
[  753.808626][    T9] tipc: Node number set to 11578026
[  755.154857][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1270'.
[  755.204325][T11003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  755.351045][T11003] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  757.267630][T11029] No control pipe specified
[  757.591605][ T9972] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  757.606503][ T5878] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  757.777838][ T5878] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  757.792872][ T5878] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  757.806291][ T9972] usb 3-1: Using ep0 maxpacket: 8
[  757.826862][ T9972] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  757.839812][ T5878] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  757.850592][ T9972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.867013][ T5878] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  757.881404][ T9972] usb 3-1: config 0 descriptor??
[  757.890351][ T5878] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  757.964422][ T5878] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  757.991324][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  758.020917][ T5878] usb 8-1: Product: syz
[  758.025177][ T5878] usb 8-1: Manufacturer: syz
[  758.072379][ T5878] cdc_wdm 8-1:1.0: skipping garbage
[  758.099231][ T5878] cdc_wdm 8-1:1.0: skipping garbage
[  758.124991][ T5878] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  758.145238][ T9972] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  758.155449][ T5878] cdc_wdm 8-1:1.0: Unknown control protocol
[  758.500739][ T5881] usb 8-1: USB disconnect, device number 3
[  758.646233][ T5878] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  758.748814][ T9972] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  758.786120][ T9972] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  758.828495][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  758.859572][ T5878] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  758.882640][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.927731][ T5878] usb 1-1: config 0 descriptor??
[  758.960809][ T5878] pwc: Askey VC010 type 2 USB webcam detected.
[  759.049318][ T9972] asix 3-1:0.0: probe with driver asix failed with error -71
[  759.061041][ T9972] usb 3-1: USB disconnect, device number 23
[  759.676865][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00
[  760.074344][ T5878] pwc: recv_control_msg error -71 req 02 val 2c00
[  760.082065][ T5878] pwc: recv_control_msg error -71 req 04 val 1000
[  760.093707][ T5878] pwc: recv_control_msg error -71 req 04 val 1300
[  760.116181][ T5878] pwc: recv_control_msg error -71 req 04 val 1400
[  760.123124][ T5878] pwc: recv_control_msg error -71 req 02 val 2000
[  760.133340][ T5878] pwc: recv_control_msg error -71 req 02 val 2100
[  760.152603][ T5878] pwc: recv_control_msg error -71 req 04 val 1500
[  760.239726][ T5878] pwc: recv_control_msg error -71 req 02 val 2500
[  760.291502][ T5878] pwc: recv_control_msg error -71 req 02 val 2400
[  761.002338][ T5878] pwc: recv_control_msg error -71 req 02 val 2600
[  761.386252][ T5878] pwc: recv_control_msg error -71 req 02 val 2900
[  761.466347][ T5878] pwc: recv_control_msg error -71 req 02 val 2800
[  761.506279][ T5878] pwc: recv_control_msg error -71 req 04 val 1100
[  761.513782][ T5878] pwc: recv_control_msg error -71 req 04 val 1200
[  761.542399][ T5878] pwc: Registered as video103.
[  761.549031][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  762.636335][T11097] delete_channel: no stack
[  762.937540][ T5878] usb 1-1: USB disconnect, device number 22
[  763.283698][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1295'.
[  766.579821][T11141] input input10: cannot allocate more than FF_MAX_EFFECTS effects
[  767.123571][T11146] overlayfs: failed to resolve './file1': -2
[  768.409852][T11154] tipc: Started in network mode
[  768.446395][T11154] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  768.480720][T11154] tipc: Enabled bearer <eth:team0>, priority 0
[  769.607596][ T5880] tipc: Node number set to 11578026
[  771.419525][T11188] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  771.434491][T11188] batman_adv: batadv0: Adding interface: ip6gretap1
[  771.441320][T11188] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.467299][T11188] batman_adv: batadv0: Interface activated: ip6gretap1
[  772.916481][ T9972] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  773.316087][ T9972] usb 1-1: Using ep0 maxpacket: 8
[  773.340718][ T9972] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  773.368386][ T9972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.440402][ T9972] usb 1-1: config 0 descriptor??
[  773.654680][ T9972] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  774.104286][ T9972] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  774.131183][ T9972] asix 1-1:0.0: probe with driver asix failed with error -71
[  774.192334][ T9972] usb 1-1: USB disconnect, device number 23
[  774.608128][T11222] tipc: Started in network mode
[  774.677125][T11222] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  774.733259][T11222] tipc: Enabled bearer <eth:team0>, priority 0
[  775.726122][ T9972] tipc: Node number set to 11578026
[  777.793472][ T5865] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  777.876397][ T9972] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  777.968207][ T5865] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  777.983847][ T5865] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  777.993717][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.009032][ T5865] usb 8-1: config 0 descriptor??
[  778.020540][ T5865] pwc: Askey VC010 type 2 USB webcam detected.
[  778.046242][ T9972] usb 6-1: Using ep0 maxpacket: 8
[  778.053213][ T9972] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  778.066113][ T9972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.076644][ T9972] usb 6-1: config 0 descriptor??
[  778.447192][ T9972] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  778.647965][ T5865] pwc: recv_control_msg error -32 req 02 val 2700
[  778.717829][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00
[  778.784797][ T5865] pwc: recv_control_msg error -32 req 04 val 1000
[  778.862711][ T9972] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  778.911084][ T5865] pwc: recv_control_msg error -32 req 04 val 1300
[  778.930356][ T9972] asix 6-1:0.0: probe with driver asix failed with error -71
[  778.960049][ T5865] pwc: recv_control_msg error -32 req 04 val 1400
[  779.031578][ T9972] usb 6-1: USB disconnect, device number 12
[  779.037901][ T5865] pwc: recv_control_msg error -32 req 02 val 2000
[  779.464153][ T5865] pwc: recv_control_msg error -71 req 04 val 1500
[  779.473166][ T5865] pwc: recv_control_msg error -71 req 02 val 2500
[  779.481098][ T5865] pwc: recv_control_msg error -71 req 02 val 2400
[  779.489010][ T5865] pwc: recv_control_msg error -71 req 02 val 2600
[  779.496237][ T5865] pwc: recv_control_msg error -71 req 02 val 2900
[  779.503063][ T5865] pwc: recv_control_msg error -71 req 02 val 2800
[  779.510178][ T5865] pwc: recv_control_msg error -71 req 04 val 1100
[  779.518080][ T5865] pwc: recv_control_msg error -71 req 04 val 1200
[  779.582478][ T5865] pwc: Registered as video103.
[  779.666702][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11
[  779.850266][ T5865] usb 8-1: USB disconnect, device number 4
[  783.333997][T11325] binfmt_misc: Unknown parameter 'fd'
[  785.144998][T11346] tipc: Enabled bearer <eth:syz_tun>, priority 10
[  785.156358][T11350] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.1359'.
[  785.236498][T11350] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  785.263088][T11346] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1360'.
[  785.447410][T11346] tipc: Resetting bearer <eth:syz_tun>
[  785.644453][T11346] tipc: Disabling bearer <eth:syz_tun>
[  785.742106][T11355] syz.6.1363: attempt to access beyond end of device
[  785.742106][T11355] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  786.120060][T11369] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  786.486477][ T5881] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  786.737191][ T5881] usb 8-1: Using ep0 maxpacket: 16
[  786.872627][ T5881] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  787.023950][ T5881] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  787.197744][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.853118][ T5881] usb 8-1: config 0 descriptor??
[  788.118274][T11388] program syz.2.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  788.754999][ T5881] ryos 0003:1E7D:3138.0005: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.7-1/input0
[  788.876226][ T5881] usb 8-1: USB disconnect, device number 5
[  789.086807][T11400] bridge0: port 3(team0) entered blocking state
[  789.093948][T11400] bridge0: port 3(team0) entered disabled state
[  789.102721][T11400] team0: entered allmulticast mode
[  789.108199][T11400] team_slave_0: entered allmulticast mode
[  789.114104][T11400] team_slave_1: entered allmulticast mode
[  789.151848][T11400] team0: entered promiscuous mode
[  789.157227][T11400] team_slave_0: entered promiscuous mode
[  789.165037][T11400] team_slave_1: entered promiscuous mode
[  789.176963][T11400] bridge0: port 3(team0) entered blocking state
[  789.183421][T11400] bridge0: port 3(team0) entered forwarding state
[  789.243437][T11400] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  790.022347][T11409] syz.5.1375: attempt to access beyond end of device
[  790.022347][T11409] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  790.956687][T11416] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1378'.
[  791.049731][T11416] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  792.798655][ T5880] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  793.716173][ T5880] usb 1-1: Using ep0 maxpacket: 8
[  793.741372][ T5880] usb 1-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30
[  793.794276][ T5880] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  793.848128][ T5880] usb 1-1: config 0 interface 0 has no altsetting 0
[  793.882540][ T5839] Bluetooth: hci5: unexpected event for opcode 0x0406
[  793.912385][ T5880] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  793.973520][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.997142][ T5880] usb 1-1: config 0 descriptor??
[  794.309552][T11460] syz.5.1391: attempt to access beyond end of device
[  794.309552][T11460] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  794.683451][ T5880] kye 0003:0458:5011.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  795.334239][T11462] delete_channel: no stack
[  795.471850][ T5880] kye 0003:0458:5011.0006: unknown main item tag 0x0
[  795.478699][ T5880] kye 0003:0458:5011.0006: unknown main item tag 0x0
[  795.485465][ T5880] kye 0003:0458:5011.0006: unknown main item tag 0x0
[  795.495289][ T5880] kye 0003:0458:5011.0006: unknown main item tag 0x0
[  795.502134][ T5880] kye 0003:0458:5011.0006: unknown main item tag 0x0
[  795.510692][ T5880] kye 0003:0458:5011.0006: hidraw0: USB HID v0.05 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[  795.521720][ T5880] kye 0003:0458:5011.0006: tablet-enabling feature report not found
[  795.566153][ T5880] kye 0003:0458:5011.0006: tablet enabling failed
[  795.603215][ T5880] usb 1-1: USB disconnect, device number 24
[  800.434698][T11497] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.1398'.
[  808.919699][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  809.616238][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  815.676730][T11603] usb usb1: usbfs: process 11603 (syz.6.1421) did not claim interface 0 before use
[  820.887048][T11627] delete_channel: no stack
[  822.091820][T11645] 9pnet_fd: p9_fd_create_tcp (11645): problem connecting socket to 127.0.0.1
[  822.710512][T11650] bridge0: port 3(team0) entered blocking state
[  822.711121][T11650] bridge0: port 3(team0) entered disabled state
[  822.713228][T11650] team0: entered allmulticast mode
[  822.713356][T11650] team_slave_0: entered allmulticast mode
[  822.713537][T11650] team_slave_1: entered allmulticast mode
[  822.713682][T11650] geneve0: entered allmulticast mode
[  822.753024][T11650] team0: entered promiscuous mode
[  822.753186][T11650] team_slave_0: entered promiscuous mode
[  822.754829][T11650] team_slave_1: entered promiscuous mode
[  822.756744][T11650] geneve0: entered promiscuous mode
[  822.763735][T11650] bridge0: port 3(team0) entered blocking state
[  822.763861][T11650] bridge0: port 3(team0) entered forwarding state
[  826.775635][T11661] Bluetooth: hci0: command 0x0406 tx timeout
[  826.982131][T11682] delete_channel: no stack
[  829.080046][   T30] audit: type=1326 audit(1742730710.416:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff461d8d169 code=0x7ffc0000
[  829.191556][   T30] audit: type=1326 audit(1742730710.426:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff461d8d169 code=0x7ffc0000
[  829.197007][ T5195] udevd[5195]: worker [10653] terminated by signal 33 (Unknown signal 33)
[  829.212988][    C1] vkms_vblank_simulate: vblank timer overrun
[  829.318463][   T30] audit: type=1326 audit(1742730710.456:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff461d8d169 code=0x7ffc0000
[  829.372886][ T5195] udevd[5195]: worker [10653] failed while handling '/devices/virtual/misc/kvm'
[  829.391030][ T9972] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  829.443037][   T30] audit: type=1326 audit(1742730710.486:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff461d8d169 code=0x7ffc0000
[  829.472666][   T30] audit: type=1326 audit(1742730710.486:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff461d8d169 code=0x7ffc0000
[  829.472713][   T30] audit: type=1326 audit(1742730710.486:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff461d8d169 code=0x7ffc0000
[  829.472751][   T30] audit: type=1326 audit(1742730710.486:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff461d84127 code=0x7ffc0000
[  829.472788][   T30] audit: type=1326 audit(1742730710.486:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff461d29359 code=0x7ffc0000
[  829.472823][   T30] audit: type=1326 audit(1742730710.486:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7ff461d8d169 code=0x7ffc0000
[  829.472860][   T30] audit: type=1326 audit(1742730710.486:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.7.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff461d84127 code=0x7ffc0000
[  829.754858][ T9972] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  829.755003][ T9972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.755183][ T9972] usb 6-1: Product: syz
[  829.755286][ T9972] usb 6-1: Manufacturer: syz
[  829.755386][ T9972] usb 6-1: SerialNumber: syz
[  830.013227][ T9972] usb 6-1: config 0 descriptor??
[  830.109415][ T9972] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 013
[  830.808553][ T9972]  (null): failure setting delay to 10us
[  830.808613][ T9972] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  830.813094][ T9972] usb 6-1: USB disconnect, device number 13
[  830.971946][T11738] QAT: failed to copy from user cfg_data.
[  838.638521][T11821] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1479'.
[  840.841418][ T9972] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  841.719113][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  841.890583][ T5878] libceph: connect (1)[c::]:6789 error -101
[  841.946463][ T9972] usb 1-1: Using ep0 maxpacket: 16
[  842.136782][ T9972] usb 1-1: unable to get BOS descriptor or descriptor too short
[  842.186506][ T9972] usb 1-1: config 9 has an invalid interface number: 212 but max is 0
[  842.231048][ T9972] usb 1-1: config 9 has no interface number 0
[  842.275301][ T9972] usb 1-1: config 9 interface 212 has no altsetting 0
[  842.300051][T11853] ceph: No mds server is up or the cluster is laggy
[  842.309743][ T5878] libceph: mon0 (1)[c::]:6789 connect error
[  842.411050][ T9972] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=7f.22
[  842.422434][ T9972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.430579][ T9972] usb 1-1: Product: syz
[  842.435007][ T9972] usb 1-1: Manufacturer: syz
[  842.439764][ T9972] usb 1-1: SerialNumber: syz
[  842.503369][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1492'.
[  842.524340][T11870] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  842.676348][ T5878] libceph: connect (1)[c::]:6789 error -101
[  842.963078][ T5878] libceph: mon0 (1)[c::]:6789 connect error
[  843.134409][ T9972] ttusbir 1-1:9.212: cannot find expected altsetting
[  843.319331][ T9972] usb 1-1: USB disconnect, device number 25
[  843.899801][T11878] pimreg: entered allmulticast mode
[  843.944991][T11878] pimreg: left allmulticast mode
[  844.268829][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  847.488323][T11901] cifs: Unknown parameter 'p'
[  847.652598][T11884] Bluetooth: hci1: unexpected event for opcode 0x1003
[  847.866540][T11911] 9pnet_fd: p9_fd_create_tcp (11911): problem connecting socket to 127.0.0.1
[  848.482826][T11914] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1505'.
[  848.514211][T11914] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  849.704092][T11925] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  850.150491][T11927] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  852.000803][T11884] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  852.009772][T11884] Bluetooth: hci1: Injecting HCI hardware error event
[  852.019947][ T5843] Bluetooth: hci1: hardware error 0x00
[  852.653573][T11958] 9pnet_fd: p9_fd_create_tcp (11958): problem connecting socket to 127.0.0.1
[  852.872938][T11965] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.1517'.
[  854.614190][ T5843] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  854.648719][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  854.648734][   T30] audit: type=1804 audit(1742730735.676:20): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1515" name="/newroot/58/file0" dev="tmpfs" ino=319 res=1 errno=0
[  857.646728][T11951] uprobe: syz.6.1515:11951 failed to unregister, leaking uprobe
[  860.439814][T11951] uprobe: syz.6.1515:11951 failed to unregister, leaking uprobe
[  863.120964][T12011] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  864.036573][ T5865] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  864.814754][ T5865] usb 3-1: Using ep0 maxpacket: 32
[  864.868199][T12024] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  864.874584][ T5865] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  865.056537][ T5865] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  865.240248][ T5865] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  865.263044][ T5865] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  865.296059][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0
[  865.494749][ T5865] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  865.506240][ T5865] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  865.514724][ T5865] usb 3-1: Product: syz
[  865.521288][ T5865] usb 3-1: Manufacturer: syz
[  865.536056][ T5865] usb 3-1: SerialNumber: syz
[  865.543842][ T5865] usb 3-1: config 0 descriptor??
[  865.674764][ T5865] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  866.044306][ T5865] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  866.366550][ T5878] usb 3-1: USB disconnect, device number 24
[  866.398142][ T5878] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  866.623122][T12046] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  868.427899][T12042] syz.2.1543: attempt to access beyond end of device
[  868.427899][T12042] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  868.735928][T12061] bridge0: port 3(team0) entered blocking state
[  868.743530][T12061] bridge0: port 3(team0) entered disabled state
[  868.755245][T12061] team0: entered allmulticast mode
[  868.760521][T12061] team_slave_0: entered allmulticast mode
[  868.766501][T12061] team_slave_1: entered allmulticast mode
[  868.825267][T12061] team0: entered promiscuous mode
[  868.830497][T12061] team_slave_0: entered promiscuous mode
[  868.838242][T12061] team_slave_1: entered promiscuous mode
[  868.848456][T12063] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  868.849201][T12061] bridge0: port 3(team0) entered blocking state
[  868.863418][T12061] bridge0: port 3(team0) entered forwarding state
[  870.492842][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  873.719078][T12098] syz.0.1557: attempt to access beyond end of device
[  873.719078][T12098] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  874.249384][T12100] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  875.629993][T12112] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  875.637500][T12112] overlayfs: failed to set xattr on upper
[  875.643307][T12112] overlayfs: ...falling back to redirect_dir=nofollow.
[  875.650340][T12112] overlayfs: ...falling back to index=off.
[  875.656284][T12112] overlayfs: ...falling back to uuid=null.
[  875.662200][T12112] overlayfs: maximum fs stacking depth exceeded
[  876.124399][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1560'.
[  877.385303][T12126] 9pnet_fd: p9_fd_create_tcp (12126): problem connecting socket to 127.0.0.1
[  878.816503][T12137] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  879.419495][T12143] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  879.600711][ T5865] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  879.919585][ T5865] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  879.933437][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.132662][ T5865] usb 1-1: config 0 descriptor??
[  880.846975][ T5878] usb 1-1: USB disconnect, device number 26
[  881.033528][T12151] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.1573'.
[  881.085101][T12151] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  881.319361][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1574'.
[  882.636250][ T5865] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  883.236027][ T5865] usb 7-1: Using ep0 maxpacket: 8
[  883.266762][ T5865] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  883.275016][ T5865] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  883.455824][T12180] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  883.904828][T12173] 9pnet_fd: p9_fd_create_tcp (12173): problem connecting socket to 127.0.0.1
[  884.725338][ T5865] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  884.735335][ T5865] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  884.745377][ T5865] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  884.763890][ T5865] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  884.773065][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.881212][   T30] audit: type=1326 audit(1742730766.206:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  884.954392][   T30] audit: type=1326 audit(1742730766.216:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  884.976967][   T30] audit: type=1326 audit(1742730766.216:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  885.046121][ T5878] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  885.070955][ T5865] usb 7-1: usb_control_msg returned -71
[  885.116466][   T30] audit: type=1326 audit(1742730766.216:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  885.145165][ T5865] usbtmc 7-1:16.0: can't read capabilities
[  885.208907][   T30] audit: type=1326 audit(1742730766.216:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  885.234104][ T5865] usb 7-1: USB disconnect, device number 2
[  885.333085][ T5878] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  885.364691][ T5878] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  885.388128][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.755530][ T5878] usb 8-1: Product: syz
[  885.827407][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'.
[  886.321331][ T5878] usb 8-1: Manufacturer: syz
[  886.326368][   T30] audit: type=1326 audit(1742730766.226:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  886.347841][    C0] vkms_vblank_simulate: vblank timer overrun
[  886.378678][ T5878] usb 8-1: SerialNumber: syz
[  886.480858][   T30] audit: type=1326 audit(1742730766.226:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  886.605601][   T30] audit: type=1326 audit(1742730766.226:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  886.698903][   T30] audit: type=1326 audit(1742730766.226:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f538498d169 code=0x7ffc0000
[  886.821434][   T30] audit: type=1326 audit(1742730766.246:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12192 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53849bfa25 code=0x7ffc0000
[  887.146269][ T9972] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  887.431711][ T9972] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  887.477755][ T9972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.487052][ T5878] cdc_ncm 8-1:1.0: failed to get mac address
[  887.517514][ T9972] usb 3-1: config 0 descriptor??
[  887.782711][ T5878] cdc_ncm 8-1:1.0: bind() failure
[  888.460429][ T5881] usb 3-1: USB disconnect, device number 25
[  888.588552][ T5878] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71
[  888.607001][ T5878] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71
[  888.627412][ T5878] usbtest 8-1:1.1: probe with driver usbtest failed with error -71
[  888.664883][ T5878] usb 8-1: USB disconnect, device number 6
[  888.918231][T12222] bridge0: port 3(team0) entered blocking state
[  888.925588][T12222] bridge0: port 3(team0) entered disabled state
[  888.935622][T12222] team0: entered allmulticast mode
[  888.940915][T12222] team_slave_0: entered allmulticast mode
[  888.946825][T12222] team_slave_1: entered allmulticast mode
[  888.952656][T12222] geneve0: entered allmulticast mode
[  889.079611][T12224] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  889.451623][T12222] team0: entered promiscuous mode
[  889.456759][T12222] team_slave_0: entered promiscuous mode
[  889.462563][T12222] team_slave_1: entered promiscuous mode
[  889.468570][T12222] geneve0: entered promiscuous mode
[  889.475252][T12222] bridge0: port 3(team0) entered blocking state
[  889.481681][T12222] bridge0: port 3(team0) entered forwarding state
[  890.275794][  T877] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  890.766090][  T877] usb 8-1: Using ep0 maxpacket: 16
[  890.818738][  T877] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  890.862967][  T877] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  891.092537][  T877] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  891.118502][  T877] usb 8-1: config 1 has no interface number 1
[  891.124842][  T877] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  891.989450][  T877] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  892.004622][  T877] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  892.135496][  T877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.176109][  T877] usb 8-1: Product: syz
[  892.181655][  T877] usb 8-1: Manufacturer: syz
[  892.194666][  T877] usb 8-1: SerialNumber: syz
[  892.738073][T12250] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1601'.
[  892.871339][T12250] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  893.138448][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1600'.
[  893.779860][  T877] usb 8-1: USB disconnect, device number 7
[  894.959110][ T9457] udevd[9457]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  895.223204][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  895.223225][   T30] audit: type=1804 audit(1742730776.566:89): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1606" name="/newroot/73/file0" dev="tmpfs" ino=398 res=1 errno=0
[  895.798658][T12264] ref_ctr_offset mismatch. inode: 0x18e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  895.957377][T12266] netlink: 'syz.2.1605': attribute type 2 has an invalid length.
[  895.967281][T12264] uprobe: syz.6.1606:12264 failed to unregister, leaking uprobe
[  896.052405][T12264] uprobe: syz.6.1606:12264 failed to unregister, leaking uprobe
[  896.085544][T12264] uprobe: syz.6.1606:12264 failed to unregister, leaking uprobe
[  897.147131][T11884] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[  903.416333][   T30] audit: type=1804 audit(1742730784.656:90): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1619" name="/newroot/365/file0" dev="tmpfs" ino=1947 res=1 errno=0
[  913.119904][T12367] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  913.126527][T12367] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  913.199914][T12367] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  913.206082][T12367] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  913.417567][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'.
[  913.515633][T12367] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  913.521880][T12367] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  913.681987][T12367] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  913.688875][T12367] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  915.146801][T11884] Bluetooth: hci3: command 0x0406 tx timeout
[  915.226297][T11884] Bluetooth: hci5: command 0x0405 tx timeout
[  915.442799][T12404] ubi31: attaching mtd0
[  915.460869][T12404] ubi31: scanning is finished
[  915.465728][T12404] ubi31: empty MTD device detected
[  915.577899][T11884] Bluetooth: hci0: command 0x0406 tx timeout
[  915.747252][T11884] Bluetooth: hci4: command 0x0406 tx timeout
[  916.696931][T12410] tipc: Started in network mode
[  916.701827][T12410] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  916.709386][T12410] tipc: Enabled bearer <eth:team0>, priority 0
[  916.859556][T12404] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  916.928323][T12404] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  916.959525][T12404] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  917.226048][T11884] Bluetooth: hci3: command 0x0406 tx timeout
[  917.232436][T12404] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  917.245806][T12404] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  918.047309][ T5880] tipc: Node number set to 11578026
[  918.066129][T11884] Bluetooth: hci5: command 0x0405 tx timeout
[  918.066151][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  918.072228][T11884] Bluetooth: hci4: command 0x0406 tx timeout
[  918.089604][T12404] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  918.275323][T12404] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1034009610
[  918.820802][T12404] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  918.988887][T12423] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  919.041351][T12408] ubi31: background thread "ubi_bgt31d" started, PID 12408
[  920.839745][T12430] netlink: 'syz.2.1653': attribute type 62 has an invalid length.
[  920.913926][T12438] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[12438]
[  922.361543][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  922.584317][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  922.613967][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  922.874263][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  922.898059][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.042298][T12455] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  923.436132][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.456249][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.463698][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.566319][T12450] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1658'.
[  923.636229][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.642220][T12450] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  923.692745][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.760744][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.787433][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.846802][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.876578][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.902497][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.925567][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.961358][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.969894][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  923.989922][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.016308][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.042090][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.056269][ T5911] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  924.082425][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.094833][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.130622][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.150076][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.176353][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.206026][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.254680][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.276117][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.283573][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.312634][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.328564][ T5911] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  924.348715][  T877] hid-generic 0006:0003:0003.0007: unknown main item tag 0x0
[  924.381156][ T5911] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  924.448389][  T877] hid-generic 0006:0003:0003.0007: hidraw0: VIRTUAL HID v0.00 Device [syz1] on syz0
[  924.452673][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  924.516576][ T5911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  924.586869][ T5911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  924.658973][ T5911] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  924.693066][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  924.728886][ T5911] usb 1-1: Product: syz
[  924.733166][ T5911] usb 1-1: Manufacturer: syz
[  925.271003][ T5911] cdc_wdm 1-1:1.0: skipping garbage
[  925.296293][ T5911] cdc_wdm 1-1:1.0: skipping garbage
[  925.301628][ T5911] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  925.534572][T12473] program syz.7.1665 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  926.471478][T12483] overlayfs: missing 'lowerdir'
[  956.106318][   T31] sched: DL replenish lagged too much
[ 1031.585935][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1031.592959][    C0] rcu: 	1-...!: (0 ticks this GP) idle=85d4/1/0x4000000000000000 softirq=48736/48736 fqs=0
[ 1031.604333][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P12345/1:b..l P36/1:b..l
[ 1031.613365][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=50313, q=155 ncpus=2)
[ 1031.621112][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1031.621152][    C1] NMI backtrace for cpu 1
[ 1031.621178][    C1] CPU: 1 UID: 0 PID: 12477 Comm: syz.5.1667 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1031.621198][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1031.621210][    C1] RIP: 0010:lock_release+0x175/0xa30
[ 1031.621241][    C1] Code: f7 e8 cf 9c 89 00 48 c7 c0 10 77 08 94 49 39 06 0f 84 ee 04 00 00 4c 8d b4 24 b0 00 00 00 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 <74> 08 4c 89 f7 e8 91 9d 89 00 4c 89 6c 24 50 48 c7 84 24 b0 00 00
[ 1031.621256][    C1] RSP: 0018:ffffc90000a28a40 EFLAGS: 00000046
[ 1031.621271][    C1] RAX: ffffffff94087710 RBX: 1ffff9200014515e RCX: ffffffff819cfa80
[ 1031.621284][    C1] RDX: 0000000000000000 RSI: ffffffff8c802cc0 RDI: ffffffff8c802c80
[ 1031.621296][    C1] RBP: ffffc90000a28b70 R08: ffffffff903bd177 R09: 1ffffffff2077a2e
[ 1031.621309][    C1] R10: dffffc0000000000 R11: fffffbfff2077a2f R12: 1ffff92000145154
[ 1031.621322][    C1] R13: ffffffff84f4e395 R14: ffffc90000a28af0 R15: dffffc0000000000
[ 1031.621336][    C1] FS:  00007f53857e56c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1031.621350][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1031.621362][    C1] CR2: 0000001b34010ff8 CR3: 00000000653de000 CR4: 00000000003526f0
[ 1031.621377][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1031.621387][    C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1031.621397][    C1] Call Trace:
[ 1031.621405][    C1]  <NMI>
[ 1031.621414][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[ 1031.621438][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1031.621463][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1031.621484][    C1]  ? nmi_handle+0x2a/0x5a0
[ 1031.621516][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1031.621537][    C1]  ? nmi_handle+0x14f/0x5a0
[ 1031.621560][    C1]  ? nmi_handle+0x2a/0x5a0
[ 1031.621585][    C1]  ? lock_release+0x175/0xa30
[ 1031.621607][    C1]  ? default_do_nmi+0x63/0x160
[ 1031.621634][    C1]  ? exc_nmi+0x123/0x1f0
[ 1031.621652][    C1]  ? end_repeat_nmi+0xf/0x53
[ 1031.621677][    C1]  ? debug_object_deactivate+0x2d5/0x390
[ 1031.621705][    C1]  ? lock_release+0xb0/0xa30
[ 1031.621729][    C1]  ? lock_release+0x175/0xa30
[ 1031.621752][    C1]  ? lock_release+0x175/0xa30
[ 1031.621776][    C1]  ? lock_release+0x175/0xa30
[ 1031.621799][    C1]  </NMI>
[ 1031.621805][    C1]  <IRQ>
[ 1031.621815][    C1]  ? do_raw_spin_lock+0x14f/0x370
[ 1031.621834][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1031.621860][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1031.621883][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1031.621909][    C1]  _raw_spin_unlock_irqrestore+0x79/0x140
[ 1031.621933][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1031.621961][    C1]  debug_object_deactivate+0x2d5/0x390
[ 1031.621987][    C1]  ? advance_sched+0xa02/0xca0
[ 1031.622009][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[ 1031.622043][    C1]  debug_deactivate+0x1b/0x220
[ 1031.622062][    C1]  __hrtimer_run_queues+0x305/0xd30
[ 1031.622089][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1031.622105][    C1]  ? handle_softirqs+0x7e0/0x9b0
[ 1031.622124][    C1]  ? read_tsc+0x9/0x20
[ 1031.622141][    C1]  ? ktime_get_update_offsets_now+0x38e/0x3b0
[ 1031.622169][    C1]  hrtimer_interrupt+0x403/0xa40
[ 1031.622198][    C1]  __sysvec_apic_timer_interrupt+0x110/0x420
[ 1031.622226][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1031.622250][    C1]  </IRQ>
[ 1031.622256][    C1]  <TASK>
[ 1031.622262][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1031.622287][    C1] RIP: 0010:finish_task_switch+0x1ea/0x870
[ 1031.622315][    C1] Code: c9 50 e8 a9 2d 0c 00 48 83 c4 08 4c 89 f7 e8 fd 39 00 00 e9 de 04 00 00 4c 89 f7 e8 d0 50 73 0a e8 6b 08 39 00 fb 48 8b 5d c0 <48> 8d bb 08 16 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc
[ 1031.622329][    C1] RSP: 0018:ffffc9000b8671c8 EFLAGS: 00000282
[ 1031.622343][    C1] RAX: 11bef1e00c0c8800 RBX: ffff88807c428000 RCX: ffffffff9a61e903
[ 1031.622356][    C1] RDX: dffffc0000000000 RSI: ffffffff8c2ab3a0 RDI: ffffffff8c802ce0
[ 1031.622369][    C1] RBP: ffffc9000b867210 R08: ffffffff903bd177 R09: 1ffffffff2077a2e
[ 1031.622382][    C1] R10: dffffc0000000000 R11: fffffbfff2077a2f R12: 1ffff110170e7ebe
[ 1031.622395][    C1] R13: dffffc0000000000 R14: ffff8880b863e7c0 R15: ffff8880b873f5f0
[ 1031.622416][    C1]  ? finish_task_switch+0x1e5/0x870
[ 1031.622446][    C1]  __schedule+0x18c4/0x4c40
[ 1031.622480][    C1]  ? __pfx___schedule+0x10/0x10
[ 1031.622504][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1031.622535][    C1]  ? schedule+0x90/0x320
[ 1031.622557][    C1]  schedule+0x14b/0x320
[ 1031.622580][    C1]  schedule_timeout+0xb0/0x290
[ 1031.622600][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1031.622630][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1031.622650][    C1]  ? prepare_to_wait_exclusive+0x84/0x230
[ 1031.622677][    C1]  unix_wait_for_peer+0x250/0x340
[ 1031.622697][    C1]  ? __pfx_unix_wait_for_peer+0x10/0x10
[ 1031.622716][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1031.622740][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1031.622759][    C1]  ? hook_unix_may_send+0x11e/0x5b0
[ 1031.622779][    C1]  ? __sanitizer_cov_trace_pc+0x37/0x70
[ 1031.622805][    C1]  unix_dgram_sendmsg+0xc74/0x1df0
[ 1031.622838][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1031.622859][    C1]  ? __import_iovec+0x3bf/0x830
[ 1031.622895][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1031.622913][    C1]  __sock_sendmsg+0x221/0x270
[ 1031.622940][    C1]  ____sys_sendmsg+0x53a/0x860
[ 1031.622964][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1031.622982][    C1]  ? __fget_files+0x2a/0x410
[ 1031.623003][    C1]  ? __sys_sendmmsg+0x392/0x720
[ 1031.623021][    C1]  ? __might_fault+0xaa/0x120
[ 1031.623044][    C1]  __sys_sendmmsg+0x36a/0x720
[ 1031.623068][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1031.623102][    C1]  ? wake_up_q+0xdc/0x120
[ 1031.623123][    C1]  ? futex_wait+0x285/0x360
[ 1031.623149][    C1]  ? __pfx_futex_wait+0x10/0x10
[ 1031.623178][    C1]  ? unix_dgram_connect+0xaec/0xd80
[ 1031.623200][    C1]  ? do_futex+0x33b/0x560
[ 1031.623225][    C1]  ? __sys_connect+0x119/0x2d0
[ 1031.623257][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1031.623283][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1031.623307][    C1]  ? do_syscall_64+0x100/0x230
[ 1031.623336][    C1]  __x64_sys_sendmmsg+0xa0/0xb0
[ 1031.623355][    C1]  do_syscall_64+0xf3/0x230
[ 1031.623381][    C1]  ? clear_bhb_loop+0x35/0x90
[ 1031.623406][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.623431][    C1] RIP: 0033:0x7f538498d169
[ 1031.623451][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1031.623465][    C1] RSP: 002b:00007f53857e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1031.623481][    C1] RAX: ffffffffffffffda RBX: 00007f5384ba5fa0 RCX: 00007f538498d169
[ 1031.623494][    C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004
[ 1031.623505][    C1] RBP: 00007f5384a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1031.623516][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1031.623526][    C1] R13: 0000000000000000 R14: 00007f5384ba5fa0 R15: 00007ffec5fafa38
[ 1031.623546][    C1]  </TASK>
[ 1031.624147][    C0] task:kworker/u8:2    state:R  running task     stack:20848 pid:36    tgid:36    ppid:2      task_flags:0x4208160 flags:0x00004000
[ 1032.329129][    C0] Workqueue: bat_events batadv_nc_worker
[ 1032.334811][    C0] Call Trace:
[ 1032.338107][    C0]  <TASK>
[ 1032.341063][    C0]  __schedule+0x18bc/0x4c40
[ 1032.345620][    C0]  ? __pfx___schedule+0x10/0x10
[ 1032.350505][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1032.356526][    C0]  ? preempt_schedule_irq+0xf0/0x1c0
[ 1032.361848][    C0]  preempt_schedule_irq+0xfb/0x1c0
[ 1032.366997][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1032.372764][    C0]  irqentry_exit+0x5e/0x90
[ 1032.377215][    C0]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1032.382703][    C0] RIP: 0010:lock_release+0x658/0xa30
[ 1032.388020][    C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 e5 97 89 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25
[ 1032.407650][    C0] RSP: 0018:ffffc90000ac7980 EFLAGS: 00000206
[ 1032.413764][    C0] RAX: 0000000000000001 RBX: 1ffff92000158f42 RCX: ffffc90000ac7a03
[ 1032.421757][    C0] RDX: 0000000000000002 RSI: ffffffff8c2ac600 RDI: ffffffff8c802ce0
[ 1032.429748][    C0] RBP: ffffc90000ac7aa8 R08: ffffffff903bd177 R09: 1ffffffff2077a2e
[ 1032.437741][    C0] R10: dffffc0000000000 R11: fffffbfff2077a2f R12: 1ffff92000158f3c
[ 1032.445732][    C0] R13: 0000000000000246 R14: ffffc90000ac7a10 R15: dffffc0000000000
[ 1032.453756][    C0]  ? batadv_nc_worker+0xcb/0x610
[ 1032.458728][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1032.463796][    C0]  ? batadv_nc_worker+0xcb/0x610
[ 1032.468760][    C0]  batadv_nc_worker+0x28b/0x610
[ 1032.473635][    C0]  ? batadv_nc_worker+0xcb/0x610
[ 1032.478600][    C0]  ? process_scheduled_works+0x9c6/0x18e0
[ 1032.484345][    C0]  process_scheduled_works+0xabe/0x18e0
[ 1032.489947][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1032.495963][    C0]  ? assign_work+0x364/0x3d0
[ 1032.500602][    C0]  worker_thread+0x870/0xd30
[ 1032.505232][    C0]  ? __kthread_parkme+0x169/0x1d0
[ 1032.510287][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1032.515425][    C0]  kthread+0x7a9/0x920
[ 1032.519523][    C0]  ? __pfx_kthread+0x10/0x10
[ 1032.524149][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1032.529287][    C0]  ? __pfx_kthread+0x10/0x10
[ 1032.533914][    C0]  ? __pfx_kthread+0x10/0x10
[ 1032.538541][    C0]  ? __pfx_kthread+0x10/0x10
[ 1032.543159][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1032.548390][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[ 1032.553617][    C0]  ? __pfx_kthread+0x10/0x10
[ 1032.558236][    C0]  ret_from_fork+0x4b/0x80
[ 1032.562681][    C0]  ? __pfx_kthread+0x10/0x10
[ 1032.567302][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1032.572109][    C0]  </TASK>
[ 1032.575145][    C0] task:syz.2.1627      state:R  running task     stack:22072 pid:12345 tgid:12345 ppid:5827   task_flags:0x40064c flags:0x00004002
[ 1032.588671][    C0] Call Trace:
[ 1032.591971][    C0]  <TASK>
[ 1032.594923][    C0]  __schedule+0x18bc/0x4c40
[ 1032.599468][    C0]  ? 0xffffffffa00038c0
[ 1032.603656][    C0]  ? __pfx___schedule+0x10/0x10
[ 1032.608540][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1032.614554][    C0]  ? __lock_acquire+0x1397/0x2100
[ 1032.619612][    C0]  ? preempt_schedule_irq+0xf0/0x1c0
[ 1032.624930][    C0]  preempt_schedule_irq+0xfb/0x1c0
[ 1032.630071][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1032.635841][    C0]  irqentry_exit+0x5e/0x90
[ 1032.640299][    C0]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1032.645789][    C0] RIP: 0010:unwind_next_frame+0x5/0x22d0
[ 1032.651457][    C0] Code: 80 e1 07 80 c1 03 38 c1 7c 91 4c 89 f7 e8 33 63 b9 00 eb 87 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fd 49 bc 00
[ 1032.671103][    C0] RSP: 0018:ffffc9000c246d10 EFLAGS: 00000202
[ 1032.677224][    C0] RAX: 0000000000000001 RBX: ffffc9000c246d20 RCX: ffffffff919c1000
[ 1032.685241][    C0] RDX: dffffc0000000000 RSI: ffffffff81ad6ad8 RDI: ffffc9000c246d20
[ 1032.693241][    C0] RBP: ffffc9000c246db0 R08: 0000000000000000 R09: ffffc9000c246e10
[ 1032.701254][    C0] R10: ffffc9000c246d70 R11: ffffffff81ad6ba0 R12: ffff888053d39e00
[ 1032.709266][    C0] R13: ffffffff81ad6ba0 R14: ffffc9000c246e00 R15: 0000000000000000
[ 1032.717293][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1032.723511][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1032.729708][    C0]  ? __init_begin+0x41000/0x41000
[ 1032.734760][    C0]  ? stack_trace_save+0x118/0x1d0
[ 1032.739840][    C0]  arch_stack_walk+0x11c/0x150
[ 1032.744670][    C0]  ? stack_trace_save+0x118/0x1d0
[ 1032.749748][    C0]  stack_trace_save+0x118/0x1d0
[ 1032.754645][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1032.760071][    C0]  save_stack+0xfb/0x1f0
[ 1032.764357][    C0]  ? __pfx_lock_acquire+0x10/0x10
[ 1032.769430][    C0]  ? __pfx_save_stack+0x10/0x10
[ 1032.774334][    C0]  ? page_ext_get+0x20/0x2a0
[ 1032.778981][    C0]  __reset_page_owner+0x76/0x430
[ 1032.783969][    C0]  ? __mem_cgroup_uncharge_folios+0x15c/0x1d0
[ 1032.790081][    C0]  free_unref_folios+0xe2f/0x18a0
[ 1032.795173][    C0]  ? __page_cache_release+0x95f/0xb90
[ 1032.800603][    C0]  folios_put_refs+0x76c/0x860
[ 1032.805436][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[ 1032.810778][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1032.816048][    C0]  ? folio_batch_remove_exceptionals+0x18a/0x1f0
[ 1032.822437][    C0]  shmem_undo_range+0x593/0x1820
[ 1032.827432][    C0]  ? __pfx_shmem_undo_range+0x10/0x10
[ 1032.832877][    C0]  ? __kernel_text_address+0xd/0x40
[ 1032.838114][    C0]  ? unwind_get_return_address+0x4d/0x90
[ 1032.843789][    C0]  ? __pfx_validate_chain+0x10/0x10
[ 1032.849032][    C0]  ? arch_stack_walk+0xfd/0x150
[ 1032.853979][    C0]  shmem_evict_inode+0x29b/0xa80
[ 1032.858956][    C0]  ? inode_wait_for_writeback+0x111/0x2a0
[ 1032.864886][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[ 1032.870385][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1032.875628][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[ 1032.881199][    C0]  evict+0x4e8/0x9a0
[ 1032.885135][    C0]  ? __pfx_evict+0x10/0x10
[ 1032.889597][    C0]  ? iput+0x713/0xa50
[ 1032.893618][    C0]  __dentry_kill+0x20d/0x630
[ 1032.898239][    C0]  ? dput+0x37/0x2b0
[ 1032.902157][    C0]  dput+0x19f/0x2b0
[ 1032.905990][    C0]  __fput+0x60b/0x9f0
[ 1032.910014][    C0]  task_work_run+0x24f/0x310
[ 1032.914633][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 1032.919775][    C0]  ? switch_task_namespaces+0xe4/0x110
[ 1032.925263][    C0]  do_exit+0xa2a/0x2940
[ 1032.929456][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1032.935497][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1032.940134][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[ 1032.945384][    C0]  do_group_exit+0x207/0x2c0
[ 1032.950103][    C0]  get_signal+0x168c/0x1720
[ 1032.954650][    C0]  ? __pfx_get_signal+0x10/0x10
[ 1032.959532][    C0]  ? __pfx_force_sig_fault+0x10/0x10
[ 1032.964855][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1032.970882][    C0]  arch_do_signal_or_restart+0x96/0x860
[ 1032.976480][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1032.982683][    C0]  ? irqentry_exit_to_user_mode+0x53/0x250
[ 1032.988529][    C0]  irqentry_exit_to_user_mode+0x7e/0x250
[ 1032.994209][    C0]  exc_page_fault+0x590/0x8b0
[ 1032.998929][    C0]  asm_exc_page_fault+0x26/0x30
[ 1033.003810][    C0] RIP: 0033:0x7f21fdc4e757
[ 1033.008251][    C0] RSP: 002b:00007f21fbbd7120 EFLAGS: 00010202
[ 1033.014347][    C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f21fdd8d169
[ 1033.022339][    C0] RDX: 00007f21fbbd7140 RSI: 00007f21fbbd7270 RDI: 000000000000000b
[ 1033.030369][    C0] RBP: 00007f21fde0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1033.038362][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1033.046354][    C0] R13: 0000000000000000 R14: 00007f21fdfa6160 R15: 00007ffcaf636e88
[ 1033.054452][    C0]  </TASK>
[ 1033.057491][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g50313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 1033.069834][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=46283
[ 1033.077740][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g50313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[ 1033.089127][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1033.099112][    C0] rcu: RCU grace-period kthread stack dump:
[ 1033.105152][    C0] task:rcu_preempt     state:I stack:25784 pid:18    tgid:18    ppid:2      task_flags:0x208040 flags:0x00004000
[ 1033.117107][    C0] Call Trace:
[ 1033.120406][    C0]  <TASK>
[ 1033.123364][    C0]  __schedule+0x18bc/0x4c40
[ 1033.127922][    C0]  ? __pfx___schedule+0x10/0x10
[ 1033.132809][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1033.137874][    C0]  ? __pfx___mod_timer+0x10/0x10
[ 1033.142842][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1033.149209][    C0]  ? schedule+0x90/0x320
[ 1033.153480][    C0]  schedule+0x14b/0x320
[ 1033.157669][    C0]  schedule_timeout+0x15a/0x290
[ 1033.162548][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1033.167961][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1033.173279][    C0]  ? prepare_to_swait_event+0x330/0x350
[ 1033.178857][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1033.184086][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[ 1033.188977][    C0]  ? rcu_gp_init+0x1256/0x1630
[ 1033.193777][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1033.198747][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1033.203978][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1033.209305][    C0]  ? rcu_gp_cleanup+0x10/0x1140
[ 1033.214190][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1033.219425][    C0]  rcu_gp_kthread+0xa7/0x3b0
[ 1033.224053][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1033.229285][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1033.235213][    C0]  ? __kthread_parkme+0x169/0x1d0
[ 1033.240269][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1033.245507][    C0]  kthread+0x7a9/0x920
[ 1033.249623][    C0]  ? __pfx_kthread+0x10/0x10
[ 1033.254246][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1033.259476][    C0]  ? __pfx_kthread+0x10/0x10
[ 1033.264099][    C0]  ? __pfx_kthread+0x10/0x10
[ 1033.268724][    C0]  ? __pfx_kthread+0x10/0x10
[ 1033.273342][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1033.278568][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[ 1033.283810][    C0]  ? __pfx_kthread+0x10/0x10
[ 1033.288430][    C0]  ret_from_fork+0x4b/0x80
[ 1033.292873][    C0]  ? __pfx_kthread+0x10/0x10
[ 1033.297513][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1033.302331][    C0]  </TASK>