last executing test programs:

6m35.817947311s ago: executing program 1 (id=145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)

6m35.69413227s ago: executing program 1 (id=147):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="0f05c4c2312f616e4e0fc72866ba6100ed262e6666400fc7b785e06f97b8010000000f01c148b80b000000000000000f23c80f21f835040050000f23f83e67430f01c20f00d2670fc732", 0x4a}], 0x1, 0x32, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m33.733933048s ago: executing program 1 (id=154):
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000001480)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0x2a7345, 0x213173})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

6m31.863145172s ago: executing program 1 (id=162):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m31.32880014s ago: executing program 1 (id=167):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, 0x0)

6m31.087557024s ago: executing program 1 (id=169):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x122)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

6m15.686873744s ago: executing program 32 (id=169):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x122)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

3m46.997089506s ago: executing program 2 (id=772):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

3m46.230604734s ago: executing program 2 (id=775):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
fsopen(&(0x7f0000000500)='pstore\x00', 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009", @ANYRES64=r4, @ANYRES32=r3], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m43.890368266s ago: executing program 2 (id=793):
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
mlockall(0x7)
openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

3m41.888178532s ago: executing program 2 (id=787):
mkdir(&(0x7f0000000040)='./file1\x00', 0x1e)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1001)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
acct(&(0x7f00000001c0)='./file1\x00')
unlink(&(0x7f0000000180)='./file1\x00')

3m41.602126073s ago: executing program 2 (id=790):
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)

3m41.134784926s ago: executing program 2 (id=791):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

3m40.783847403s ago: executing program 33 (id=791):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)

2m42.418679846s ago: executing program 0 (id=962):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0)

2m40.576097743s ago: executing program 0 (id=963):
r0 = socket$pppoe(0x18, 0x1, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

2m37.401718807s ago: executing program 0 (id=976):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b})
epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0)
dup3(r2, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002b65dc9400304aad9e48b01020301090224001d090200f70904ac09060000000709050e14100001fe4009058103ef0e03"], 0x0)

2m32.558144079s ago: executing program 0 (id=985):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

2m31.86509614s ago: executing program 0 (id=989):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
r2 = syz_io_uring_setup(0x845, &(0x7f0000000140)={0x0, 0x40fad6, 0x0, 0x0, 0x324}, &(0x7f0000002480)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x10001, r1, 0x3, {0x1, 0x6d1}, 0xf0}, 0x1)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0)

2m30.808782199s ago: executing program 0 (id=993):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x5, 0x6, 0x9, 0x3000}, {0xb, 0x2f, 0x5, 0x23ce}]})
sync()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYBLOB="00000000000000000500110004000000140012800b00010062726964676500000400028008002e000300000008001b0000ffffff08001c"], 0x78}}, 0x0)

2m15.730510909s ago: executing program 34 (id=993):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x5, 0x6, 0x9, 0x3000}, {0xb, 0x2f, 0x5, 0x23ce}]})
sync()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYBLOB="00000000000000000500110004000000140012800b00010062726964676500000400028008002e000300000008001b0000ffffff08001c"], 0x78}}, 0x0)

2m10.66560017s ago: executing program 5 (id=1072):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

2m10.346798099s ago: executing program 5 (id=1073):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000300)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840)

2m9.245392447s ago: executing program 5 (id=1081):
semctl$IPC_RMID(0x0, 0x0, 0xf)
pipe2$9p(&(0x7f00000001c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0xc, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x29]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m8.696073722s ago: executing program 5 (id=1083):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m8.298625715s ago: executing program 5 (id=1086):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x10860000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140))
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

2m6.210691194s ago: executing program 5 (id=1089):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair(0x22, 0x100000002, 0x2, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)

2m5.761569594s ago: executing program 35 (id=1089):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair(0x22, 0x100000002, 0x2, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)

53.217164955s ago: executing program 7 (id=1315):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6000004, 0x50032, 0xffffffffffffffff, 0x0)

51.17155269s ago: executing program 7 (id=1317):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

49.706523651s ago: executing program 7 (id=1322):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x24}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000180)=ANY=[])
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000040)='1', 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48)

45.451758452s ago: executing program 7 (id=1337):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1], 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10)

45.218822118s ago: executing program 7 (id=1339):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0)

44.426604238s ago: executing program 7 (id=1341):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4094}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40854)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x30}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x40000004})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16.439695323s ago: executing program 3 (id=1424):
socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4f23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_PEC(r3, 0x708, 0x40)

15.210760973s ago: executing program 3 (id=1428):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22ffe4)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r3 = syz_io_uring_setup(0x845, 0x0, &(0x7f0000002480), 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0)

12.432917643s ago: executing program 8 (id=1433):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp(0x2, 0x3, 0x2)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

11.214741231s ago: executing program 8 (id=1435):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
socket$inet6(0xa, 0x80000, 0x8)
epoll_create1(0x0)
creat(0x0, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2})

9.755852508s ago: executing program 3 (id=1439):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x8, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x40, 0x8000, 0x5, 0xffff}})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x0, 0x4, @empty, 0xffffffff}}}, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', &(0x7f00000028c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800}})
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x7b, r6})

8.764649365s ago: executing program 4 (id=1441):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$inet6(0xa, 0x6, 0x0)
r3 = memfd_secret(0x80000)
fcntl$setlease(r3, 0x400, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r3, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

8.17832516s ago: executing program 8 (id=1442):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = gettid()
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000044000))
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, 0x0, &(0x7f0000000140)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {r3, r4+60000000}}, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x4, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0xb, 0xc3a0, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0xfffffff8, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x6, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x4, 0x249, 0x5, 0x2fbf, 0x5, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0xa, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x7, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x27, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x1, 0x6, 0x8, 0xb, 0xff, 0x5, 0x1, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x43, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x2, 0x100, 0xf3, 0x1, 0xa8f, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x1, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf3, 0x401, 0x401, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x3, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x9df4, 0x2, 0x7, 0x5, 0xfff, 0x3, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x81, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0x0, 0x0, 0xbc, 0xa8, 0x0, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x6, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)

8.056971221s ago: executing program 3 (id=1443):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

7.28448505s ago: executing program 8 (id=1444):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, r4, 0x680822d7e3b5f37d}, 0x14}}, 0x0)

6.117584824s ago: executing program 4 (id=1446):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffff, 0xa0aa01)
syz_io_uring_setup(0x3575, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x5e2, 0x0, 0x0, &(0x7f0000000380))
recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r1, 0x407, 0x100004)
write$eventfd(r1, &(0x7f0000000240), 0xffffff14)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x18}], 0x1}, 0x0)

6.059044581s ago: executing program 8 (id=1447):
r0 = timerfd_create(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r3, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x1, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0})
syz_open_dev$loop(0x0, 0xb, 0x22000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.79460225s ago: executing program 6 (id=1448):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = inotify_init1(0x0)
r5 = dup(r4)
inotify_rm_watch(r5, 0x0)

4.762517501s ago: executing program 6 (id=1449):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
sendmsg$nl_route(r1, 0x0, 0x20044080)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f002})

4.757322364s ago: executing program 8 (id=1450):
syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x5}, &(0x7f0000000480), &(0x7f0000000500))
r2 = eventfd2(0x9, 0x80000)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000600)={'gretap0\x00', <r4=>0x0, 0x10, 0x20, 0x6, 0xf, {{0x2b, 0x4, 0x1, 0x3, 0xac, 0x66, 0x0, 0x4, 0x29, 0x0, @remote, @private=0xa010102, {[@noop, @timestamp_addr={0x44, 0x34, 0x7c, 0x1, 0x4, [{@local, 0xfdb}, {@multicast1, 0x83}, {@local, 0x3}, {@local, 0x6}, {@private=0xa010100, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xffff}]}, @timestamp_prespec={0x44, 0x34, 0x9c, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@multicast2, 0x400}, {@loopback, 0xffff}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xad, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x18}]}, @lsrr={0x83, 0x1b, 0x79, [@private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast2, @broadcast]}]}}}}})
bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x1, {0x2, 0x1, 0x3}}, 0x18)
io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9c, 0xe, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x0, 0x2, 0x4, 0x10, 0xef}, 0xd0, &(0x7f0000000780)={0x5, 0xf, 0xd0, 0x3, [@generic={0xa0, 0x10, 0x4, "6a88a1cef014c30eb3b2aba99b6b9c5e371edbf4cd805f4fd6a3a66c3f27793a7279b0635069f7df0c244d529768fb12fa7fd27ef24f5919c90e99138e5c80aa5c2741da0d29505853f544958f93162f090045310ff2d707ca35d9b74b489cd9914f1d5da74cd9b28b841b9e9a0e2a87d5f2a86a78ee11877713ca01ad33f250b90aaa43ede19fd9421653c14422dff3fdff8e4a1b08b3ba39d844637d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa3, 0x3, 0x5, 0x100, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x2, 0xf, 0x8, [0x0, 0x30, 0x3fff, 0x0, 0xc0c0]}]}, 0x3, [{0x86, &(0x7f0000000880)=@string={0x86, 0x3, "2f1103531f388ff03683c78e72fbc6351c0d7e8452814f0c8a2a60bb8026b82f93e476f140a703e7b1f3ec6b0e7c8ce8e43454680a0e75cb1677364244a3c88049caf905041d5432e8ad036106a67dfd4d5a768e85eda350fceb27072d4b5f0d205cd1aae823573433ee7887119a36a1dfd84476df0f39dd25cda67412435004241dfd6d"}}, {0xbd, &(0x7f0000000940)=@string={0xbd, 0x3, "2fdad8a2dd2ecbf034e6f99fcdb97c2bd8dd6eff082a483449e986400d4fca826e5b2ea89e6fce89b74bbb0ae566f644da56afc7302c20b468437e1c0943e42ad85c78f3ccd518dcdd2ab110627f115d46dc15dddee663058ebc5b3ab5a371fcc90eb110f088418566f664e2425fe0614e70d20360ce9b87061eeb2f0fb691ee136a549c06d9ef7ded35e80b05494ea6e88fda970da54753638d9e1b57479d90784fc0f48dfff80fdd5ac6bc4e42ee132aa0b2721b440a22f0d736"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x424}}]})
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000140)=0x4)

4.578705665s ago: executing program 4 (id=1451):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_procfs(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x24, r2, 0x1, 0x3, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00'})
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)

4.402237035s ago: executing program 4 (id=1452):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84)

4.384497946s ago: executing program 6 (id=1453):
r0 = io_uring_setup(0x3450, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

3.354734553s ago: executing program 4 (id=1454):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

3.35005208s ago: executing program 6 (id=1455):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
r5 = accept$alg(r4, 0x0, 0x0)
recvmmsg(r5, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x59}}], 0x500, 0x20010100, 0x0)

2.217183693s ago: executing program 6 (id=1456):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00')
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x8)

1.838912734s ago: executing program 3 (id=1457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000fc0)=0xffff3db3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.42981033s ago: executing program 4 (id=1458):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300))
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10)

767.845829ms ago: executing program 6 (id=1459):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00001c8000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

0s ago: executing program 3 (id=1460):
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
socket(0x2, 0x80805, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4)
bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x8, r3}, 0x10)
poll(&(0x7f0000000280)=[{r1}], 0x1, 0x81)

kernel console output (not intermixed with test programs):

-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  161.799306][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.061003][    T9] usb 4-1: usb_control_msg returned -32
[  162.077793][    T9] usbtmc 4-1:16.0: can't read capabilities
[  162.223601][ T7500] kvm: pic: level sensitive irq not supported
[  162.224026][ T7500] kvm: pic: single mode not supported
[  162.230203][ T7500] kvm: pic: level sensitive irq not supported
[  162.238540][ T7500] kvm: pic: level sensitive irq not supported
[  162.248274][ T7500] kvm: pic: level sensitive irq not supported
[  162.337943][    C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  162.353639][    T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  162.365287][ T5821] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  162.373014][ T7505] usbtmc 4-1:16.0: Unable to send data, error -71
[  162.393245][ T5867] usb 4-1: USB disconnect, device number 7
[  162.524897][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.536217][    T9] usb 6-1: config 0 has no interfaces?
[  162.543759][ T5821] usb 3-1: Using ep0 maxpacket: 8
[  162.555464][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66
[  162.573676][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.582561][ T5821] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  162.604439][ T5821] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  162.615621][    T9] usb 6-1: config 0 descriptor??
[  162.633522][ T5821] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  162.647611][ T5821] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.673697][ T5821] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  162.682746][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.700395][ T7509] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  162.885889][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'.
[  162.916646][ T5821] usb 3-1: GET_CAPABILITIES returned 0
[  162.922215][ T5821] usbtmc 3-1:16.0: can't read capabilities
[  163.137113][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.153826][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.226780][ T5821] usb 3-1: USB disconnect, device number 4
[  163.815640][ T5867] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  164.033730][ T5867] usb 5-1: Using ep0 maxpacket: 8
[  164.049016][ T5867] usb 5-1: config 7 has an invalid interface number: 125 but max is 0
[  164.065787][ T5867] usb 5-1: config 7 has no interface number 0
[  164.092925][ T5867] usb 5-1: config 7 interface 125 has no altsetting 0
[  164.116327][ T5867] usb 5-1: New USB device found, idVendor=05ac, idProduct=effb, bcdDevice=78.4b
[  164.157853][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.173835][ T5867] usb 5-1: Product: syz
[  164.178045][ T5867] usb 5-1: Manufacturer: syz
[  164.183396][ T5867] usb 5-1: SerialNumber: syz
[  166.609673][ T7534] kvm: pic: single mode not supported
[  166.609751][ T7534] kvm: pic: single mode not supported
[  166.615531][ T7534] kvm: pic: single mode not supported
[  166.621123][ T7534] kvm: pic: single mode not supported
[  166.639401][ T7534] kvm: pic: single mode not supported
[  166.645608][ T7534] kvm: pic: single mode not supported
[  166.651634][ T7534] kvm: pic: single mode not supported
[  166.658602][ T7534] kvm: pic: single mode not supported
[  166.664883][ T7534] kvm: pic: single mode not supported
[  166.671192][ T7534] kvm: pic: level sensitive irq not supported
[  166.681653][ T7534] kvm: pic: level sensitive irq not supported
[  166.690588][ T7534] kvm: pic: level sensitive irq not supported
[  166.697735][ T7534] kvm: pic: level sensitive irq not supported
[  166.710868][ T7534] kvm: pic: level sensitive irq not supported
[  166.728039][ T7534] kvm: pic: level sensitive irq not supported
[  166.751893][ T7534] kvm: pic: non byte write
[  167.552633][ T7496] vlan2: entered promiscuous mode
[  167.558563][ T7496] bridge0: entered promiscuous mode
[  167.564055][ T7496] vlan2: entered allmulticast mode
[  167.569195][ T7496] bridge0: entered allmulticast mode
[  167.575863][ T7510] bridge_slave_1: left allmulticast mode
[  167.581555][ T7510] bridge_slave_1: left promiscuous mode
[  167.587348][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.598498][ T7510] bridge_slave_0: left allmulticast mode
[  167.609852][ T7510] bridge_slave_0: left promiscuous mode
[  167.616659][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.636056][ T7510] bridge0: left allmulticast mode
[  167.641196][ T7510] bridge0: left promiscuous mode
[  167.921662][ T5867] ipheth 5-1:7.125: Unable to find alternate settings interface
[  168.014259][ T5867] usb 5-1: USB disconnect, device number 10
[  168.316144][ T5821] usb 6-1: USB disconnect, device number 3
[  170.048231][ T7565] netlink: 'syz.5.450': attribute type 1 has an invalid length.
[  170.185210][ T7565] bond1: entered promiscuous mode
[  170.221576][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.5.450'.
[  170.248359][ T7571] team0: Port device team_slave_1 removed
[  170.257840][ T7571] bond1: (slave team_slave_1): making interface the new active one
[  170.266396][ T7571] team_slave_1: entered promiscuous mode
[  170.273129][ T7571] bond1: (slave team_slave_1): Enslaving as an active interface with an up link
[  170.285122][ T7565] bond1: left promiscuous mode
[  170.328288][ T7565] team_slave_1: left promiscuous mode
[  170.372259][ T7565] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.428382][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.455'.
[  171.188269][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  171.188285][   T29] audit: type=1326 audit(1739722640.518:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7591 comm="syz.5.460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x0
[  172.353908][   T58] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  172.543847][   T58] usb 3-1: Using ep0 maxpacket: 16
[  172.625441][   T58] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  172.722380][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  172.762657][ T7622] syzkaller0: entered promiscuous mode
[  172.791423][ T7622] syzkaller0: entered allmulticast mode
[  172.827915][   T58] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  172.892118][   T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.972624][   T58] usb 3-1: Product: syz
[  172.983560][   T58] usb 3-1: Manufacturer: syz
[  172.994680][   T58] usb 3-1: SerialNumber: syz
[  173.010355][   T58] usb 3-1: config 0 descriptor??
[  173.030197][   T58] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  173.049465][   T58] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  174.673612][   T58] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  174.709069][   T58] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  175.751693][   T58] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe
[  175.955468][   T58] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  175.969352][   T58] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  175.983927][   T58] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  176.000055][   T58] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  176.003649][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  176.026392][   T58] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  176.043638][   T58] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  176.064866][   T58] usb 3-1: USB disconnect, device number 5
[  176.173924][    T9] usb 4-1: Using ep0 maxpacket: 16
[  176.182056][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  176.192965][    T9] usb 4-1: config 0 has no interface number 0
[  176.201904][    T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  176.212394][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.221489][    T9] usb 4-1: Product: syz
[  176.226366][    T9] usb 4-1: Manufacturer: syz
[  176.230972][    T9] usb 4-1: SerialNumber: syz
[  176.239809][    T9] usb 4-1: config 0 descriptor??
[  176.248813][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  176.741950][ T7673] syz.2.484: attempt to access beyond end of device
[  176.741950][ T7673] loop2: rw=0, sector=64, nr_sectors = 1 limit=0
[  176.757078][ T7673] syz.2.484: attempt to access beyond end of device
[  176.757078][ T7673] loop2: rw=0, sector=256, nr_sectors = 1 limit=0
[  176.775293][ T7673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  176.785533][ T7673] syz.2.484: attempt to access beyond end of device
[  176.785533][ T7673] loop2: rw=0, sector=512, nr_sectors = 1 limit=0
[  176.798740][ T7673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  176.808575][ T7673] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  176.816588][ T7673] UDF-fs: Scanning with blocksize 512 failed
[  176.825759][ T7673] syz.2.484: attempt to access beyond end of device
[  176.825759][ T7673] loop2: rw=0, sector=64, nr_sectors = 2 limit=0
[  176.839628][ T7673] syz.2.484: attempt to access beyond end of device
[  176.839628][ T7673] loop2: rw=0, sector=512, nr_sectors = 2 limit=0
[  176.852944][ T7673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  176.865083][ T7673] syz.2.484: attempt to access beyond end of device
[  176.865083][ T7673] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0
[  176.879637][ T7673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  176.889675][ T7673] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  176.897885][ T7673] UDF-fs: Scanning with blocksize 1024 failed
[  176.904919][ T7673] syz.2.484: attempt to access beyond end of device
[  176.904919][ T7673] loop2: rw=0, sector=64, nr_sectors = 4 limit=0
[  176.919025][ T7673] syz.2.484: attempt to access beyond end of device
[  176.919025][ T7673] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0
[  176.932426][ T7673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  176.944326][ T7673] syz.2.484: attempt to access beyond end of device
[  176.944326][ T7673] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0
[  176.957442][ T7673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  176.967193][ T7673] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  176.974970][ T7673] UDF-fs: Scanning with blocksize 2048 failed
[  176.982746][ T7673] syz.2.484: attempt to access beyond end of device
[  176.982746][ T7673] loop2: rw=0, sector=64, nr_sectors = 8 limit=0
[  176.996708][ T7673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  177.006837][ T7673] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  177.016694][ T7673] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  177.024530][ T7673] UDF-fs: Scanning with blocksize 4096 failed
[  177.030710][ T7673] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  178.294422][ T7684] xt_TPROXY: Can be used only with -p tcp or -p udp
[  178.645596][    T9] gspca_spca1528: reg_r err -71
[  178.654110][    T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  178.732924][    T9] usb 4-1: USB disconnect, device number 8
[  179.802544][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 201
[  179.883039][   T29] audit: type=1326 audit(1739722649.208:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  180.099256][   T29] audit: type=1326 audit(1739722649.208:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  180.120713][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.200192][   T29] audit: type=1326 audit(1739722649.358:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.3.495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf8778cde9 code=0x0
[  180.221135][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.383134][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'.
[  180.432158][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'.
[  180.593613][   T29] audit: type=1326 audit(1739722649.918:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  180.622246][   T29] audit: type=1326 audit(1739722649.918:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  180.671078][   T29] audit: type=1326 audit(1739722649.918:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  180.845089][   T29] audit: type=1326 audit(1739722649.918:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  180.867702][   T29] audit: type=1326 audit(1739722649.918:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  180.890002][   T29] audit: type=1326 audit(1739722649.918:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  180.911771][   T29] audit: type=1326 audit(1739722649.918:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7fc00000
[  182.444274][ T7749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.508'.
[  182.970182][ T7755] cgroup: Need name or subsystem set
[  183.665102][   T54] Bluetooth: hci4: Malformed MSFT vendor event: 0x02
[  186.253140][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  186.795533][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  186.806835][    T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  186.817797][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  186.827592][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.850731][ T7778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  186.862998][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  188.649831][ T5867] usb 3-1: USB disconnect, device number 6
[  189.623733][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  189.701824][ T7819] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  189.821042][    T9] usb 1-1: Using ep0 maxpacket: 8
[  190.030216][    T9] usb 1-1: config 0 has an invalid interface number: 33 but max is 1
[  190.053642][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.064689][    T9] usb 1-1: config 0 has no interface number 1
[  190.071791][    T9] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  190.804908][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  190.814199][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.822228][    T9] usb 1-1: Product: syz
[  190.921082][    T9] usb 1-1: Manufacturer: syz
[  191.009427][    T9] usb 1-1: SerialNumber: syz
[  191.026742][    T9] usb 1-1: config 0 descriptor??
[  191.039670][    T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  191.255193][ T2337] pvrusb2: Invalid write control endpoint
[  191.280607][    T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  191.301564][ T2337] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  191.353678][    T9] usb 1-1: USB disconnect, device number 6
[  191.373892][ T2337] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  193.745266][ T5904] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  193.930968][ T5904] usb 6-1: Using ep0 maxpacket: 16
[  193.945847][ T5904] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  193.963542][ T5904] usb 6-1: config 0 has no interface number 0
[  193.980057][ T5904] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  194.008598][ T5904] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  194.053647][ T5904] usb 6-1: config 0 interface 41 has no altsetting 0
[  194.097638][ T5904] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  194.113059][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.123819][ T5904] usb 6-1: Product: syz
[  194.128288][ T5904] usb 6-1: Manufacturer: syz
[  194.133238][ T5904] usb 6-1: SerialNumber: syz
[  194.140530][ T5904] usb 6-1: config 0 descriptor??
[  194.514372][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.520915][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.848452][ T7869] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  194.910122][ T7869] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  195.162330][ T7869] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  195.218666][ T7869] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  196.440484][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  196.440499][   T29] audit: type=1326 audit(1739722665.768:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.509699][   T29] audit: type=1326 audit(1739722665.768:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.533588][   T29] audit: type=1326 audit(1739722665.808:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.598523][   T29] audit: type=1326 audit(1739722665.808:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.621137][   T29] audit: type=1326 audit(1739722665.808:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.692547][   T29] audit: type=1326 audit(1739722665.808:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.766560][   T29] audit: type=1326 audit(1739722665.808:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.788876][   T29] audit: type=1326 audit(1739722665.808:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.854175][   T29] audit: type=1326 audit(1739722665.808:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  196.963962][   T29] audit: type=1326 audit(1739722665.808:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7912 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1778cde9 code=0x7ffc0000
[  197.863280][ T5904] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  197.915398][ T5904] usb 6-1: USB disconnect, device number 4
[  198.159613][ T7934] Invalid ELF header magic: != ELF
[  198.967319][ T7938] netlink: 'syz.2.568': attribute type 21 has an invalid length.
[  198.975368][ T7938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.568'.
[  200.475092][    C0] vcan0: j1939_tp_rxtimer: 0xffff888035100800: rx timeout, send abort
[  200.486183][    C0] vcan0: j1939_tp_rxtimer: 0xffff888035100400: rx timeout, send abort
[  200.495012][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035100800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  200.511032][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035100400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  200.958781][ T7963] overlayfs: metacopy with no lower data found - abort lookup (/file0)
[  201.824360][ T7974] netlink: 3 bytes leftover after parsing attributes in process `syz.5.580'.
[  201.980740][ T7974] batadv1: entered promiscuous mode
[  201.996554][ T7974] batadv1: entered allmulticast mode
[  202.629903][ T7986] syz.0.583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  202.809004][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[  207.061796][ T8023]  nullb0: AHDI p1 p2
[  207.204640][ T8023] nullb0: p1 size 1697656678 extends beyond EOD, truncated
[  209.613855][ T1204] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  209.816962][ T1204] usb 6-1: Using ep0 maxpacket: 8
[  209.853667][ T1204] usb 6-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17
[  209.862754][ T1204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.990516][ T8059] xt_policy: output policy not valid in PREROUTING and INPUT
[  210.326405][ T1204] usb 6-1: Product: syz
[  210.384240][ T1204] usb 6-1: Manufacturer: syz
[  210.399081][ T1204] usb 6-1: SerialNumber: syz
[  210.446317][ T1204] usb 6-1: config 0 descriptor??
[  210.464814][ T1204] hub 6-1:0.0: bad descriptor, ignoring hub
[  210.477433][ T1204] hub 6-1:0.0: probe with driver hub failed with error -5
[  210.496432][ T1204] gspca_main: jeilinj-2.14.0 probing 0979:0270
[  210.678819][ T1204] usb 6-1: USB disconnect, device number 5
[  211.459172][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  211.459189][   T29] audit: type=1326 audit(1739722680.788:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.5.609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x0
[  213.701834][ T8108] netlink: 'syz.3.622': attribute type 16 has an invalid length.
[  213.716613][ T5822] Bluetooth: hci5: sending frame failed (-49)
[  213.724795][   T54] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  213.736209][ T8108] netlink: 'syz.3.622': attribute type 17 has an invalid length.
[  213.771774][ T8108] net_ratelimit: 10 callbacks suppressed
[  213.771784][ T8108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  213.803229][ T8112] veth0_to_team: entered promiscuous mode
[  213.828096][ T8112] veth0_to_team: entered allmulticast mode
[  213.875816][ T8114] loop0: detected capacity change from 0 to 7
[  213.901129][ T8114] Dev loop0: unable to read RDB block 7
[  213.924341][ T8114]  loop0: AHDI p2
[  213.938295][ T8114] loop0: partition table partially beyond EOD, truncated
[  213.983566][ T1204] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  214.153667][ T1204] usb 3-1: Using ep0 maxpacket: 32
[  214.169087][ T1204] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.198028][ T1204] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.318876][ T1204] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  214.333506][ T1204] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  214.375036][   T46] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  214.625151][   T46] usb 6-1: Using ep0 maxpacket: 16
[  214.638383][   T46] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  214.783197][ T1204] usb 3-1: Product: syz
[  214.789553][ T1204] usb 3-1: Manufacturer: syz
[  214.803306][ T1204] hub 3-1:4.0: USB hub found
[  214.803505][   T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  214.845542][   T46] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  214.873571][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.923505][   T46] usb 6-1: Product: syz
[  214.927719][   T46] usb 6-1: Manufacturer: syz
[  214.951119][   T46] usb 6-1: SerialNumber: syz
[  214.963263][   T46] usb 6-1: config 0 descriptor??
[  214.985093][   T46] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  215.002946][ T1204] hub 3-1:4.0: 2 ports detected
[  215.051584][   T46] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  215.212427][ T1204] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  215.225253][ T1204] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  215.332504][ T1204] usb 3-1: USB disconnect, device number 7
[  215.594718][   T46] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  215.620452][   T46] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  215.821889][ T8146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.986008][ T8146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.105910][ T8146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.273528][   T46] em28xx 6-1:0.0: AC97 command still being executed: not handled properly!
[  216.282195][   T46] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  216.460787][   T46] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  216.474113][   T46] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  216.509768][ T8146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.342606][   T46] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  217.352384][   T46] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  217.483812][   T46] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  217.516985][   T46] usb 6-1: USB disconnect, device number 6
[  217.762793][ T8146] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.045060][ T8146] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.079653][ T8146] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.013902][ T8146] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.088649][ T8204] Bluetooth: MGMT ver 1.23
[  222.142993][ T8200] Bluetooth: hci0: Opcode 0x0401 failed: -112
[  222.265870][   T58] libceph: connect (1)[c::]:6789 error -101
[  222.277304][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  222.289712][   T58] libceph: connect (1)[c::]:6789 error -101
[  222.302762][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  222.366495][ T8208] ceph: No mds server is up or the cluster is laggy
[  222.532651][ T5904] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  222.885437][   T58] libceph: connect (1)[c::]:6789 error -101
[  222.891522][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  223.123571][ T5904] usb 5-1: Using ep0 maxpacket: 8
[  223.926716][ T5904] usb 5-1: config 0 has an invalid interface number: 33 but max is 1
[  223.942152][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.954661][ T5904] usb 5-1: config 0 has no interface number 1
[  223.966518][ T5904] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  224.025397][ T5904] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  224.047323][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.063850][ T5822] Bluetooth: hci0: command 0x0401 tx timeout
[  224.073548][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  224.089403][ T5904] usb 5-1: Product: syz
[  224.100173][ T5904] usb 5-1: Manufacturer: syz
[  224.132170][ T5904] usb 5-1: SerialNumber: syz
[  224.152750][ T5904] usb 5-1: config 0 descriptor??
[  224.205540][ T5904] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  224.411520][ T5904] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  225.195526][ T5904] usb 5-1: USB disconnect, device number 11
[  225.202434][ T5904] pvrusb2: Device being rendered inoperable
[  225.224992][ T5904] pvrusb2: Device being rendered inoperable
[  225.931714][ T8246] x_tables: unsorted underflow at hook 1
[  225.952960][ T8246] SET target dimension over the limit!
[  226.133599][ T5822] Bluetooth: hci0: command 0x0401 tx timeout
[  226.204333][ T5867] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  226.597765][ T5867] usb 5-1: Using ep0 maxpacket: 16
[  226.631668][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.643556][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.653546][ T5867] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  226.662646][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.732725][ T5867] usb 5-1: config 0 descriptor??
[  227.776282][ T5869] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  227.912886][ T8268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  227.963911][ T5869] usb 3-1: Using ep0 maxpacket: 16
[  227.989520][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[  228.000636][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[  228.006355][ T5869] usb 3-1: config 0 has an invalid interface number: 148 but max is 0
[  228.329067][ T5869] usb 3-1: config 0 has no interface number 0
[  228.494488][ T5869] usb 3-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55
[  228.536688][ T8274] bio_check_eod: 2 callbacks suppressed
[  228.536776][ T8274] syz.3.671: attempt to access beyond end of device
[  228.536776][ T8274] loop3: rw=0, sector=64, nr_sectors = 1 limit=0
[  228.545006][ T5867] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0003/input/input9
[  228.572706][ T8274] syz.3.671: attempt to access beyond end of device
[  228.572706][ T8274] loop3: rw=0, sector=256, nr_sectors = 1 limit=0
[  228.586232][ T8274] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  228.600408][ T8274] syz.3.671: attempt to access beyond end of device
[  228.600408][ T8274] loop3: rw=0, sector=512, nr_sectors = 1 limit=0
[  228.614056][ T8274] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  228.623773][ T8274] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  228.631495][ T8274] UDF-fs: Scanning with blocksize 512 failed
[  228.641400][ T8274] syz.3.671: attempt to access beyond end of device
[  228.641400][ T8274] loop3: rw=0, sector=64, nr_sectors = 2 limit=0
[  228.655428][ T8274] syz.3.671: attempt to access beyond end of device
[  228.655428][ T8274] loop3: rw=0, sector=512, nr_sectors = 2 limit=0
[  228.668746][ T8274] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  228.679540][ T8274] syz.3.671: attempt to access beyond end of device
[  228.679540][ T8274] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  228.694959][ T8274] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  228.704769][ T8274] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  228.712469][ T8274] UDF-fs: Scanning with blocksize 1024 failed
[  228.721740][ T8274] syz.3.671: attempt to access beyond end of device
[  228.721740][ T8274] loop3: rw=0, sector=64, nr_sectors = 4 limit=0
[  228.735734][ T8274] syz.3.671: attempt to access beyond end of device
[  228.735734][ T8274] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  228.749160][ T8274] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  228.759840][ T8274] syz.3.671: attempt to access beyond end of device
[  228.759840][ T8274] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  228.773305][ T8274] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  228.783187][ T8274] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  228.791046][ T8274] UDF-fs: Scanning with blocksize 2048 failed
[  228.811483][ T8274] syz.3.671: attempt to access beyond end of device
[  228.811483][ T8274] loop3: rw=0, sector=64, nr_sectors = 8 limit=0
[  228.825533][ T8274] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  228.838461][ T8274] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  228.848183][ T8274] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  228.856277][ T8274] UDF-fs: Scanning with blocksize 4096 failed
[  228.862428][ T8274] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  229.014871][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.062328][ T5869] usb 3-1: config 0 descriptor??
[  229.137778][ T6557] udevd[6557]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.170580][ T5867] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  229.233311][ T5867] usb 5-1: USB disconnect, device number 12
[  230.022298][ T5869] usb 3-1: USB disconnect, device number 8
[  230.409487][   T58] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  231.333588][ T8297] netlink: 72 bytes leftover after parsing attributes in process `syz.0.679'.
[  231.354229][   T58] usb 4-1: Using ep0 maxpacket: 8
[  231.543260][   T58] usb 4-1: config 0 has an invalid interface number: 33 but max is 1
[  231.590772][   T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  231.659615][   T58] usb 4-1: config 0 has no interface number 1
[  231.705610][   T58] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  231.774870][   T58] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  231.819159][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.870627][   T58] usb 4-1: Product: syz
[  231.903503][   T58] usb 4-1: Manufacturer: syz
[  231.908151][   T58] usb 4-1: SerialNumber: syz
[  231.922878][ T8301] team0: entered promiscuous mode
[  231.956122][   T58] usb 4-1: config 0 descriptor??
[  231.958438][ T8301] team_slave_0: entered promiscuous mode
[  231.964483][   T58] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  232.022109][ T8301] team_slave_1: entered promiscuous mode
[  232.064930][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[  232.180731][   T58] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  232.227397][   T58] usb 4-1: USB disconnect, device number 9
[  232.241917][   T58] pvrusb2: Device being rendered inoperable
[  232.272553][ T8304] hsr_slave_1 (unregistering): left promiscuous mode
[  232.311660][   T58] pvrusb2: Device being rendered inoperable
[  232.398870][ T8300] team0: left promiscuous mode
[  232.404497][ T8300] team_slave_0: left promiscuous mode
[  232.411811][ T8300] team_slave_1: left promiscuous mode
[  233.091233][ T8320] Process accounting resumed
[  233.153746][   T58] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  233.220372][ T8326] kvm: pic: non byte read
[  233.234214][ T8326] pic_ioport_write: 488 callbacks suppressed
[  233.234230][ T8326] kvm: pic: level sensitive irq not supported
[  233.244366][ T8326] kvm: pic: non byte read
[  233.346072][   T58] usb 6-1: config 54 has an invalid interface number: 154 but max is 0
[  233.354697][   T58] usb 6-1: config 54 has no interface number 0
[  233.365840][   T58] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  233.380506][   T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.403557][   T58] usb 6-1: Product: syz
[  233.407749][   T58] usb 6-1: Manufacturer: syz
[  233.415752][   T58] usb 6-1: SerialNumber: syz
[  236.221368][   T58] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  236.237027][ T6734] usb 6-1: Failed to submit usb control message: -71
[  236.264657][ T6734] usb 6-1: unable to send the bmi data to the device: -71
[  236.315688][ T8356] xt_policy: output policy not valid in PREROUTING and INPUT
[  236.336739][   T58] usb 6-1: USB disconnect, device number 7
[  236.418329][ T6734] usb 6-1: unable to get target info from device
[  236.558880][ T6734] usb 6-1: could not get target info (-71)
[  236.652609][ T6734] usb 6-1: could not probe fw (-71)
[  237.976623][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[  238.450129][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'.
[  239.712411][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.706'.
[  241.393668][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  241.517855][ T8423] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.531578][   T29] audit: type=1326 audit(1739722710.868:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  241.573114][   T29] audit: type=1326 audit(1739722710.868:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  241.596365][ T5867] usb 3-1: Using ep0 maxpacket: 32
[  241.614361][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  241.643515][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  241.665694][   T29] audit: type=1326 audit(1739722710.868:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  241.695168][ T5867] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  241.710787][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.719328][   T29] audit: type=1326 audit(1739722710.868:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  241.745923][ T5867] usb 3-1: Product: syz
[  241.759747][ T5867] usb 3-1: Manufacturer: syz
[  241.769414][ T5867] usb 3-1: SerialNumber: syz
[  241.789604][ T5867] usb 3-1: config 0 descriptor??
[  241.801368][   T29] audit: type=1326 audit(1739722710.868:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  241.850174][ T8423] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.850773][   T29] audit: type=1326 audit(1739722710.868:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  241.887622][ T5867] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  241.935983][   T29] audit: type=1326 audit(1739722710.868:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  241.958291][   T29] audit: type=1326 audit(1739722710.868:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  241.986072][   T29] audit: type=1326 audit(1739722710.868:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  242.011248][   T29] audit: type=1326 audit(1739722710.868:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b11f8cde9 code=0x7ffc0000
[  242.061528][   T69] usb 3-1: Failed to submit usb control message: -71
[  242.069462][ T5867] usb 3-1: USB disconnect, device number 9
[  242.080480][   T69] usb 3-1: unable to send the bmi data to the device: -71
[  242.088567][   T69] usb 3-1: unable to get target info from device
[  242.100745][   T69] usb 3-1: could not get target info (-71)
[  242.109274][ T8423] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.110293][   T69] usb 3-1: could not probe fw (-71)
[  242.317689][ T8423] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.480100][ T8423] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.567225][ T8423] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.669047][ T8423] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.732171][ T8423] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.075935][ T8447] block nbd5: shutting down sockets
[  245.183556][ T5867] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  245.367044][ T5867] usb 4-1: config 54 has an invalid interface number: 154 but max is 0
[  245.375399][ T5867] usb 4-1: config 54 has no interface number 0
[  245.404249][ T5867] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  245.417170][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.426678][ T5867] usb 4-1: Product: syz
[  245.431106][ T5867] usb 4-1: Manufacturer: syz
[  245.440225][ T5867] usb 4-1: SerialNumber: syz
[  245.969653][ T8477] SET target dimension over the limit!
[  246.326148][ T5867] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  246.328699][ T6720] usb 4-1: Failed to submit usb control message: -71
[  246.343783][ T6720] usb 4-1: unable to send the bmi data to the device: -71
[  246.350954][ T6720] usb 4-1: unable to get target info from device
[  246.363625][ T6720] usb 4-1: could not get target info (-71)
[  246.369467][ T6720] usb 4-1: could not probe fw (-71)
[  246.494511][ T5867] usb 4-1: USB disconnect, device number 10
[  247.760223][ T5822] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  247.814923][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.737'.
[  247.824266][ T8494] bridge_slave_1: left allmulticast mode
[  247.830025][ T8494] bridge_slave_1: left promiscuous mode
[  247.837195][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.380838][ T8494] bridge_slave_0: left allmulticast mode
[  248.486521][ T8494] bridge_slave_0: left promiscuous mode
[  248.755434][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.637008][ T8498] netlink: 'syz.5.747': attribute type 5 has an invalid length.
[  250.579183][   T58] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  250.992629][   T58] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  251.964654][   T58] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  252.001946][   T58] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  252.031386][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.261508][ T8516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  252.276305][   T58] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  252.886735][ T8534] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  253.036604][   T46] usb 4-1: USB disconnect, device number 11
[  253.103604][ T1204] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  253.263656][ T1204] usb 6-1: Using ep0 maxpacket: 8
[  253.282398][ T1204] usb 6-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  253.307024][ T1204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.332450][ T1204] usb 6-1: Product: syz
[  253.343622][ T1204] usb 6-1: Manufacturer: syz
[  253.350978][ T1204] usb 6-1: SerialNumber: syz
[  253.363491][ T1204] usb 6-1: config 0 descriptor??
[  253.371243][ T1204] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  253.391986][ T1204] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10
[  253.871101][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'.
[  254.011576][ T8560] macvlan0: entered promiscuous mode
[  254.029106][ T8560] ipvlan0: entered promiscuous mode
[  254.050901][ T8560] ipvlan0: left promiscuous mode
[  254.062726][ T8560] macvlan0: left promiscuous mode
[  254.100113][ T8561] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  254.144141][ T8561] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  254.272206][ T8567] loop7: detected capacity change from 0 to 16384
[  254.558781][ T8570] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  254.741977][ T8570] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  254.983815][ T8568] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0
[  255.034386][ T8568] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  255.044221][ T8568] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  255.052709][ T8568] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  255.061905][ T8568] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  255.073863][ T8568] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  255.088276][ T8568] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  255.097285][ T8568] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  255.120485][ T8568] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  255.132299][ T8568] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  255.979282][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  255.981722][ T2337] pvrusb2: request_firmware fatal error with code=-110
[  255.989358][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  256.106298][ T2337] pvrusb2: Failure uploading firmware1
[  256.338166][ T2337] pvrusb2: Device initialization was not successful.
[  256.405109][ T5864] usb 6-1: USB disconnect, device number 8
[  256.499640][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  256.580164][ T8587] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  256.588999][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  256.616103][ T5904] IPVS: starting estimator thread 0...
[  256.633526][    T9] pvrusb2: Device being rendered inoperable
[  256.638806][ T2337] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  256.664391][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  256.680554][ T2337] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  256.738050][ T8590] IPVS: using max 24 ests per chain, 57600 per kthread
[  257.014171][ T8599] netlink: 72 bytes leftover after parsing attributes in process `syz.5.767'.
[  257.466896][ T8600] SET target dimension over the limit!
[  257.872181][ T5822] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  258.070478][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.768'.
[  258.524263][ T1204] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  258.773706][ T1204] usb 4-1: Using ep0 maxpacket: 16
[  258.815029][ T1204] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  258.833561][ T1204] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  258.868058][ T1204] usb 4-1: Product: syz
[  258.878160][ T1204] usb 4-1: Manufacturer: syz
[  258.882784][ T1204] usb 4-1: SerialNumber: syz
[  258.924928][ T1204] usb 4-1: config 0 descriptor??
[  259.246023][   T46] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  259.313759][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  259.423707][   T46] usb 6-1: Using ep0 maxpacket: 8
[  259.433186][   T46] usb 6-1: config 0 has an invalid interface number: 33 but max is 1
[  259.437072][ T1204] usb 4-1: USB disconnect, device number 12
[  259.469994][   T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.486504][ T5867] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  259.530620][   T46] usb 6-1: config 0 has no interface number 1
[  259.557388][ T5867] usb 3-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[  259.569130][   T46] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  259.580512][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  259.594083][ T5867] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  259.605536][   T46] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  259.614997][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.623649][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.632088][   T46] usb 6-1: Product: syz
[  259.636465][   T46] usb 6-1: Manufacturer: syz
[  259.646500][   T46] usb 6-1: SerialNumber: syz
[  259.658199][ T5867] usb 3-1: config 0 descriptor??
[  259.667033][   T46] usb 6-1: config 0 descriptor??
[  259.676469][ T5867] usb-storage 3-1:0.0: USB Mass Storage device detected
[  259.694977][   T46] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  259.744333][ T5867] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  259.889055][   T46] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  259.932935][   T46] usb 6-1: USB disconnect, device number 9
[  259.942717][ T1204] usb 3-1: USB disconnect, device number 10
[  259.982587][   T46] pvrusb2: Device being rendered inoperable
[  260.004965][   T46] pvrusb2: Device being rendered inoperable
[  260.201443][ T8634] pim6reg: entered allmulticast mode
[  261.876816][ T5822] Bluetooth: hci2: unexpected event for opcode 0x200c
[  262.745790][ T8655] netlink: 'syz.4.783': attribute type 21 has an invalid length.
[  262.754559][ T8655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.783'.
[  263.319467][ T5822] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  263.378887][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'.
[  263.403565][ T8665] bridge_slave_1: left allmulticast mode
[  263.410071][ T8665] bridge_slave_1: left promiscuous mode
[  263.433646][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.450322][ T8656] Process accounting resumed
[  263.544240][ T5864] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  263.544404][ T8665] bridge_slave_0: left allmulticast mode
[  263.574260][ T8665] bridge_slave_0: left promiscuous mode
[  263.580084][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.693638][ T5864] usb 6-1: Using ep0 maxpacket: 16
[  263.706200][ T5864] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[  263.718552][ T5864] usb 6-1: config 0 has no interface number 0
[  263.725196][ T5864] usb 6-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55
[  263.740121][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.779671][ T5864] usb 6-1: config 0 descriptor??
[  263.865215][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.069948][   T58] usb 6-1: USB disconnect, device number 10
[  264.423596][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  264.586152][ T5904] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  264.619432][ T5904] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[  264.642339][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  264.670115][ T5904] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  264.687923][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.699451][ T5904] usb 5-1: config 0 descriptor??
[  264.792599][ T5904] usb-storage 5-1:0.0: USB Mass Storage device detected
[  264.966672][ T5904] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  265.264985][ T5904] usb 5-1: USB disconnect, device number 13
[  265.418129][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  265.923681][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  265.930743][ T5135] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  265.942748][ T5135] Bluetooth: hci2: Injecting HCI hardware error event
[  265.963465][ T5135] Bluetooth: hci2: hardware error 0x00
[  265.976244][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  265.984712][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  265.992338][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  265.999824][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  266.535273][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.799'.
[  267.910899][ T8681] netlink: 'syz.0.797': attribute type 21 has an invalid length.
[  267.918934][ T8681] netlink: 132 bytes leftover after parsing attributes in process `syz.0.797'.
[  267.933136][ T8692] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  267.975138][ T8692] batman_adv: batadv0: Adding interface: ip6gretap1
[  268.004028][ T8692] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.054265][ T5135] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  268.060944][ T5135] Bluetooth: hci4: command tx timeout
[  268.090376][ T8692] batman_adv: batadv0: Interface activated: ip6gretap1
[  268.124720][ T8693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.132165][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.156646][ T8693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.394086][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.427486][ T8693] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  268.496149][ T8693] batman_adv: batadv0: Removing interface: ip6gretap1
[  268.772168][ T8708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.803'.
[  269.743640][   T46] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  269.954171][   T46] usb 6-1: Using ep0 maxpacket: 32
[  270.012964][   T46] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  270.030596][   T46] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  270.047990][   T46] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  270.059374][   T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.135324][ T5135] Bluetooth: hci4: command tx timeout
[  270.194724][   T46] hub 6-1:4.0: bad descriptor, ignoring hub
[  270.200773][   T46] hub 6-1:4.0: probe with driver hub failed with error -5
[  270.217350][   T46] usbhid 6-1:4.0: couldn't find an input interrupt endpoint
[  270.406626][ T8727] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  271.496559][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'.
[  271.531091][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'.
[  271.539799][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'.
[  271.620354][ T6734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.631137][ T6734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.640921][ T6734] bond0 (unregistering): Released all slaves
[  271.700506][ T8744] vlan3: entered promiscuous mode
[  271.706670][ T8744] syz_tun: entered promiscuous mode
[  271.715826][ T8744] syz_tun: left promiscuous mode
[  271.786228][   T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  271.898484][ T8686] chnl_net:caif_netlink_parms(): no params data found
[  271.913792][ T5867] usb 6-1: USB disconnect, device number 11
[  272.294045][ T5135] Bluetooth: hci4: command tx timeout
[  272.795739][   T46] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  272.838977][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.884312][   T46] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  272.910087][   T46] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  272.941308][   T46] usb 5-1: Manufacturer: syz
[  272.957275][   T46] usb 5-1: config 0 descriptor??
[  274.062760][   T46] rc_core: IR keymap rc-hauppauge not found
[  274.072892][   T46] Registered IR keymap rc-empty
[  274.077961][   T29] kauditd_printk_skb: 155 callbacks suppressed
[  274.077976][   T29] audit: type=1800 audit(1739722743.188:335): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.816" name="SYSV798dd820" dev="tmpfs" ino=0 res=0 errno=0
[  274.703538][ T5135] Bluetooth: hci4: command tx timeout
[  274.713752][ T8742] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  274.720305][ T8742] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  274.749825][ T8742] vhci_hcd vhci_hcd.0: Device attached
[  274.764709][   T46] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  274.778656][ T8766] vhci_hcd: connection closed
[  274.780069][ T6720] vhci_hcd: stop threads
[  274.787570][   T46] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11
[  274.833088][ T5821] usb 5-1: USB disconnect, device number 14
[  274.852388][ T6720] vhci_hcd: release socket
[  274.878265][ T6720] vhci_hcd: disconnect device
[  274.940660][ T6734] hsr_slave_0: left promiscuous mode
[  274.980011][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.068384][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.285900][ T8790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.821'.
[  275.320899][ T8790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.821'.
[  276.674874][ T8805] openvswitch: netlink: IPv4 tunnel dst address is zero
[  277.707353][ T6734] team0 (unregistering): Port device team_slave_1 removed
[  278.568559][ T6734] team0 (unregistering): Port device team_slave_0 removed
[  278.671489][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'.
[  278.680844][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'.
[  278.690328][ T8817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.827'.
[  278.788549][ T8817] nbd0: detected capacity change from 0 to 256
[  278.809028][ T5135] block nbd0: Receive control failed (result -104)
[  279.233123][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.263658][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.270905][ T8686] bridge_slave_0: entered allmulticast mode
[  279.278928][ T8686] bridge_slave_0: entered promiscuous mode
[  279.287387][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.296308][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.303975][ T8686] bridge_slave_1: entered allmulticast mode
[  279.314690][ T8686] bridge_slave_1: entered promiscuous mode
[  280.756604][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.881955][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.644908][ T8686] team0: Port device team_slave_0 added
[  282.086076][ T8686] team0: Port device team_slave_1 added
[  282.289142][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.310996][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.414313][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.452638][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.463845][ T6734] IPVS: stop unused estimator thread 0...
[  282.481016][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.585802][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.528639][ T8686] hsr_slave_0: entered promiscuous mode
[  283.558439][ T8686] hsr_slave_1: entered promiscuous mode
[  283.591590][ T8686] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.633944][ T8686] Cannot create hsr debugfs directory
[  284.153949][ T8876] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  284.255827][ T8686] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  284.291581][ T8686] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  284.353178][ T8686] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  284.402360][ T8686] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  284.531942][ T8885] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  285.289425][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.337228][ T8686] 8021q: adding VLAN 0 to HW filter on device team0
[  285.569622][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.576852][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.721723][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.728831][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.990591][ T8905] kvm: pic: non byte read
[  286.032084][ T8905] kvm: pic: non byte read
[  286.063026][ T8905] kvm: pic: non byte read
[  286.141459][ T8905] kvm: pic: non byte read
[  287.353288][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.576514][ T8686] veth0_vlan: entered promiscuous mode
[  288.591884][ T8686] veth1_vlan: entered promiscuous mode
[  288.719381][ T8686] veth0_macvtap: entered promiscuous mode
[  289.200916][ T8686] veth1_macvtap: entered promiscuous mode
[  289.325193][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.383431][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.414466][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.458861][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.490733][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.524926][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.538837][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.549408][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.561692][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.628922][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.743890][   T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  289.798100][ T8686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.834726][ T8686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.875085][ T8686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.884288][ T8686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.963288][   T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.998754][   T46] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  290.125640][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.167771][   T46] usb 4-1: config 0 descriptor??
[  290.199879][   T46] pwc: Askey VC010 type 2 USB webcam detected.
[  290.271532][ T6720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.292102][ T6720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.390821][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.421356][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.616988][   T46] pwc: recv_control_msg error -32 req 02 val 2b00
[  290.671030][   T46] pwc: recv_control_msg error -32 req 02 val 2700
[  290.736573][   T46] pwc: recv_control_msg error -32 req 02 val 2c00
[  290.752106][   T46] pwc: recv_control_msg error -32 req 04 val 1000
[  290.798732][   T46] pwc: recv_control_msg error -32 req 04 val 1300
[  291.062855][   T46] pwc: recv_control_msg error -32 req 02 val 2000
[  291.127632][   T46] pwc: recv_control_msg error -32 req 02 val 2100
[  291.159135][   T46] pwc: recv_control_msg error -32 req 04 val 1500
[  291.396166][   T46] pwc: recv_control_msg error -71 req 02 val 2400
[  291.425361][   T46] pwc: recv_control_msg error -71 req 02 val 2600
[  291.437272][   T46] pwc: recv_control_msg error -71 req 02 val 2900
[  291.454748][   T46] pwc: recv_control_msg error -71 req 02 val 2800
[  291.463858][   T46] pwc: recv_control_msg error -71 req 04 val 1100
[  291.495561][   T46] pwc: recv_control_msg error -71 req 04 val 1200
[  291.507393][   T46] pwc: Registered as video103.
[  291.538175][   T46] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  291.585198][   T46] usb 4-1: USB disconnect, device number 13
[  291.634282][ T8996] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer.
[  294.537834][ T9044] netlink: 72 bytes leftover after parsing attributes in process `syz.4.873'.
[  298.260983][ T9103] netlink: 72 bytes leftover after parsing attributes in process `syz.6.886'.
[  300.789117][ T9140] loop6: detected capacity change from 0 to 16384
[  300.926282][ T9140] I/O error, dev loop6, sector 440 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0
[  300.984548][ T9140] I/O error, dev loop6, sector 440 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0
[  302.689932][ T9170] warning: `syz.5.902' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  303.743626][ T5135] Bluetooth: hci4: command tx timeout
[  304.067400][ T9189] bridge: RTM_NEWNEIGH with invalid ether address
[  304.271985][ T9200] loop6: detected capacity change from 0 to 16384
[  304.360117][ T9200] I/O error, dev loop6, sector 80 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0
[  304.381436][ T9200] I/O error, dev loop6, sector 80 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0
[  305.837059][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'.
[  308.876082][ T9252] netlink: 56 bytes leftover after parsing attributes in process `syz.5.920'.
[  309.624477][   T59] block nbd0: Possible stuck request ffff888026137000: control (read@0,4096B). Runtime 30 seconds
[  311.228132][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'.
[  313.921494][   T29] audit: type=1326 audit(1739722783.248:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9318 comm="syz.6.934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f1838cde9 code=0x0
[  313.942438][    C0] vkms_vblank_simulate: vblank timer overrun
[  316.280602][ T9353] xt_TCPMSS: Only works on TCP SYN packets
[  317.345695][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  317.346870][ T2337] pvrusb2: request_firmware fatal error with code=-110
[  317.352150][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  317.645426][ T2337] pvrusb2: Failure uploading firmware1
[  317.650934][ T2337] pvrusb2: Device initialization was not successful.
[  317.694246][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  317.827273][ T9362] xt_socket: unknown flags 0x4
[  318.207239][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  318.253559][    T9] pvrusb2: Device being rendered inoperable
[  320.423664][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.950'.
[  322.262711][ T9411] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer.
[  325.937098][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[  330.431519][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  330.626013][    T9] usb 1-1: config 9 has an invalid interface number: 172 but max is 28
[  330.662416][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'.
[  330.691942][    T9] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 29
[  330.819471][    T9] usb 1-1: config 9 has no interface number 0
[  330.877873][    T9] usb 1-1: config 9 interface 172 altsetting 9 endpoint 0x81 has invalid maxpacket 1775, setting to 1024
[  331.203533][    T9] usb 1-1: config 9 interface 172 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  331.241026][ T9506] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  331.242962][    T9] usb 1-1: config 9 interface 172 has no altsetting 0
[  331.522238][    T9] usb 1-1: string descriptor 0 read error: -71
[  331.533182][    T9] usb 1-1: New USB device found, idVendor=0403, idProduct=d9aa, bcdDevice=8b.e4
[  332.083616][ T9515] netlink: 'syz.5.982': attribute type 2 has an invalid length.
[  332.499303][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.526335][    T9] usb 1-1: can't set config #9, error -71
[  332.873869][    T9] usb 1-1: USB disconnect, device number 7
[  333.471361][ T9540] =======================================================
[  333.471361][ T9540] WARNING: The mand mount option has been deprecated and
[  333.471361][ T9540]          and is ignored by this kernel. Remove the mand
[  333.471361][ T9540]          option from the mount to silence this warning.
[  333.471361][ T9540] =======================================================
[  334.329548][ T9555] netlink: 'syz.4.991': attribute type 4 has an invalid length.
[  334.410508][ T9562] netlink: 'syz.4.991': attribute type 4 has an invalid length.
[  334.549412][ T9564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.993'.
[  336.666622][ T9599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1001'.
[  338.294074][ T9632] netlink: del zone limit has 8 unknown bytes
[  340.002210][   T59] block nbd0: Possible stuck request ffff888026137000: control (read@0,4096B). Runtime 60 seconds
[  340.159976][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1013'.
[  344.493498][ T9702] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  345.217005][ T9714] overlayfs: failed to clone upperpath
[  346.238569][ T9733] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1035'.
[  346.293698][ T5135] Bluetooth: hci4: command 0x0405 tx timeout
[  347.323739][ T5869] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  347.505640][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short
[  347.557210][ T5869] usb 6-1: config 1 interface 0 has no altsetting 0
[  347.601770][ T5869] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  348.363435][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.371480][ T5869] usb 6-1: Product: syz
[  348.392899][ T5869] usb 6-1: Manufacturer: syz
[  348.398060][ T5869] usb 6-1: SerialNumber: syz
[  348.484728][ T9756] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1044'.
[  348.511921][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1044'.
[  348.547621][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1044'.
[  348.724292][ T9764] overlayfs: failed to clone upperpath
[  348.739889][ T9764] Process accounting resumed
[  348.854333][ T5869] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8
[  348.903872][ T5869] usb 6-1: USB disconnect, device number 12
[  348.950080][ T5869] usblp0: removed
[  349.513333][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1054'.
[  351.135184][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  351.146880][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  351.154792][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  351.165756][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  351.180915][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  351.193727][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  351.333730][ T5869] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  351.414947][ T9800] chnl_net:caif_netlink_parms(): no params data found
[  351.504398][ T5869] usb 5-1: Using ep0 maxpacket: 32
[  351.512528][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  351.556447][ T5869] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  351.598053][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  351.606968][ T5869] usb 5-1: Product: syz
[  351.611160][ T5869] usb 5-1: Manufacturer: syz
[  351.616089][ T5869] usb 5-1: SerialNumber: syz
[  351.631668][ T5869] usb 5-1: config 0 descriptor??
[  351.644535][ T9798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  351.654693][ T5869] hub 5-1:0.0: bad descriptor, ignoring hub
[  351.662112][ T5869] hub 5-1:0.0: probe with driver hub failed with error -5
[  351.692175][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.749473][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.759083][ T9800] bridge_slave_0: entered allmulticast mode
[  351.778092][ T9800] bridge_slave_0: entered promiscuous mode
[  351.799029][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.811942][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.821934][ T9800] bridge_slave_1: entered allmulticast mode
[  351.830029][ T9800] bridge_slave_1: entered promiscuous mode
[  351.949300][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.004371][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.076738][ T9800] team0: Port device team_slave_0 added
[  352.100995][ T9800] team0: Port device team_slave_1 added
[  352.999651][   T46] usb 5-1: USB disconnect, device number 15
[  353.082845][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.571461][   T54] Bluetooth: hci5: command tx timeout
[  353.963711][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.009808][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.092144][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.123468][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.167844][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.289089][ T9800] hsr_slave_0: entered promiscuous mode
[  354.299886][ T9800] hsr_slave_1: entered promiscuous mode
[  354.316332][ T9800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  354.333722][ T9800] Cannot create hsr debugfs directory
[  354.565836][ T9850] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  354.590798][ T9850] overlayfs: failed to set xattr on upper
[  354.608283][ T9850] overlayfs: ...falling back to redirect_dir=nofollow.
[  354.638801][ T9850] overlayfs: ...falling back to index=off.
[  354.648234][ T9800] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  354.658192][ T9850] overlayfs: ...falling back to uuid=null.
[  354.667762][ T9800] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  354.679523][ T9800] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  354.689545][ T9800] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  354.877028][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.890825][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1073'.
[  354.916074][ T9800] 8021q: adding VLAN 0 to HW filter on device team0
[  355.005100][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.012272][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.040138][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.047300][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.123528][ T9800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  355.506674][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.563649][ T5869] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  355.658351][   T54] Bluetooth: hci5: command tx timeout
[  355.739701][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.763503][ T5869] usb 7-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  355.783448][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.804395][ T5869] usb 7-1: config 0 descriptor??
[  355.826823][ T9800] veth0_vlan: entered promiscuous mode
[  355.847095][ T9800] veth1_vlan: entered promiscuous mode
[  355.907486][ T9800] veth0_macvtap: entered promiscuous mode
[  355.917848][ T9800] veth1_macvtap: entered promiscuous mode
[  355.944282][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.956410][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.967309][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.979275][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.983510][ T5864] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  355.990355][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  356.011724][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.024703][ T5869] usbhid 7-1:0.0: can't add hid device: -71
[  356.032434][ T5869] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  356.040745][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  356.068822][ T5869] usb 7-1: USB disconnect, device number 2
[  356.079364][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  356.092279][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.106593][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  356.120762][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.144424][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  356.171156][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.184603][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  356.185879][ T5864] usb 5-1: Using ep0 maxpacket: 16
[  356.194998][ T9800] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.210404][ T9800] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.222314][ T9800] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.231558][ T9800] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.237819][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  356.294836][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  356.332407][ T5864] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  356.348446][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.358047][ T5864] usb 5-1: Product: syz
[  356.362358][ T5864] usb 5-1: Manufacturer: syz
[  356.372379][ T5864] usb 5-1: SerialNumber: syz
[  356.408482][ T6340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.424766][ T5864] usb 5-1: config 0 descriptor??
[  356.443600][ T6340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.453176][ T5864] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  356.472200][ T5864] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  356.502021][   T29] audit: type=1800 audit(1739722825.828:337): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1083" name="bus" dev="overlay" ino=877 res=0 errno=0
[  356.625871][ T6340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.680836][ T6340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.743147][   T54] Bluetooth: hci5: command tx timeout
[  357.752074][ T5864] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  357.764881][ T5864] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  358.718955][ T5864] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  358.734631][ T5864] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  358.757826][ T5864] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  358.981657][ T1790] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.984319][ T5864] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  359.043970][ T5864] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  359.073231][ T5864] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  359.120317][ T5864] usb 5-1: USB disconnect, device number 16
[  359.205360][ T1790] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.270113][ T1790] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.378388][ T1790] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.427924][   T54] Bluetooth: hci5: command tx timeout
[  360.711917][ T9929] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  362.302321][   T54] Bluetooth: hci0: sending frame failed (-49)
[  362.314589][ T5135] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  362.761973][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.772446][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.781216][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.793441][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.800983][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  362.814430][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  364.062529][ T1790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.085823][ T1790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.099874][ T1790] bond0 (unregistering): Released all slaves
[  364.302352][ T1790] bond1 (unregistering): (slave team_slave_1): Releasing active interface
[  364.313131][ T1790] bond1 (unregistering): Released all slaves
[  364.330366][ T9954] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.486727][ T9954] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.600076][ T9954] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.714776][ T9954] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.928847][ T5135] Bluetooth: hci0: command tx timeout
[  364.951066][ T9954] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.786427][ T9954] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.802578][ T9954] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.854609][ T9990] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  365.978650][ T9954] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.064194][ T1790] hsr_slave_0: left promiscuous mode
[  366.100479][ T1790] hsr_slave_1: left promiscuous mode
[  366.191821][ T1790] veth1_macvtap: left promiscuous mode
[  366.223518][ T1790] veth0_macvtap: left promiscuous mode
[  366.239201][ T1790] veth1_vlan: left promiscuous mode
[  366.252906][ T1790] veth0_vlan: left promiscuous mode
[  366.864099][T10022] Cache volume key already in use (9p,(null),)
[  367.013672][ T5135] Bluetooth: hci0: command tx timeout
[  368.488510][T10039] overlayfs: failed to resolve './file1': -2
[  368.764692][T10045] ip6t_srh: unknown srh invflags 7D00
[  369.143732][ T5135] Bluetooth: hci0: command tx timeout
[  369.508408][ T1790] team0 (unregistering): Port device team_slave_0 removed
[  370.854522][   T59] block nbd0: Possible stuck request ffff888026137000: control (read@0,4096B). Runtime 90 seconds
[  371.323431][ T5135] Bluetooth: hci0: command tx timeout
[  371.389933][T10055] mmap: syz.7.1124 (10055) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  371.845132][   T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  372.033781][   T58] usb 7-1: Using ep0 maxpacket: 16
[  372.040805][   T58] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  372.049423][   T58] usb 7-1: config 0 has no interface number 0
[  372.057531][   T58] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  372.069055][   T58] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  372.086846][ T6340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.091593][   T58] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  372.109995][   T58] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  372.133398][   T58] usb 7-1: Product: syz
[  372.140927][ T6340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.141731][   T58] usb 7-1: SerialNumber: syz
[  372.201016][   T58] usb 7-1: config 0 descriptor??
[  372.232723][   T58] cm109 7-1:0.8: invalid payload size 0, expected 4
[  372.246785][   T58] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input15
[  372.497846][ T9955] chnl_net:caif_netlink_parms(): no params data found
[  372.694486][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  374.046476][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.062746][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.070013][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.077275][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.084411][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.091621][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.099737][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.108539][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.115656][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.122775][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  374.153064][ T5864] usb 7-1: USB disconnect, device number 3
[  374.159038][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  374.182810][ T5864] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  374.250532][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.268790][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.280865][ T9955] bridge_slave_0: entered allmulticast mode
[  374.290897][ T9955] bridge_slave_0: entered promiscuous mode
[  374.301074][ T5135] Bluetooth: hci3: unexpected event 0x3e length: 368 > 260
[  374.301105][ T5135] Bluetooth: hci3: unexpected subevent 0x0d length: 367 > 260
[  374.317626][ T5135] Bluetooth: hci3: adv larger than maximum supported
[  374.317691][ T5135] Bluetooth: hci3: adv larger than maximum supported
[  374.328372][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.382123][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.398095][ T9955] bridge_slave_1: entered allmulticast mode
[  374.410256][ T9955] bridge_slave_1: entered promiscuous mode
[  374.467832][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.486574][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.540664][ T9955] team0: Port device team_slave_0 added
[  374.551243][ T9955] team0: Port device team_slave_1 added
[  374.574833][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.581877][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.674959][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  374.710676][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  374.724893][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.788097][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  374.916732][ T9955] hsr_slave_0: entered promiscuous mode
[  374.932961][ T9955] hsr_slave_1: entered promiscuous mode
[  374.945381][ T9955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  374.968568][ T9955] Cannot create hsr debugfs directory
[  375.211609][T10124] overlayfs: failed to clone upperpath
[  375.256821][T10127] syz_tun: entered promiscuous mode
[  375.262475][T10127] vlan2: entered promiscuous mode
[  375.272955][T10127] syz_tun: left promiscuous mode
[  375.459541][ T5135] Bluetooth: hci1: unexpected event for opcode 0x2031
[  376.277215][T10147] [U] 
[  376.353323][ T9955] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  376.460602][ T9955] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  376.569836][ T9955] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  377.369172][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'.
[  377.511371][ T9955] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  378.685345][ T9955] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.992074][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.998486][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  379.017817][ T9955] 8021q: adding VLAN 0 to HW filter on device team0
[  379.745629][ T5135] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  379.756842][ T5135] Bluetooth: hci1: Injecting HCI hardware error event
[  379.767782][ T5135] Bluetooth: hci1: hardware error 0x00
[  380.689764][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.696953][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.718263][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.725412][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.933631][ T5135] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  382.240479][ T9955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.255210][   T29] audit: type=1326 audit(1739722853.578:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.356812][   T29] audit: type=1326 audit(1739722853.578:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.447960][   T29] audit: type=1326 audit(1739722853.578:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.483911][ T9955] veth0_vlan: entered promiscuous mode
[  384.505656][   T29] audit: type=1326 audit(1739722853.578:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.536626][ T9955] veth1_vlan: entered promiscuous mode
[  384.573519][   T29] audit: type=1326 audit(1739722853.578:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.596343][   T29] audit: type=1326 audit(1739722853.578:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.618378][   T29] audit: type=1326 audit(1739722853.578:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.640085][   T29] audit: type=1326 audit(1739722853.578:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.665017][   T29] audit: type=1326 audit(1739722853.578:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.712057][   T29] audit: type=1326 audit(1739722853.578:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  384.716107][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'.
[  384.748742][ T9955] veth0_macvtap: entered promiscuous mode
[  384.806549][ T9955] veth1_macvtap: entered promiscuous mode
[  384.858196][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.943488][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.991377][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.023427][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.033286][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.166222][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.193503][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.851775][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.932013][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.994650][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.474395][T10279] Smack: duplicate mount options
[  386.555913][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.959693][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.970331][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.986979][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.007727][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.022850][ T9955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.050184][ T9955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.234669][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.010060][ T9955] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.054071][ T9955] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.098940][ T9955] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.133457][ T9955] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.304129][T10297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.438067][T10297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  389.156624][ T6734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.196483][ T6734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.331995][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.342558][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.386301][T10320] bridge0: entered promiscuous mode
[  389.606951][T10320] bridge0: entered allmulticast mode
[  389.659468][T10327] netlink: 'syz.4.1186': attribute type 10 has an invalid length.
[  389.703547][T10320] team0: Port device bridge0 added
[  390.808895][   T29] kauditd_printk_skb: 97 callbacks suppressed
[  390.808935][   T29] audit: type=1326 audit(1739722860.058:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf8778cde9 code=0x0
[  391.186755][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[  391.438108][T10355] netlink: 'syz.3.1193': attribute type 4 has an invalid length.
[  391.510302][T10355] netlink: 'syz.3.1193': attribute type 4 has an invalid length.
[  392.043544][T10366] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1192'.
[  395.565063][T10402] overlayfs: missing 'workdir'
[  398.139152][   T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  398.907882][   T25] usb 7-1: Using ep0 maxpacket: 8
[  398.970511][   T25] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  398.979909][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.988426][   T25] usb 7-1: Product: syz
[  398.992684][   T25] usb 7-1: Manufacturer: syz
[  398.997387][   T25] usb 7-1: SerialNumber: syz
[  399.012538][   T25] usb 7-1: config 0 descriptor??
[  399.331851][   T25] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  399.896543][   T25] gspca_sonixj: reg_w1 err -110
[  400.016012][   T25] sonixj 7-1:0.0: probe with driver sonixj failed with error -110
[  400.197093][   T25] usb 7-1: USB disconnect, device number 4
[  401.307366][   T59] block nbd0: Possible stuck request ffff888026137000: control (read@0,4096B). Runtime 120 seconds
[  402.102024][T10467] xt_bpf: check failed: parse error
[  402.356397][T10477] ipvlan2: entered promiscuous mode
[  402.403284][T10477] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  402.444818][T10477] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  402.457547][ T5869] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  402.685434][ T5869] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  402.708992][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.731087][ T5869] usb 9-1: Product: syz
[  402.753396][ T5869] usb 9-1: Manufacturer: syz
[  402.780756][ T5869] usb 9-1: SerialNumber: syz
[  402.810191][ T5869] usb 9-1: config 0 descriptor??
[  403.031696][ T5869] hso 9-1:0.0: Can't find BULK IN endpoint
[  403.074652][ T5869] usb-storage 9-1:0.0: USB Mass Storage device detected
[  404.013686][ T5869] usb 9-1: USB disconnect, device number 2
[  404.181833][T10500] netlink: 'syz.4.1231': attribute type 10 has an invalid length.
[  405.317987][T10500] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  407.093922][T10522] overlayfs: failed to get inode (-116)
[  407.106123][T10522] overlayfs: failed to look up (file0) for ino (-116)
[  407.134342][   T29] audit: type=1326 audit(1739722876.458:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  407.211031][   T29] audit: type=1326 audit(1739722876.458:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  407.313478][   T29] audit: type=1326 audit(1739722876.458:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  407.499915][   T29] audit: type=1326 audit(1739722876.458:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  407.521728][   T29] audit: type=1326 audit(1739722876.458:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  407.611105][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1237'.
[  408.584180][   T29] audit: type=1326 audit(1739722876.478:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  408.606873][   T29] audit: type=1326 audit(1739722876.478:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  408.629349][   T29] audit: type=1326 audit(1739722876.478:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  408.651595][   T29] audit: type=1326 audit(1739722876.498:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  408.861864][   T29] audit: type=1326 audit(1739722876.498:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10524 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce338cde9 code=0x7ffc0000
[  410.037774][T10569] rdma_op ffff88805db311f0 conn xmit_rdma 0000000000000000
[  410.870691][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1249'.
[  410.972141][T10579] 8021q: adding VLAN 0 to HW filter on device batadv1
[  410.980767][T10579] bridge0: port 3(batadv1) entered blocking state
[  410.987892][T10579] bridge0: port 3(batadv1) entered disabled state
[  410.995482][T10579] batadv1: entered allmulticast mode
[  411.007830][T10579] batadv1: entered promiscuous mode
[  411.015075][T10579] bridge0: port 3(batadv1) entered blocking state
[  411.021750][T10579] bridge0: port 3(batadv1) entered forwarding state
[  411.879363][   T69] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  411.889404][   T69] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  411.898479][T10585] IPVS: Error connecting to the multicast addr
[  415.358086][T10634] 9pnet_fd: Insufficient options for proto=fd
[  416.643828][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  416.643846][   T29] audit: type=1326 audit(1739722885.968:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10658 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf878cde9 code=0x7ffc0000
[  416.862045][   T29] audit: type=1326 audit(1739722885.968:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10658 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f8cf878cde9 code=0x7ffc0000
[  417.017367][   T29] audit: type=1326 audit(1739722885.968:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10658 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf878cde9 code=0x7ffc0000
[  418.297104][T10680] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.415589][T10680] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.897127][T10700] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  422.219480][T10680] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.538676][T10680] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.712001][T10680] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.756691][T10680] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.579320][T10739] xt_TCPMSS: Only works on TCP SYN packets
[  424.971526][T10680] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.060713][T10680] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.087296][T10745] netlink: 'syz.4.1290': attribute type 1 has an invalid length.
[  425.190879][T10745] 8021q: adding VLAN 0 to HW filter on device bond1
[  425.409730][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1291'.
[  426.229290][T10745] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.298050][T10745] bond1: (slave ipip1): The slave device specified does not support setting the MAC address
[  426.853986][T10745] bond1: (slave ipip1): Error -95 calling set_mac_address
[  426.889228][T10753] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  426.896157][T10753] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  426.917201][T10753] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  426.938175][T10753] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  427.062133][T10756] bond1: (slave ip6erspan0): making interface the new active one
[  427.095551][T10753] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  427.200337][T10753] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  427.209831][T10756] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  430.412408][T10818] netlink: 'syz.4.1306': attribute type 1 has an invalid length.
[  430.567750][T10822] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  430.690681][T10826] 8021q: adding VLAN 0 to HW filter on device bond2
[  430.703166][ T1790] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  430.895415][ T6729] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  430.989930][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'.
[  431.023862][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'.
[  431.055942][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'.
[  432.433608][   T59] block nbd0: Possible stuck request ffff888026137000: control (read@0,4096B). Runtime 150 seconds
[  433.746108][T10874] delete_channel: no stack
[  434.592891][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[  436.771746][ T5904] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  437.398457][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1326'.
[  437.432883][ T5904] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  437.449391][T10924] bridge0: entered promiscuous mode
[  437.454790][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.488394][T10924] bridge0: left promiscuous mode
[  437.512312][ T5904] usb 8-1: config 0 descriptor??
[  438.255678][ T5904] ath6kl: Failed to submit usb control message: -71
[  438.279293][ T5904] ath6kl: unable to send the bmi data to the device: -71
[  438.316772][ T5904] ath6kl: Unable to send get target info: -71
[  438.339501][ T5904] ath6kl: Failed to init ath6kl core: -71
[  438.359806][ T5904] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71
[  438.418100][ T5904] usb 8-1: USB disconnect, device number 2
[  438.519153][T10947] xt_CT: You must specify a L4 protocol and not use inversions on it
[  439.583558][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  439.813461][    T9] usb 9-1: Using ep0 maxpacket: 32
[  439.853531][    T9] usb 9-1: config 0 has an invalid interface number: 183 but max is 0
[  439.872532][    T9] usb 9-1: config 0 has no interface number 0
[  439.893548][    T9] usb 9-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528
[  439.933011][    T9] usb 9-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[  440.109002][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.277024][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  440.294016][    T9] usb 9-1: Product: syz
[  440.339485][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  440.380593][    T9] usb 9-1: Manufacturer: syz
[  440.401254][    T9] usb 9-1: SerialNumber: syz
[  440.522315][    T9] usb 9-1: config 0 descriptor??
[  440.527961][T10944] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  440.779150][T10944] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  440.791864][   T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.869664][    T9] net1080 9-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.8-1, NetChip TurboCONNECT, ba:f0:f7:46:f3:74
[  440.983721][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.042556][ T5869] usb 9-1: USB disconnect, device number 3
[  441.049875][ T5869] net1080 9-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.8-1, NetChip TurboCONNECT
[  441.160882][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.336168][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.685014][   T11] batadv1: left allmulticast mode
[  441.700393][   T11] batadv1: left promiscuous mode
[  441.726986][   T11] bridge0: port 3(batadv1) entered disabled state
[  441.769849][   T11] bridge_slave_1: left allmulticast mode
[  441.781645][   T11] bridge_slave_1: left promiscuous mode
[  441.805667][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.852117][T11010] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1345'.
[  441.863756][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1345'.
[  442.339618][   T11] bridge_slave_0: left allmulticast mode
[  442.366673][   T11] bridge_slave_0: left promiscuous mode
[  442.387628][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.537868][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  442.574811][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  442.586520][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  442.594408][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  442.602539][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  442.610079][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  442.663515][ T5135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  442.675021][ T5135] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  442.690259][ T5135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  442.699329][ T5135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  442.707050][ T5135] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  442.714491][ T5135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  443.052596][   T29] audit: type=1326 audit(1739722912.378:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11027 comm="syz.3.1349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf8778cde9 code=0x0
[  444.790832][   T54] Bluetooth: hci5: command tx timeout
[  446.050382][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.080031][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.116636][   T11] bond0 (unregistering): Released all slaves
[  446.853506][   T54] Bluetooth: hci5: command tx timeout
[  446.979160][   T11] hsr_slave_0: left promiscuous mode
[  446.990680][   T11] hsr_slave_1: left promiscuous mode
[  447.016561][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.040572][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.885573][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.933937][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.170585][   T29] audit: type=1804 audit(1739722917.508:484): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.1369" name="/newroot/106/bus/file0" dev="overlay" ino=597 res=1 errno=0
[  448.181164][   T11] veth1_macvtap: left promiscuous mode
[  448.602194][   T11] veth0_macvtap: left promiscuous mode
[  448.608367][   T11] veth1_vlan: left promiscuous mode
[  448.658864][T11113] hfs: unable to load iocharset "lI=|�m�����I�䦅�aКzlK��@��Ɇ���'Cڰ{�����EJ�V*��G<��i�k��=��3�~�?m�Vʟ�i�dmӭA�4ϊ�H�ε_����!���k�"
[  448.847410][   T11] veth0_vlan: left promiscuous mode
[  449.029531][   T54] Bluetooth: hci5: command tx timeout
[  449.820057][T11125] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  449.848951][T11125] CIFS: Unable to determine destination address
[  451.113451][   T54] Bluetooth: hci5: command tx timeout
[  452.942307][   T11] team0 (unregistering): Port device team_slave_1 removed
[  453.039808][   T11] team0 (unregistering): Port device team_slave_0 removed
[  458.039303][T11181] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  458.171800][T11117] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  458.180646][T11117] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  458.188949][T11117] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  458.197471][T11117] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  458.267028][T11117] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  458.300483][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'.
[  458.406017][T11012] chnl_net:caif_netlink_parms(): no params data found
[  459.792284][T11012] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.821421][T11012] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.851219][T11012] bridge_slave_0: entered allmulticast mode
[  459.984892][T11012] bridge_slave_0: entered promiscuous mode
[  460.001423][T11012] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.028960][T11012] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.063555][T11012] bridge_slave_1: entered allmulticast mode
[  460.070527][T11012] bridge_slave_1: entered promiscuous mode
[  461.978912][T11012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.079506][T11012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.226321][   T59] block nbd0: Possible stuck request ffff888026137000: control (read@0,4096B). Runtime 180 seconds
[  463.256096][T11012] team0: Port device team_slave_0 added
[  463.282766][T11012] team0: Port device team_slave_1 added
[  463.534453][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'.
[  463.571352][T11012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.599784][T11012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.711953][T11256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1408'.
[  463.733148][T11012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.969922][T11012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.983572][T11012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.009510][    C0] vkms_vblank_simulate: vblank timer overrun
[  464.177922][T11012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.617158][T11012] hsr_slave_0: entered promiscuous mode
[  464.647206][T11012] hsr_slave_1: entered promiscuous mode
[  464.680073][T11012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  464.764713][T11012] Cannot create hsr debugfs directory
[  465.278467][   T29] audit: type=1800 audit(1739722934.588:485): pid=11279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1413" name="/" dev="9p" ino=2 res=0 errno=0
[  466.636493][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1420'.
[  469.803444][T11332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'.
[  470.093400][   T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  470.959669][T11012] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  471.114645][   T25] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  471.134797][   T25] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  471.135909][T11012] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  471.153842][   T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  471.162838][   T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  471.174087][   T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  471.192496][   T25] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  471.233027][T11355] CIFS: Unable to determine destination address
[  471.878023][T11012] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  471.932326][   T25] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  471.949770][   T25] usb 7-1: Product: syz
[  471.953080][T11012] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  471.955727][   T25] usb 7-1: Manufacturer: syz
[  471.990895][   T25] cdc_wdm 7-1:1.0: skipping garbage
[  472.005118][   T25] cdc_wdm 7-1:1.0: skipping garbage
[  472.347521][   T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  472.355532][   T25] cdc_wdm 7-1:1.0: Unknown control protocol
[  472.608498][ T5904] usb 7-1: USB disconnect, device number 5
[  472.649522][T11012] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.821276][T11012] 8021q: adding VLAN 0 to HW filter on device team0
[  473.689024][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.696149][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.714786][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.721898][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.756967][T11012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  473.795590][T11012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  475.060252][T11012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.975754][T11012] veth0_vlan: entered promiscuous mode
[  478.054289][T11012] veth1_vlan: entered promiscuous mode
[  478.922831][T11012] veth0_macvtap: entered promiscuous mode
[  479.024150][T11012] veth1_macvtap: entered promiscuous mode
[  479.115491][T11012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.152656][T11012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.172394][T11012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.200536][T11012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.229017][T11012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.246742][T11012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.257604][T11012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.268419][T11012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.298283][T11012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.320147][T11012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.351939][T11012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.466529][T11012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.477564][T11012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.487938][T11012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.498588][T11012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.510548][T11012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.523411][T11012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.310088][T11012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.355874][T11012] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.393486][T11012] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.409414][T11012] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.430566][T11012] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.588399][ T1790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.609147][ T1790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.683349][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.691487][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.733387][   T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  481.557079][   T25] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  481.574510][   T25] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  481.686857][   T25] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  481.696555][   T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.726941][T11464] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  481.786068][   T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  483.295091][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.451434][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.014465][   T30] INFO: task syz.0.993:9561 blocked for more than 143 seconds.
[  485.022067][   T30]       Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0
[  485.093275][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  485.103469][   T30] task:syz.0.993       state:D stack:23736 pid:9561  tgid:9560  ppid:5828   task_flags:0x400140 flags:0x00004006
[  485.119577][   T30] Call Trace:
[  485.122887][   T30]  <TASK>
[  485.123152][   T25] libceph: connect (1)[c::]:6789 error -101
[  485.125951][   T30]  __schedule+0x18bc/0x4c40
[  485.136431][   T30]  ? __pfx___schedule+0x10/0x10
[  485.141311][   T30]  ? __pfx_lock_release+0x10/0x10
[  485.146462][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  485.152386][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  485.160006][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  485.171389][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  485.180709][ T5821] usb 9-1: USB disconnect, device number 4
[  485.212015][   T30]  ? schedule+0x90/0x320
[  485.220309][   T30]  schedule+0x14b/0x320
[  485.224724][   T30]  schedule_preempt_disabled+0x13/0x30
[  485.230377][   T30]  __mutex_lock+0x817/0x1010
[  485.235316][T11495] ceph: No mds server is up or the cluster is laggy
[  485.242587][   T30]  ? __mutex_lock+0x602/0x1010
[  485.247531][   T30]  ? sync_bdevs+0x1ae/0x340
[  485.252136][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  485.258078][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  485.280149][   T30]  ? __pfx_lock_release+0x10/0x10
[  485.293498][   T30]  ? _atomic_dec_and_lock+0x9a/0x130
[  485.302710][   T30]  ? iput+0x3be/0xa50
[  485.307172][   T30]  sync_bdevs+0x1ae/0x340
[  485.311541][   T30]  ksys_sync+0xe2/0x1c0
[  485.332687][   T30]  ? __pfx_ksys_sync+0x10/0x10
[  485.338102][   T30]  ? do_syscall_64+0x100/0x230
[  485.414221][   T30]  ? do_syscall_64+0xb6/0x230
[  485.421230][   T30]  __do_sys_sync+0xe/0x20
[  485.427171][   T25] libceph: connect (1)[c::]:6789 error -101
[  485.453503][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  485.463559][   T30]  do_syscall_64+0xf3/0x230
[  485.468534][   T30]  ? clear_bhb_loop+0x35/0x90
[  485.473564][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.479622][   T30] RIP: 0033:0x7f11e518cde9
[  485.484304][   T30] RSP: 002b:00007f11e5f5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  485.493105][   T30] RAX: ffffffffffffffda RBX: 00007f11e53a5fa0 RCX: 00007f11e518cde9
[  485.501554][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  485.510382][   T30] RBP: 00007f11e53a5fa0 R08: 0000000000000000 R09: 0000000000000000
[  485.519839][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  485.533214][   T30] R13: 0000000000000000 R14: 00007f11e53a5fa0 R15: 00007ffd1efa9478
[  485.541798][   T30]  </TASK>
[  485.550577][   T30] 
[  485.550577][   T30] Showing all locks held in the system:
[  485.581308][   T30] 3 locks held by kworker/u8:1/12:
[  485.589115][   T30] 1 lock held by khungtaskd/30:
[  485.601869][   T30]  #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  485.645402][   T30] 2 locks held by getty/5580:
[  485.671794][   T30]  #0: ffff8880320e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  485.701220][   T30]  #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770
[  485.711660][   T30] 1 lock held by udevd/5969:
[  485.722618][   T30]  #0: ffff8880260d14c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50
[  485.732282][   T30] 1 lock held by syz.0.993/9561:
[  485.745235][   T30]  #0: ffff8880260d14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340
[  485.760796][   T30] 1 lock held by syz-executor/10985:
[  485.767792][   T30] 1 lock held by syz.6.1459/11505:
[  485.773166][   T30] 
[  485.779097][   T30] =============================================
[  485.779097][   T30] 
[  485.787805][   T30] NMI backtrace for cpu 1
[  485.787823][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0
[  485.787841][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  485.787851][   T30] Call Trace:
[  485.787857][   T30]  <TASK>
[  485.787864][   T30]  dump_stack_lvl+0x241/0x360
[  485.787886][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  485.787902][   T30]  ? __pfx__printk+0x10/0x10
[  485.787934][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  485.787962][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  485.787981][   T30]  ? _printk+0xd5/0x120
[  485.788001][   T30]  ? __pfx__printk+0x10/0x10
[  485.788029][   T30]  ? __wake_up_klogd+0xcc/0x110
[  485.788048][   T30]  ? __pfx__printk+0x10/0x10
[  485.788070][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  485.788091][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  485.788111][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  485.788135][   T30]  watchdog+0x1058/0x10a0
[  485.788157][   T30]  ? watchdog+0x1ea/0x10a0
[  485.788180][   T30]  ? __pfx_watchdog+0x10/0x10
[  485.788204][   T30]  kthread+0x7a9/0x920
[  485.788223][   T30]  ? __pfx_kthread+0x10/0x10
[  485.788244][   T30]  ? __pfx_watchdog+0x10/0x10
[  485.788262][   T30]  ? __pfx_kthread+0x10/0x10
[  485.788280][   T30]  ? __pfx_kthread+0x10/0x10
[  485.788302][   T30]  ? __pfx_kthread+0x10/0x10
[  485.788320][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  485.788335][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  485.788351][   T30]  ? __pfx_kthread+0x10/0x10
[  485.788372][   T30]  ret_from_fork+0x4b/0x80
[  485.788389][   T30]  ? __pfx_kthread+0x10/0x10
[  485.788409][   T30]  ret_from_fork_asm+0x1a/0x30
[  485.788439][   T30]  </TASK>
[  485.788468][   T30] Sending NMI from CPU 1 to CPUs 0:
[  485.958439][    C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30
[  486.024775][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  486.031669][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0
[  486.042183][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  486.052253][   T30] Call Trace:
[  486.055547][   T30]  <TASK>
[  486.058490][   T30]  dump_stack_lvl+0x241/0x360
[  486.063186][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.068402][   T30]  ? __pfx__printk+0x10/0x10
[  486.073017][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  486.079025][   T30]  ? vscnprintf+0x5d/0x90
[  486.083380][   T30]  panic+0x349/0x880
[  486.087302][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  486.093468][   T30]  ? __pfx_panic+0x10/0x10
[  486.097877][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  486.103239][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  486.109392][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  486.115552][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  486.121698][   T30]  watchdog+0x1097/0x10a0
[  486.126022][   T30]  ? watchdog+0x1ea/0x10a0
[  486.130432][   T30]  ? __pfx_watchdog+0x10/0x10
[  486.135107][   T30]  kthread+0x7a9/0x920
[  486.139187][   T30]  ? __pfx_kthread+0x10/0x10
[  486.143790][   T30]  ? __pfx_watchdog+0x10/0x10
[  486.148479][   T30]  ? __pfx_kthread+0x10/0x10
[  486.153071][   T30]  ? __pfx_kthread+0x10/0x10
[  486.157658][   T30]  ? __pfx_kthread+0x10/0x10
[  486.162242][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.167423][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  486.172690][   T30]  ? __pfx_kthread+0x10/0x10
[  486.177267][   T30]  ret_from_fork+0x4b/0x80
[  486.181687][   T30]  ? __pfx_kthread+0x10/0x10
[  486.186278][   T30]  ret_from_fork_asm+0x1a/0x30
[  486.191048][   T30]  </TASK>
[  486.194295][   T30] Kernel Offset: disabled
[  486.198605][   T30] Rebooting in 86400 seconds..