last executing test programs:

17m32.223046174s ago: executing program 0 (id=16):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

17m31.821673319s ago: executing program 0 (id=18):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800)

17m30.960797861s ago: executing program 0 (id=23):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x618f, 0x0)

17m29.759971909s ago: executing program 0 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x212d099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

17m29.427743595s ago: executing program 0 (id=32):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x20, 0x14, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0x846503215b16faa2, 0x2, 'LU'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0x14, 0x2, "fe5c"}, 0x0, 0x0})

17m28.897270183s ago: executing program 0 (id=37):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x20)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000e50000b7080000000000007baa00fe000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10}, 0x94)

17m28.20895229s ago: executing program 32 (id=37):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x20)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000e50000b7080000000000007baa00fe000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10}, 0x94)

22.258275021s ago: executing program 2 (id=2450):
pipe2$9p(&(0x7f0000000240), 0x0)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8, &(0x7f0000000040))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020)
writev(r3, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="00637075736574002b70696473202d626c6b696f202b6e65745f7072696f202d70696473202d637075736574202d63707520c939db22cb251c49c324ec8a942ee47fe150959c6ef5f46887ab97f832e6038cf4a13cb8b2c0"], 0x2f)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmmsg$inet(r5, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="665831f2bb", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001c80)="b9", 0x1}], 0x1, &(0x7f0000003140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}}], 0x2, 0x20000000)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14)

21.976334534s ago: executing program 2 (id=2451):
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1})
io_uring_enter(r1, 0x47f6, 0x6ee0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x10, 0x3c11a80151415fd4, @fd_index=0x1, 0x1, &(0x7f0000000540)=[{0x0}], 0x1, 0x1, 0x1, {0x2}})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000880)={0x9, 0x0, {0x8, @struct={0xffffffff, 0x2}, <r7=>0x0, 0x4, 0x8, 0x4, 0x8, 0x7, 0x0, @struct={0xfffffffb, 0x5}, 0x6, 0x0, [0x2, 0x200, 0x3ff, 0x100000000, 0x2]}, {0x6, @struct={0x6, 0x8}, 0x0, 0x2, 0x81, 0x5, 0xff, 0x3, 0x60, @usage=0x22d1, 0x40, 0x1ff, [0xffffffffffffffff, 0x9, 0x7, 0x3, 0x4, 0x4]}, {0x7, @struct={0x7, 0x2}, 0x0, 0x0, 0x0, 0xffffffff, 0x2d0, 0x1, 0x90, @usage=0x7, 0xc9, 0x200, [0x2, 0x1, 0xff, 0x1, 0x9, 0x7]}, {0x36c, 0x1, 0x4}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r8=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001080)={<r9=>0x0, "ab3f17558df047b859d0475b2111d16e"})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000002080)={0x4, 0x4, {0x8, @struct={0x5, 0x1}, r7, 0x80, 0x1, 0xb468, 0xffffffffffffffff, 0x81, 0x0, @usage=0xb732, 0x10000, 0x8, [0x40, 0x8, 0x4, 0x9, 0x1, 0x2]}, {0x0, @usage=0xa, r8, 0x7, 0x7, 0x1, 0x1, 0x9, 0x10, @usage=0x3, 0x0, 0x6, [0x0, 0x1, 0xfff, 0x1, 0xfffffffffffffffd, 0x6]}, {0x40, @struct={0x7, 0x3}, r9, 0x7, 0x8000000000000001, 0x58213437, 0x5, 0x7, 0xc0, @usage=0x87, 0xffffb886, 0x7, [0x61, 0x2, 0x2, 0xffffffffffff4f47, 0x8, 0xfffffffffffffff8]}, {0xd, 0x3, 0x7}})
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x4000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x1c, 0x401b, 0xfe, &(0x7f00000000c0)="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"})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

19.714424094s ago: executing program 2 (id=2455):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x41, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014})
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040005}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
sendmsg$inet_sctp(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="cec48d4c37ef574f38d15e0faef69db1b953a8b2b062f82e8f2cdea600dc85c646e0f41bcec1cb1b89e1d6788ab660dccd953ef9ab668ca64ae1a7b1b6b36f5c28f81966875f1b53c0b6980032d9279e71fd4901e1b0433ea1d254fb41", 0x5d}], 0x1, 0x0, 0x0, 0x40000}, 0x1)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

18.879367066s ago: executing program 4 (id=2456):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000280)={0x10, 0x2}, 0x18, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = add_key$user(0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = io_uring_setup(0x3eae, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r4, 0x30)

17.40472281s ago: executing program 4 (id=2459):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, r0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14, r4, 0x301, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000100))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="747264531c22cbed616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=r1, @ANYBLOB=',cache=mmap,nodevmap,cachetag=/dev/adsp1\x00,access=any,noxattr,smackfshat=&}.,permit_directio,smackfstransmute=/dev/adsp1\x00,seclabel,\x00'])
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x40000)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@host, 0x1741}, 0x400, "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"}, 0x418})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x6]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000100)=0x7, 0x4)
bind$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x10000)

16.649513114s ago: executing program 3 (id=2462):
pipe2$9p(&(0x7f0000000240), 0x0)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8, &(0x7f0000000040))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020)
writev(r3, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="00637075736574002b70696473202d626c6b696f202b6e65745f7072696f202d70696473202d637075736574202d63707520c939db22cb251c49c324ec8a942ee47fe150959c6ef5f46887ab97f832e6038cf4a13cb8b2c0"], 0x2f)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmmsg$inet(r5, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="665831f2bb", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001c80)="b9", 0x1}], 0x1, &(0x7f0000003140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}}], 0x2, 0x20000000)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14)

15.498091967s ago: executing program 2 (id=2463):
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a)
ioctl$PPPIOCGL2TPSTATS(r3, 0x40047459, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc)
fadvise64(r2, 0x4, 0x200, 0x4)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}})
preadv2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x9, 0xb)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000000}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

14.875412914s ago: executing program 4 (id=2466):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0)
read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(r3, &(0x7f0000001300)=[{0x0}], 0x1, 0x10000, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000)=[0x9, 0x4], 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'})

14.771616738s ago: executing program 2 (id=2467):
socket$nl_route(0x10, 0x3, 0x0)
symlink(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x270, 0x2e8, 0x2e8, 0x270, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff, 0xff, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xff], 'rose0\x00', 'team0\x00', {}, {0xff}, 0x20, 0x1, 0x4, 0x22}, 0x0, 0x100, 0x160, 0x0, {0x0, 0x2000000000000}, [@common=@frag={{0x30}, {[0x9, 0x7], 0xfffffff2, 0x16, 0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffff00], 0xfffd, 0x4e21, 0x0, 0x4e24, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x7, 0x5, 0x7fffffff, 'netbios-ns\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x32)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r6, 0x0, 0x8800)
sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20)
write(0xffffffffffffffff, &(0x7f0000000080)="163210f9ff02d49e303bc990eedeb12d2b171e9e600ea4065ca7bc6fc1d7beffd0", 0x21)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

12.610098707s ago: executing program 3 (id=2469):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x5b, 0xa, 0x0, "93bba551042af768810fa32fa3ccbaf1121823a6dc898168d8b3c3945d8636cf"})
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
syz_emit_ethernet(0xbe, &(0x7f0000000400)=ANY=[@ANYBLOB="3863e5ca668f0000000040e4053a7fcfb8aef6087f79f00cc9b65ceee1a9914125cd861e3e3041a15afd5b75692117fdf8372edd19089659ef20aff4c4425c1555d0fbefa52f849fe7e4a58e8ad9153ffbb101846c6e3ad1eb301645a756ebe8f9150a180757c3e415f52a98ca4a9dec421cfc31150013d9faef45b4c488765a678ff9efe5d7339c3acffb10e7c2d4abe6940d60c38466f542501cc5a3ed89a0177d342bac470e262c67db4eb3dcaf392f6386ede22b21a9a22496ee02eca122f4fb7376999692220c1d62bbf6607e6bfe7a1532d12ff0", @ANYBLOB="c5bd5e32aa92e77da486912e4009931c8c81c5047dcd6177befcebb00988a97a1e1a295c4674a523c96cf294a6f17268df1b65d258b661cd8e03049e35e2c359986d71fa01da57361224643db41d8c85fb7988c307b038868bcc621788e66e307ea5640b5ffbecfc79198c7cccb6a1d6768a0cc5996ed7ebe9e457eac4d573c9cedf16"], 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x8f)
getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=""/100, &(0x7f0000000080)=0x64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, 0x0, 0x4008800)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(0xffffffffffffffff, 0x0, r7, 0x0, 0x46)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000300)={0x9, 0x2, 0x1})
connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x2, @local, 0x3, 0x4}, 0x20)

12.3782601s ago: executing program 5 (id=2470):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000400), 0x4)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x101000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VIDIOC_OVERLAY(r3, 0xc0405627, &(0x7f0000000140)=0xb4e6)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2002, 0x0, 0x0, 0x6, 0x100, 0x3}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={<r5=>0x0}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x3, 0x2, 0x3, r5}, 0x10)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x1, 0x31, 0x0, 0x0)

12.377333483s ago: executing program 4 (id=2471):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)={@private=0x2010101, @rand_addr=0x64010100, 0x0, 0x1, [@local]}, 0x14)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a80)={{r0}, "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"})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe3c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$usbmon(0x0, 0x400, 0x208000)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r7, 0x4008b100, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10)

10.079573608s ago: executing program 5 (id=2473):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078)

9.218009536s ago: executing program 2 (id=2474):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
unshare(0x2a020400)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
mkdir(0x0, 0x0)
link(&(0x7f0000000000)='./file1\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x420a00)
ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, 0x0)

8.000152513s ago: executing program 5 (id=2476):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
r4 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r4, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00')
read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}})
socket$kcm(0xa, 0x1, 0x106)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4)
sendto$inet6(r7, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)}], 0x1}, 0x0)

7.983903869s ago: executing program 3 (id=2477):
socket$inet_udplite(0x2, 0x2, 0x88)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unlink(0x0)
syz_clone3(&(0x7f0000000540)={0x100000, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280), {0x2e}, 0x0, 0x0, &(0x7f00000003c0)=""/47, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0)
ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4)
connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14)
r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0)
writev(r5, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="df12c9f7b9a600", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.725540626s ago: executing program 3 (id=2478):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
creat(&(0x7f0000000140)='./file0\x00', 0x4)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.900781294s ago: executing program 5 (id=2479):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7e8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001240)={'batadv_slave_0\x00'})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x880)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="66a43d6a4653220197e8025f359eb7668fdf3ac66e7c17e65529538be8de57ea2a33f7116cd409625e29f5de5609e5803e417133c721fd22907432e54ac2a5bcf70f7eb74ba4e29fe261c4a3f74e584e746f67ea6dec438e8db6a9d2f62a25ae3ca82a", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB=',\x00'])
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0xfffffffe, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r5, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x10, {0x7, 0x29, 0x0, 0x0, 0x7, 0x1, 0xb, 0xcdd, 0x0, 0x0, 0x10, 0x40004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.340518572s ago: executing program 3 (id=2480):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
socket$inet(0x2, 0xa, 0x20)
r0 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081)
shutdown(0xffffffffffffffff, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xd2)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvlan1\x00', <r3=>0x0})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x10)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0xe0)
sendfile(r5, r4, &(0x7f0000002700)=0x1, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1546040000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b', @ANYRES32=r3], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2000c840}, 0x80)

3.479868787s ago: executing program 4 (id=2481):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0)
read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(r3, &(0x7f0000001300)=[{0x0}], 0x1, 0x10000, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000)=[0x9, 0x4], 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'})

3.385649062s ago: executing program 1 (id=2482):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0xffffffa4, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000)
recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012063, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x19)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}})
r4 = socket(0x40000000015, 0x1, 0x3ff)
connect$inet6(r4, &(0x7f0000002a00)={0xa, 0x0, 0x0, @remote}, 0x1c)
bind$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x24)

3.337000636s ago: executing program 5 (id=2483):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0)
r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x80044940, &(0x7f0000001fc0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
readv(r6, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)

2.810605242s ago: executing program 1 (id=2484):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, 0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="cd0170a004"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r7, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x98)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

2.688155963s ago: executing program 1 (id=2485):
mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0)
mount(0x0, 0x0, &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x71)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x0, 0x5001)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="3ba64ef20e50eaf74e56343228a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b1bdc89e8c3c7fd5e68c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe3808f93c22105dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b6f2e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e"})
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0xfffffffffffdfffd, 0x4, 0x400041000, 0x40000476, 0x1, 0x9, 0x2, 0x0, 0xfefc})
fallocate(r0, 0x1, 0x9, 0x81)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
setresuid(0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)

1.666345444s ago: executing program 3 (id=2486):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x40040830)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x801)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
r3 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(0xffffffffffffffff, 0x5e2, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_create_ruleset(0x0, 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000001fc0), 0xa0000, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0)
ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0x2)

1.379544611s ago: executing program 1 (id=2487):
socket$netlink(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
open_by_handle_at(r7, &(0x7f0000000180)=ANY=[], 0x1)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0xffe4, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000007c0000000000080001"], 0x18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

267.299385ms ago: executing program 5 (id=2488):
mkdirat(0xffffffffffffff9c, 0x0, 0xd1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7b000000000000001808180000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x52, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setrlimit(0x1, &(0x7f0000000340)={0x10, 0x9})
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2], 0x2c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019640)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0xd, 0x100, 0x1, 0x2, 0x2588ae4b})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
dup(0xffffffffffffffff)
getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/112, 0x70)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0)

217.591569ms ago: executing program 1 (id=2489):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x800455ca, 0x4)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000), &(0x7f0000000040))
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0xfffffffc, 0x5, 0x1})
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c01000016000100000000000000000800000000000000000000000000000000ff01000000007fb8000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000ac1414bb00"/86], 0x10c}}, 0x20000000)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000480)=ANY=[], 0x8)

76.008773ms ago: executing program 4 (id=2490):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r1=>r0})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0086202, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x25, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r6, 0x400455c8, 0x4)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x31)
r7 = accept4(r5, 0x0, 0x0, 0x800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000980)=""/146, 0x92}], 0x1}, 0x20)
futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1)

0s ago: executing program 1 (id=2491):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80040}, 0x40880)
syz_io_uring_setup(0x24fe, 0x0, &(0x7f0000000040), &(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
socket$inet6(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000006cce3ee1"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r1], &(0x7f0000000080)='GPL\x00'}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x4}, 0x10)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000001c0)={@my=0x1})
r3 = syz_open_dev$video(&(0x7f0000000100), 0x12, 0x101102)
ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

7287][ T5907] usb 2-1: USB disconnect, device number 5
[  159.485286][ T5907] usblp0: removed
[  161.115990][ T6885] binder_alloc: 6881: binder_alloc_buf size 8 failed, no address space
[  161.130728][ T6885] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0)
[  165.221529][ T6936] binder: 6933:6936 unknown command 0
[  165.350717][ T6936] binder: 6933:6936 ioctl c0306201 200000000c40 returned -22
[  168.465285][ T5907] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  168.667097][ T5907] usb 2-1: Using ep0 maxpacket: 32
[  168.861591][ T5907] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.453522][ T5907] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.556276][ T5907] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  169.604770][ T5907] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  169.613200][ T5907] usb 2-1: Product: syz
[  169.664928][ T5907] usb 2-1: Manufacturer: syz
[  169.799824][ T5907] hub 2-1:4.0: USB hub found
[  169.962583][ T5907] hub 2-1:4.0: 2 ports detected
[  170.534801][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  170.734821][    T9] usb 5-1: Using ep0 maxpacket: 8
[  170.751276][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.813176][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  170.834853][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.864314][    T9] usb 5-1: config 0 descriptor??
[  170.907031][    T9] gspca_main: vc032x-2.14.0 probing 046d:0892
[  171.208067][   T10] hub 2-1:4.0: activate --> -90
[  171.432092][   T10] hub 2-1:4.0: hub_ext_port_status failed (err = -71)
[  171.631397][   T10] usb 2-1: USB disconnect, device number 6
[  172.204823][ T3091] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  172.346548][    T9] usb 5-1: USB disconnect, device number 6
[  172.385240][ T3091] usb 6-1: Using ep0 maxpacket: 32
[  172.395296][ T3091] usb 6-1: config 1 has an invalid interface number: 242 but max is 0
[  172.428882][ T3091] usb 6-1: config 1 has no interface number 0
[  172.465861][ T3091] usb 6-1: config 1 interface 242 has no altsetting 0
[  172.469526][ T7047] binder: 7046:7047 ioctl c0306201 2000000008c0 returned -14
[  172.482204][ T3091] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df
[  172.501681][ T3091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.522473][ T3091] usb 6-1: Product: syz
[  172.542672][ T3091] usb 6-1: Manufacturer: syz
[  172.551815][ T3091] usb 6-1: SerialNumber: syz
[  172.738731][ T7053] evm: overlay not supported
[  172.913289][ T3091] aqc111 6-1:1.242: probe with driver aqc111 failed with error -22
[  172.956901][ T3091] usb 6-1: USB disconnect, device number 5
[  174.744824][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  174.914837][   T24] usb 4-1: Using ep0 maxpacket: 32
[  174.931898][   T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.977890][   T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.147920][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  175.198612][   T24] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  175.240968][   T24] usb 4-1: Product: syz
[  175.295331][   T24] usb 4-1: Manufacturer: syz
[  175.423426][   T24] hub 4-1:4.0: USB hub found
[  175.632027][   T24] hub 4-1:4.0: 2 ports detected
[  177.178978][   T24] hub 4-1:4.0: activate --> -90
[  177.237485][ T3091] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  177.501078][   T43] usb 4-1: USB disconnect, device number 11
[  177.745174][ T3091] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  178.380131][ T3091] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.402316][ T3091] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.420722][ T3091] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  178.442996][ T3091] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  178.464803][ T3091] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  178.484113][ T3091] usb 6-1: Manufacturer: syz
[  178.508540][ T3091] usb 6-1: config 0 descriptor??
[  179.152834][ T3091] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  179.490128][ T3091] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  179.536689][ T3091] usb 6-1: USB disconnect, device number 6
[  180.071974][ T7143] fido_id[7143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  180.368226][ T7148] Zero length message leads to an empty skb
[  180.436022][ T7148] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  181.556455][   T30] audit: type=1804 audit(1755702502.203:8): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.280" name="/newroot/54/file1" dev="fuse" ino=1 res=1 errno=0
[  181.715412][   T30] audit: type=1800 audit(1755702502.203:9): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.280" name="/" dev="fuse" ino=1 res=0 errno=0
[  198.854279][ T7326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  199.545156][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  199.579115][ T7338] netlink: 'syz.4.329': attribute type 1 has an invalid length.
[  199.587508][ T7338] NCSI netlink: No device for ifindex 0
[  200.116928][ T7341] netlink: 'syz.5.330': attribute type 30 has an invalid length.
[  200.238932][ T7341] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  200.248227][ T7341] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  200.257163][ T7341] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  200.266028][ T7341] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.510970][ T7341] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.520025][ T7341] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.529083][ T7341] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.538096][ T7341] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.921131][ T7354] netlink: 'syz.4.336': attribute type 4 has an invalid length.
[  201.780629][ T7362] netlink: 'syz.4.336': attribute type 17 has an invalid length.
[  202.093252][ T7365] syz.1.337: attempt to access beyond end of device
[  202.093252][ T7365] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0
[  202.214851][ T7365] EXT4-fs (nbd1): unable to read superblock
[  203.943631][ T7377] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[  204.150694][ T7382] syz_tun: entered allmulticast mode
[  204.341277][ T7381] bond1: (slave veth3): Enslaving as an active interface with a down link
[  204.781620][ T7377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'.
[  205.091713][ T7380] dvmrp1: entered allmulticast mode
[  205.166322][ T7377] 8021q: adding VLAN 0 to HW filter on device bond1
[  205.208173][ T7379] syz_tun: left allmulticast mode
[  212.016206][ T7449] ISOFS: Unable to identify CD-ROM format.
[  213.293151][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'.
[  217.425116][ T5927] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  217.665910][ T7497] netlink: zone id is out of range
[  217.687268][ T5927] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  217.954380][ T7497] netlink: set zone limit has 4 unknown bytes
[  218.144473][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.258573][ T5927] usb 5-1: Product: syz
[  218.280179][ T5927] usb 5-1: Manufacturer: syz
[  218.316732][ T5927] usb 5-1: SerialNumber: syz
[  218.360111][ T5927] usb 5-1: config 0 descriptor??
[  218.614895][ T5927] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  218.694644][ T7519] binder_alloc: 7512: binder_alloc_buf, no vma
[  218.919668][  T977] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  219.088867][  T977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.106560][  T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  219.117291][  T977] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  219.126593][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  219.134626][  T977] usb 4-1: SerialNumber: syz
[  219.358109][  T977] usb 4-1: 0:2 : does not exist
[  219.473152][  T977] usb 4-1: USB disconnect, device number 12
[  219.603686][ T6218] udevd[6218]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.391564][ T5927] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  220.412813][ T5927] usb 5-1: USB disconnect, device number 7
[  221.811871][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  221.812912][ T5154] Bluetooth: hci1: command 0x0406 tx timeout
[  221.821085][ T5854] Bluetooth: hci3: command 0x0406 tx timeout
[  222.785203][ T5907] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  223.012107][ T5907] usb 2-1: Using ep0 maxpacket: 16
[  223.025490][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  223.038315][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  223.057303][ T5907] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  223.075312][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.134547][ T5907] usb 2-1: Product: syz
[  223.138799][ T5907] usb 2-1: Manufacturer: syz
[  223.196291][ T5907] usb 2-1: SerialNumber: syz
[  223.217265][ T5907] usb 2-1: config 0 descriptor??
[  223.279071][ T5907] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  223.305624][ T5907] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  223.891616][ T5907] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  223.898101][ T5907] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  224.084494][ T7588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.402'.
[  224.084594][ T7588] netlink: 'syz.2.402': attribute type 3 has an invalid length.
[  224.084607][ T7588] netlink: 44 bytes leftover after parsing attributes in process `syz.2.402'.
[  224.631984][ T5907] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  224.779099][ T5907] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  224.842706][ T5907] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  225.053628][ T5907] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  225.157419][ T5907] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  225.160690][ T5907] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  225.425222][ T5907] usb 2-1: USB disconnect, device number 7
[  228.893716][ T7632] orangefs_mount: mount request failed with -4
[  232.177673][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'.
[  232.871608][ T7679] binder: 7676:7679 unknown command 0
[  232.906970][ T7679] binder: 7676:7679 ioctl c0306201 200000000c40 returned -22
[  237.029024][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  238.720755][ T3091] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  239.378610][ T3091] usb 2-1: Using ep0 maxpacket: 8
[  239.387651][ T3091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  239.389183][ T7739] netlink: 'syz.2.447': attribute type 1 has an invalid length.
[  239.405436][ T3091] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  239.430185][ T3091] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  239.449636][ T3091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.469828][ T3091] usb 2-1: Product: syz
[  239.497578][ T3091] usb 2-1: Manufacturer: syz
[  239.502396][ T3091] usb 2-1: SerialNumber: syz
[  239.568230][ T3091] usb 2-1: config 0 descriptor??
[  239.712835][ T7739] 8021q: adding VLAN 0 to HW filter on device bond1
[  240.622538][ T3091] usb 2-1: USB disconnect, device number 8
[  241.489899][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888056ce0400: rx timeout, send abort
[  241.499392][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056ce0400: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session.
[  242.287114][ T5845] Bluetooth: hci4: command 0x0406 tx timeout
[  243.555552][ T7775] binder: 7774:7775 unknown command 0
[  243.561008][ T7775] binder: 7774:7775 ioctl c0306201 200000000080 returned -22
[  243.653513][ T7777] binder_alloc: 7776: pid 7776 spamming oneway? 1 buffers allocated for a total size of 4096
[  243.714423][ T7777] binder_alloc: 7776: pid 7776 spamming oneway? 2 buffers allocated for a total size of 5120
[  244.409582][ T7793] syz.4.462: attempt to access beyond end of device
[  244.409582][ T7793] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[  244.423019][ T7793] FAT-fs (loop9): unable to read boot sector
[  245.287280][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  245.806630][   T24] usb 5-1: Using ep0 maxpacket: 16
[  245.859114][   T24] usb 5-1: config 0 has an invalid interface number: 48 but max is 0
[  245.993212][ T7800] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[  246.001419][   T24] usb 5-1: config 0 has no interface number 0
[  246.010532][   T24] usb 5-1: config 0 interface 48 has no altsetting 0
[  246.030943][   T24] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  246.046040][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.782368][   T24] usb 5-1: Product: syz
[  246.786697][   T24] usb 5-1: Manufacturer: syz
[  246.791435][   T24] usb 5-1: SerialNumber: syz
[  246.858976][ T7800] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  247.146339][   T24] usb 5-1: config 0 descriptor??
[  247.569549][   T24] usb 5-1: can't set config #0, error -71
[  247.747756][   T24] usb 5-1: USB disconnect, device number 8
[  247.871395][ T7815] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  255.182670][ T7860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.190546][ T7860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.326045][ T7860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.333540][ T7860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.610578][ T7870] i2c i2c-0: Invalid block write size 34
[  255.617082][ T7870] netlink: 'syz.5.479': attribute type 1 has an invalid length.
[  259.011937][ T7870] 8021q: adding VLAN 0 to HW filter on device bond1
[  260.500634][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  263.961288][ T7924] @: renamed from vlan0 (while UP)
[  264.004256][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'.
[  265.367577][ T7937] netlink: 'syz.1.498': attribute type 11 has an invalid length.
[  265.375845][ T7937] netlink: 'syz.1.498': attribute type 11 has an invalid length.
[  265.383822][ T7937] netlink: 224 bytes leftover after parsing attributes in process `syz.1.498'.
[  268.520989][   T30] audit: type=1326 audit(1755702589.635:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.4.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff83258ebe9 code=0x0
[  281.109932][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[  284.021743][ T8081] NILFS (nullb0): couldn't find nilfs on the device
[  291.636289][ T8138] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  292.335549][ T8140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  292.511702][ T8141] input: syz1 as /devices/virtual/input/input10
[  295.088921][ T8154] trusted_key: syz.5.559 sent an empty control message without MSG_MORE.
[  298.194870][ T8172] tipc: Started in network mode
[  298.291478][ T8172] tipc: Node identity ae62b4f60d07, cluster identity 4711
[  298.358816][ T8172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.402775][ T8173] syzkaller0: entered promiscuous mode
[  298.414561][ T8173] syzkaller0: entered allmulticast mode
[  298.756930][ T8173] tipc: Resetting bearer <eth:syzkaller0>
[  298.982584][ T8171] tipc: Resetting bearer <eth:syzkaller0>
[  299.535869][ T5937] tipc: Node number set to 2741351670
[  299.819459][ T8171] tipc: Disabling bearer <eth:syzkaller0>
[  302.053868][ T8199] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  302.060592][ T8199] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  302.070150][ T8199] vhci_hcd vhci_hcd.0: Device attached
[  302.172202][ T8201] vhci_hcd: connection closed
[  302.209504][   T12] vhci_hcd: stop threads
[  302.462733][   T12] vhci_hcd: release socket
[  302.543793][ T5907] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[  302.560736][   T12] vhci_hcd: disconnect device
[  303.874059][ T8207] syz.5.573: attempt to access beyond end of device
[  303.874059][ T8207] loop11: rw=0, sector=0, nr_sectors = 1 limit=0
[  303.887165][ T8207] FAT-fs (loop11): unable to read boot sector
[  304.133590][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  304.293853][   T10] usb 6-1: Using ep0 maxpacket: 16
[  304.326683][   T10] usb 6-1: config 0 has an invalid interface number: 48 but max is 0
[  304.961228][   T10] usb 6-1: config 0 has no interface number 0
[  305.662638][   T10] usb 6-1: config 0 interface 48 has no altsetting 0
[  305.700462][ T8220] team_slave_0: entered promiscuous mode
[  305.706533][ T8220] team_slave_1: entered promiscuous mode
[  305.716443][ T8220] vlan0: entered promiscuous mode
[  305.721550][ T8220] team0: entered promiscuous mode
[  305.772938][   T10] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  305.788539][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.818457][   T10] usb 6-1: Product: syz
[  305.843831][   T10] usb 6-1: Manufacturer: syz
[  305.848513][   T10] usb 6-1: SerialNumber: syz
[  305.924682][   T10] usb 6-1: config 0 descriptor??
[  306.118868][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'.
[  306.165868][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'.
[  306.210183][   T10] usb 6-1: USB disconnect, device number 7
[  306.601874][ T8240] mmap: syz.4.584 (8240) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  307.683348][ T5907] vhci_hcd: vhci_device speed not set
[  308.712141][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.2.587'.
[  309.218616][ T8254] netlink: 'syz.1.590': attribute type 10 has an invalid length.
[  309.340056][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.590'.
[  310.062514][ T8262] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  310.359690][ T8254] geneve0: entered promiscuous mode
[  310.418441][ T8254] team0: Port device geneve0 added
[  312.823110][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  313.110452][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.153267][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  313.188911][   T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  313.203068][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  313.220000][   T10] usb 5-1: SerialNumber: syz
[  313.392999][ T3091] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  313.527686][   T10] usb 5-1: 0:2 : does not exist
[  313.605298][ T3091] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  313.629355][   T10] usb 5-1: USB disconnect, device number 9
[  313.642020][ T3091] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  313.702331][ T3091] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  313.744113][ T8061] udevd[8061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  314.346870][ T3091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.398492][ T3091] usb 6-1: config 0 descriptor??
[  317.353783][ T8316] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  317.414206][ T8320] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.604'.
[  317.443288][ T8320] netlink: zone id is out of range
[  317.489643][ T8320] netlink: zone id is out of range
[  317.504349][ T8320] netlink: get zone limit has 8 unknown bytes
[  319.779841][   T10] usb 6-1: USB disconnect, device number 8
[  321.964764][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  322.505925][ T8373] sctp: [Deprecated]: syz.1.617 (pid 8373) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.505925][ T8373] Use struct sctp_sack_info instead
[  322.598668][ T8375] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  322.823374][ T8382] netlink: 260 bytes leftover after parsing attributes in process `syz.3.618'.
[  323.477196][ T8385] tipc: Failed to remove unknown binding: 66,1,1/2123010865:2843454773/2843454775
[  323.488923][ T8385] tipc: Failed to remove unknown binding: 66,1,1/2123010865:2843454773/2843454775
[  326.590247][ T8396] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  326.876061][ T8404] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  332.105597][ T8439] netlink: 'syz.1.634': attribute type 3 has an invalid length.
[  332.113661][ T8439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.381365][ T8491] netlink: 'syz.3.648': attribute type 3 has an invalid length.
[  343.389357][ T8491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.326026][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'.
[  345.371673][ T8534] overlayfs: failed to clone lowerpath
[  345.993641][ T8543] tipc: Started in network mode
[  346.995407][ T8543] tipc: Node identity a2acc4f60903, cluster identity 4711
[  347.015796][ T8543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.033722][ T8545] syzkaller0: entered promiscuous mode
[  347.039690][ T8545] syzkaller0: entered allmulticast mode
[  347.118463][ T8543] tipc: Resetting bearer <eth:syzkaller0>
[  347.141877][ T8540] tipc: Resetting bearer <eth:syzkaller0>
[  347.207417][ T8540] tipc: Disabling bearer <eth:syzkaller0>
[  347.715524][   T30] audit: type=1400 audit(1755702668.835:11): lsm=SMACK fn=smack_inode_removexattr action=denied subject="w" object="_" requested=w pid=8526 comm="syz.4.657" name="file1" dev="tmpfs" ino=646
[  350.034944][ T8570] netlink: 'syz.5.666': attribute type 3 has an invalid length.
[  350.047269][ T8570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.235956][   T30] audit: type=1107 audit(1755702673.355:12): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='�'
[  353.696887][ T8602] Lens B: =================  START STATUS  =================
[  353.706010][ T8602] Lens B: Focus, Absolute: 0
[  353.711158][ T8602] Lens B: ==================  END STATUS  ==================
[  355.330480][ T8612] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  356.557970][ T8620] ceph: No mds server is up or the cluster is laggy
[  357.252899][ T8626] netlink: 56 bytes leftover after parsing attributes in process `syz.1.681'.
[  361.374443][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031743800: rx timeout, send abort
[  361.882879][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031743800: abort rx timeout. Force session deactivation
[  368.032160][ T8684] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  368.041847][ T8684] ref_ctr increment failed for inode: 0x283 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880780c5a00
[  368.615153][   T30] audit: type=1804 audit(1755702689.145:13): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.696" name="/newroot/118/file0" dev="tmpfs" ino=643 res=1 errno=0
[  368.813570][ T8681] batman_adv: batadv0: Adding interface: dummy0
[  368.819857][ T8681] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.845450][ T8681] batman_adv: batadv0: Interface activated: dummy0
[  368.861669][ T8681] batadv0: mtu less than device minimum
[  368.868497][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  368.880057][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  368.891404][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  368.902884][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  368.914316][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  368.925735][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  368.937135][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  368.948543][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  368.960162][ T8681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  369.287135][ T8687] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003
[  371.265220][ T8700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.701'.
[  371.274209][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'.
[  381.429262][ T8776] netlink: 'syz.4.721': attribute type 3 has an invalid length.
[  381.437276][ T8776] net_ratelimit: 10 callbacks suppressed
[  381.437287][ T8776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.817846][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  391.237516][ T8832] netlink: 'syz.4.733': attribute type 3 has an invalid length.
[  391.245423][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.364407][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'.
[  394.633974][ T5822] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  395.891871][ T8870] Invalid source name
[  395.896064][ T8870] UBIFS error (pid: 8870): cannot open "ubifs", error -22
[  396.269619][ T5822] usb 5-1: Using ep0 maxpacket: 32
[  396.743833][ T8873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.928470][ T5822] usb 5-1: device descriptor read/all, error -71
[  396.953750][ T8873] syzkaller0: entered promiscuous mode
[  396.992913][ T8873] syzkaller0: entered allmulticast mode
[  398.835207][ T8873] tipc: Resetting bearer <eth:syzkaller0>
[  399.697732][ T8872] tipc: Resetting bearer <eth:syzkaller0>
[  399.748792][ T8898] netlink: 'syz.2.748': attribute type 3 has an invalid length.
[  399.756569][ T8898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.900047][ T8872] tipc: Disabling bearer <eth:syzkaller0>
[  401.065222][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'.
[  403.259329][ T8924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  405.256106][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'.
[  405.301449][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'.
[  405.365306][ T8943] warning: `syz.3.762' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  405.631243][ T8940] vlan2: entered promiscuous mode
[  405.651071][ T8940] batadv0: entered promiscuous mode
[  412.582144][ T9015] netlink: 88 bytes leftover after parsing attributes in process `syz.5.780'.
[  412.591383][ T9015] netlink: 40 bytes leftover after parsing attributes in process `syz.5.780'.
[  413.433544][   T30] audit: type=1326 audit(1755702734.565:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9018 comm="syz.2.783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa41038ebe9 code=0x0
[  415.045328][ T9033] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  415.546941][ T5937] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  415.813675][ T5937] usb 5-1: device descriptor read/64, error -71
[  416.502414][ T5937] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  416.773380][ T9035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.785'.
[  418.210263][ T9051] syz.5.790: attempt to access beyond end of device
[  418.210263][ T9051] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0
[  418.236634][ T9051] SQUASHFS error: Failed to read block 0x0: -5
[  418.258491][ T9051] unable to read squashfs_super_block
[  418.532456][ T5927] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  419.756728][ T5927] usb 4-1: Using ep0 maxpacket: 16
[  419.784277][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.809753][ T5927] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  419.830174][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0
[  419.862461][ T5927] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  419.907201][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.927554][ T5927] usb 4-1: config 0 descriptor??
[  419.939274][ T5927] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  420.865381][ T9076] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  421.972583][   T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  422.109763][ T5822] usb 4-1: USB disconnect, device number 13
[  422.302523][   T24] usb 6-1: device descriptor read/64, error -71
[  422.563720][   T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  423.481913][   T24] usb 6-1: device descriptor read/64, error -71
[  425.332923][ T5937] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  425.662663][   T24] usb usb6-port1: attempt power cycle
[  425.982644][ T5937] usb 4-1: device not accepting address 14, error -71
[  431.600786][ T9130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.634607][ T9129] tipc: Resetting bearer <eth:syzkaller0>
[  433.701231][ T9127] tipc: Disabling bearer <eth:syzkaller0>
[  437.705379][ T9167] bpq0: entered allmulticast mode
[  437.911795][ T9170] overlayfs: failed to clone lowerpath
[  444.797787][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  444.903482][ T9190] sched: DL replenish lagged too much
[  455.435434][ T9251] sctp: failed to load transform for md5: -2
[  456.634578][ T9266] netlink: 10 bytes leftover after parsing attributes in process `syz.2.846'.
[  458.824343][ T9275] netlink: 'syz.5.845': attribute type 4 has an invalid length.
[  463.442662][ T5907] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  464.302441][ T5907] usb 6-1: Using ep0 maxpacket: 16
[  464.328731][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.636228][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  464.724392][ T5907] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  464.930259][ T5907] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  465.233773][ T5907] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  465.462339][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  465.471628][ T5907] usb 6-1: SerialNumber: syz
[  466.099997][ T5907] usb 6-1: can't set config #1, error -71
[  466.151433][ T5907] usb 6-1: USB disconnect, device number 12
[  470.264210][ T9355] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.869'.
[  470.273525][ T9355] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.869'.
[  470.282807][ T9355] netlink: 640 bytes leftover after parsing attributes in process `syz.2.869'.
[  471.095052][ T9368] NILFS (nullb0): couldn't find nilfs on the device
[  473.702530][ T9384] xt_CT: No such helper "netbios-ns"
[  474.960323][ T9403] xt_l2tp: wrong L2TP version: 0
[  475.703509][ T9410] 9pnet_virtio: no channels available for device 127.0.0.1
[  478.030990][ T9416] openvswitch: netlink: Duplicate or invalid key (type 0).
[  478.038794][ T9416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.362354][   T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  479.532597][   T43] usb 4-1: device descriptor read/64, error -71
[  480.222371][   T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  480.284581][ T9436] overlayfs: failed to clone lowerpath
[  480.390622][ T9437] overlayfs: failed to clone upperpath
[  481.082339][   T43] usb 4-1: device descriptor read/64, error -71
[  481.301412][   T43] usb usb4-port1: attempt power cycle
[  484.339762][ T9470] netlink: 'syz.2.897': attribute type 10 has an invalid length.
[  484.347665][ T5927] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  484.436405][ T9471] netlink: 'syz.2.897': attribute type 4 has an invalid length.
[  484.456211][ T9470] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  484.468511][ T9471] netlink: 152 bytes leftover after parsing attributes in process `syz.2.897'.
[  484.512386][ T5927] usb 6-1: Using ep0 maxpacket: 16
[  484.522465][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.541046][ T5927] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  484.617452][ T9471] : renamed from bond0 (while UP)
[  484.653427][ T5927] usb 6-1: config 0 interface 0 has no altsetting 0
[  484.669019][ T5927] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  484.683064][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.704425][ T5927] usb 6-1: config 0 descriptor??
[  484.735657][ T5927] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  485.192430][ T9476] netlink: 'syz.4.898': attribute type 16 has an invalid length.
[  485.200322][ T9476] netlink: 'syz.4.898': attribute type 17 has an invalid length.
[  485.808079][ T9476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  485.944391][ T9477] openvswitch: netlink: Duplicate or invalid key (type 0).
[  485.951674][ T9477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.125519][   T10] usb 6-1: USB disconnect, device number 13
[  492.824829][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.910'.
[  495.038876][ T9544] openvswitch: netlink: Duplicate or invalid key (type 0).
[  495.046223][ T9544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.062281][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  495.222432][   T10] usb 6-1: Using ep0 maxpacket: 16
[  495.313792][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.402146][   T10] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  495.436240][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  495.461644][   T10] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  495.852329][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.882057][   T10] usb 6-1: config 0 descriptor??
[  495.956788][   T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  496.209823][ T5937] usb 6-1: USB disconnect, device number 14
[  500.736878][ T9592] openvswitch: netlink: Duplicate or invalid key (type 0).
[  500.744609][ T9592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.382303][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  507.100466][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  507.314957][ T9635] netlink: 'syz.5.937': attribute type 1 has an invalid length.
[  507.323342][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.937'.
[  511.798149][ T9662] new mount options do not match the existing superblock, will be ignored
[  511.814470][ T9662] option changes via remount are deprecated (pid=9652 comm=syz.5.943)
[  514.106899][ T9679] bridge1: entered promiscuous mode
[  514.112368][ T9679] bridge1: entered allmulticast mode
[  514.148955][ T9679] team0: Port device bridge1 added
[  519.005122][ T9715] Smack: duplicate mount options
[  522.418647][ T9742] overlayfs: missing 'lowerdir'
[  522.742388][ T9743] Mount JFS Failure: -22
[  526.794859][ T9757] openvswitch: netlink: Duplicate or invalid key (type 0).
[  526.795108][ T9757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.491411][   T24] IPVS: starting estimator thread 0...
[  527.732683][ T9770] IPVS: using max 24 ests per chain, 57600 per kthread
[  530.249264][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'.
[  530.258358][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'.
[  530.283928][ T9780] kernel profiling enabled (shift: 9)
[  532.514382][ T9806] syz.2.974 (9806) used greatest stack depth: 16784 bytes left
[  533.215610][ T9804] binder: BINDER_SET_CONTEXT_MGR already set
[  533.221927][ T9804] binder: 9794:9804 ioctl 4018620d 200000000040 returned -16
[  533.439713][ T9819] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  533.447387][ T9819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  533.749858][ T9818] openvswitch: netlink: Duplicate or invalid key (type 0).
[  533.757663][ T9818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.631115][ T9853] netlink: 'syz.2.986': attribute type 10 has an invalid length.
[  537.644806][ T9853] : (slave batadv0): Error -22 calling dev_set_mtu
[  537.654507][ T9846] netlink: 'syz.2.986': attribute type 2 has an invalid length.
[  543.605914][ T9891] sd 0:0:1:0: device reset
[  548.836262][ T9922] netlink: 'syz.1.1006': attribute type 2 has an invalid length.
[  551.774957][ T9939] misc userio: No port type given on /dev/userio
[  552.716359][ T9947] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  558.152376][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  559.538982][ T9984] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0
[  563.699752][T10018] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  567.770596][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  570.481966][T10078] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  571.195162][T10078] bond1: entered promiscuous mode
[  571.201134][T10078] bond1: entered allmulticast mode
[  571.206776][T10078] 8021q: adding VLAN 0 to HW filter on device bond1
[  571.382771][   T43] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  572.182068][T10089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  575.347631][T10112] netlink: 'syz.1.1055': attribute type 1 has an invalid length.
[  575.355577][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'.
[  575.606243][T10116] libceph: resolve '4' (ret=-3): failed
[  578.050118][T10143] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present
[  578.598518][T10142] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  578.608298][T10142] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  578.618093][T10142] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  578.884208][T10141] Bluetooth: MGMT ver 1.23
[  580.737231][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1068'.
[  580.746601][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1068'.
[  582.270356][   T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  582.570785][   T43] usb 6-1: Using ep0 maxpacket: 16
[  582.587728][   T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.360512][   T43] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  583.379110][   T43] usb 6-1: config 0 interface 0 has no altsetting 0
[  583.388423][   T43] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  583.398492][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.574027][T10179] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  583.580899][T10179] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  583.588041][T10179] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  583.595866][T10179] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  583.603182][T10179] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  583.611805][T10179] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  583.619664][T10179] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  584.856683][   T43] usb 6-1: config 0 descriptor??
[  584.881072][   T43] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  585.911391][ T5937] usb 6-1: USB disconnect, device number 15
[  588.433311][T10203] sd 0:0:1:0: device reset
[  591.808020][T10222] ip6gre1: entered promiscuous mode
[  596.090182][ T5822] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  596.419602][ T5822] usb 6-1: Using ep0 maxpacket: 16
[  596.499147][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  596.522565][ T5822] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  596.803719][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  596.811002][ T5822] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  596.914260][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.959098][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'.
[  597.173428][ T5822] usb 6-1: config 0 descriptor??
[  597.201280][ T5822] usb 6-1: can't set config #0, error -71
[  597.378343][ T5822] usb 6-1: USB disconnect, device number 16
[  599.795492][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  599.806406][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  599.815771][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  599.825372][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  604.442239][T10308] Cannot find add_set index 0 as target
[  608.581182][T10333] Illegal XDP return value 4294967274 on prog  (id 185) dev N/A, expect packet loss!
[  609.981949][T10346] misc userio: No port type given on /dev/userio
[  610.037022][T10346] misc userio: The device must be registered before sending interrupts
[  611.565134][T10356] bridge1: entered allmulticast mode
[  615.360238][T10392] syz.4.1126: attempt to access beyond end of device
[  615.360238][T10392] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  615.374593][T10392] syz.4.1126: attempt to access beyond end of device
[  615.374593][T10392] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0
[  615.388023][T10392] Mount JFS Failure: -5
[  616.483315][T10401] tmpfs: Unknown parameter 'quot'
[  616.489697][T10401] syz.4.1128: attempt to access beyond end of device
[  616.489697][T10401] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  616.502964][T10401] SQUASHFS error: Failed to read block 0x0: -5
[  616.509336][T10401] unable to read squashfs_super_block
[  616.867106][T10403] fuse: Unknown parameter 'f�'
[  617.296809][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  618.662495][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'.
[  618.671768][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'.
[  621.547292][T10446] No such timeout policy "syz0"
[  626.727045][T10467] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  626.756748][T10467] CIFS mount error: No usable UNC path provided in device string!
[  626.756748][T10467] 
[  626.775896][T10467] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  626.884329][T10472] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  626.890918][T10472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  626.907178][T10472] vhci_hcd vhci_hcd.0: Device attached
[  627.278857][ T5822] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  628.255494][T10479] vhci_hcd: connection reset by peer
[  628.342092][   T65] vhci_hcd: stop threads
[  628.380534][   T65] vhci_hcd: release socket
[  628.470484][   T65] vhci_hcd: disconnect device
[  629.136500][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  630.138861][T10513] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.140224][T10513] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.506426][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  631.180109][T10513] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.180281][T10513] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.181621][T10513] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.182334][T10513] bridge0: port 1(bridge_slave_0) entered forwarding state
[  631.187626][T10513] bridge0: entered promiscuous mode
[  631.189298][T10513] team0: Port device bridge0 added
[  631.314441][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  631.314473][    T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  631.314493][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  631.314540][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  631.314567][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  631.324203][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  631.324225][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  631.324240][    T9] usb 6-1: Product: syz
[  631.324251][    T9] usb 6-1: Manufacturer: syz
[  631.331483][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  631.331498][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  631.333056][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  631.333078][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[  631.662559][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes
[  631.865735][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.865766][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.866067][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.866088][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.866303][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.866324][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.866534][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.866555][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.866765][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.866785][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.866995][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.867014][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.867313][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.867334][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.867563][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.867584][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.867808][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.867829][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  631.868038][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  631.869506][   T10] usb 6-1: USB disconnect, device number 17
[  631.869607][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  632.781281][ T5822] vhci_hcd: vhci_device speed not set
[  633.453103][   T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  633.874778][   T10] usb 6-1: Using ep0 maxpacket: 8
[  634.021346][T10545] overlayfs: failed to clone lowerpath
[  634.079135][T10546] overlayfs: failed to resolve './file1': -2
[  634.748036][   T10] usb 6-1: device descriptor read/all, error -71
[  639.519809][T10581] Failed to get privilege flags for destination (handle=0x2:0x0)
[  640.135404][T10577] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  640.142106][T10577] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  640.149087][T10577] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  640.156197][T10577] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  640.163465][T10577] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  640.170288][T10577] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  640.177676][T10577] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  644.635555][T10600] cgroup: release_agent respecified
[  647.521244][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1183'.
[  647.664144][T10633] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  648.233707][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  649.754339][T10652] : entered promiscuous mode
[  652.222056][T10668] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  652.229062][T10668] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  652.236209][T10668] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  652.243890][T10668] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  652.253832][T10668] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  652.261307][T10668] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  652.268864][T10668] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  652.979864][T10677] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  654.744062][T10669] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1194'.
[  655.428730][T10688] overlayfs: missing 'workdir'
[  657.332349][T10706] libceph: resolve '4' (ret=-3): failed
[  661.706994][T10737] usb usb8: usbfs: process 10737 (syz.4.1210) did not claim interface 0 before use
[  662.649202][   T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  663.223184][   T43] usb 5-1: Using ep0 maxpacket: 16
[  663.236102][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.274274][   T43] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  663.317367][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.359406][   T43] usb 5-1: config 0 descriptor??
[  663.387799][   T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  664.817834][ T5822] usb 5-1: USB disconnect, device number 15
[  666.343124][T10784] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  672.382721][T10804] can0: slcan on ttyS3.
[  672.802234][T10804] can0 (unregistered): slcan off ttyS3.
[  672.909156][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'.
[  672.921814][T10813] netlink: 'syz.3.1227': attribute type 5 has an invalid length.
[  672.929812][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1227'.
[  672.980405][T10813] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  672.989578][T10813] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  672.998646][T10813] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  673.007508][T10813] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  673.016820][T10813] geneve2: entered promiscuous mode
[  673.022174][T10813] geneve2: entered allmulticast mode
[  675.635625][T10829] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  677.564426][T10843] binfmt_misc: register: failed to install interpreter file ./file0
[  678.734135][ T5907] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  679.443566][ T5907] usb 4-1: device descriptor read/64, error -71
[  679.964416][ T5907] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  680.433640][ T5907] usb 4-1: device descriptor read/64, error -71
[  681.507605][ T5907] usb usb4-port1: attempt power cycle
[  684.793672][ T5907] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  685.166717][T10885] overlayfs: failed to clone upperpath
[  686.303907][   T43] IPVS: starting estimator thread 0...
[  686.311946][ T5907] usb 6-1: device descriptor read/all, error -71
[  686.563537][T10898] IPVS: using max 25 ests per chain, 60000 per kthread
[  688.437640][ T5843] Bluetooth: hci3: unknown advertising packet type: 0x70
[  689.984886][T10928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1256'.
[  690.566361][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  691.652172][T10935] input input13: cannot allocate more than FF_MAX_EFFECTS effects
[  692.263847][ T5927] IPVS: starting estimator thread 0...
[  692.887204][T10943] IPVS: using max 36 ests per chain, 86400 per kthread
[  694.831229][T10957] geneve2: entered allmulticast mode
[  694.843289][T10964] xt_CT: You must specify a L4 protocol and not use inversions on it
[  695.852862][T10974] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1268'.
[  696.639259][T10980] overlayfs: failed to clone upperpath
[  696.660206][T10980] No source specified
[  696.708276][T10981] ubi31: attaching mtd0
[  696.718279][T10981] ubi31: scanning is finished
[  696.723022][T10981] ubi31: empty MTD device detected
[  696.796608][T10981] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  696.796645][T10981] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  696.796659][T10981] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  696.796672][T10981] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  696.796685][T10981] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  696.796698][T10981] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  696.796712][T10981] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4244016428
[  696.796728][T10981] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  696.797275][T10986] ubi31: background thread "ubi_bgt31d" started, PID 10986
[  696.917896][T10983] overlayfs: failed to clone upperpath
[  697.727248][T10993] dummy0: entered promiscuous mode
[  705.314797][ T5927] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  706.376407][ T5927] usb 5-1: Using ep0 maxpacket: 16
[  706.385603][ T5927] usb 5-1: device descriptor read/all, error -71
[  707.792692][T11068] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1293'.
[  708.332764][T11074] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1295'.
[  708.525166][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'.
[  713.854901][T11120] sctp: [Deprecated]: syz.3.1307 (pid 11120) Use of struct sctp_assoc_value in delayed_ack socket option.
[  713.854901][T11120] Use struct sctp_sack_info instead
[  715.013730][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.022668][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.031697][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.040666][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.049693][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.058738][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.070564][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.080095][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.089225][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  715.098711][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'.
[  718.916286][T11155] netlink: 'syz.4.1313': attribute type 1 has an invalid length.
[  719.402617][T11156] GUP no longer grows the stack in syz.2.1315 (11156): 200000005000-200000008000 (200000004000)
[  719.413596][T11156] CPU: 1 UID: 0 PID: 11156 Comm: syz.2.1315 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  719.413617][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  719.413630][T11156] Call Trace:
[  719.413639][T11156]  <TASK>
[  719.413646][T11156]  dump_stack_lvl+0x189/0x250
[  719.413672][T11156]  ? __pfx_dump_stack_lvl+0x10/0x10
[  719.413690][T11156]  ? __pfx__printk+0x10/0x10
[  719.413709][T11156]  ? find_vma+0xe7/0x160
[  719.413735][T11156]  fixup_user_fault+0x661/0x720
[  719.413763][T11156]  fault_in_user_writeable+0x72/0xe0
[  719.413784][T11156]  futex_lock_pi+0x283/0xa60
[  719.413826][T11156]  ? __pfx_futex_lock_pi+0x10/0x10
[  719.413846][T11156]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  719.413893][T11156]  ? __pfx_futex_wake_mark+0x10/0x10
[  719.413928][T11156]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  719.413958][T11156]  do_futex+0x292/0x420
[  719.413982][T11156]  ? __pfx_do_futex+0x10/0x10
[  719.414001][T11156]  ? __vm_munmap+0x301/0x3d0
[  719.414048][T11156]  __se_sys_futex+0x36f/0x400
[  719.414073][T11156]  ? __pfx___se_sys_futex+0x10/0x10
[  719.414101][T11156]  ? __x64_sys_futex+0x21/0xf0
[  719.414123][T11156]  do_syscall_64+0xfa/0x3b0
[  719.414140][T11156]  ? lockdep_hardirqs_on+0x9c/0x150
[  719.414156][T11156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.414172][T11156]  ? clear_bhb_loop+0x60/0xb0
[  719.414192][T11156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.414207][T11156] RIP: 0033:0x7fa41038ebe9
[  719.414225][T11156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  719.414240][T11156] RSP: 002b:00007fa411125038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  719.414257][T11156] RAX: ffffffffffffffda RBX: 00007fa4105b5fa0 RCX: 00007fa41038ebe9
[  719.414278][T11156] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  719.414289][T11156] RBP: 00007fa410411e19 R08: 0000000000000000 R09: 0000000000000000
[  719.414298][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.414308][T11156] R13: 00007fa4105b6038 R14: 00007fa4105b5fa0 R15: 00007ffee3cd2278
[  719.414332][T11156]  </TASK>
[  719.933422][ T5927] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  720.173622][ T5927] usb 6-1: Using ep0 maxpacket: 16
[  721.609408][ T5927] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  721.619510][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.642063][ T5927] usb 6-1: config 0 descriptor??
[  721.858427][T11168] __nla_validate_parse: 42 callbacks suppressed
[  721.858444][T11168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1319'.
[  724.263892][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  725.900636][   T24] usb 5-1: Using ep0 maxpacket: 16
[  725.949532][   T30] audit: type=1800 audit(1755703304.083:15): pid=11190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1324" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  726.039617][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.108574][   T24] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  726.149883][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  726.158773][   T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  726.170406][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.189698][   T24] usb 5-1: config 0 descriptor??
[  726.251173][   T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  726.289139][ T5927] usbhid 6-1:0.0: can't add hid device: -71
[  726.504579][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  726.517623][ T5927] usb 6-1: USB disconnect, device number 22
[  727.338592][ T5907] usb 5-1: USB disconnect, device number 18
[  727.834884][T11207] binder: BINDER_SET_CONTEXT_MGR already set
[  727.840985][T11207] binder: 11206:11207 ioctl 4018620d 200000000040 returned -16
[  729.995495][T11232] netlink: 'syz.4.1335': attribute type 2 has an invalid length.
[  730.243531][T11232] netlink: 'syz.4.1335': attribute type 1 has an invalid length.
[  730.251849][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'.
[  731.003337][T11247] netlink: 'syz.3.1336': attribute type 1 has an invalid length.
[  732.365993][T11253] libceph: resolve '4' (ret=-3): failed
[  732.450679][T11258] xt_nat: multiple ranges no longer supported
[  735.563195][T11285] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  736.176431][T11277] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  736.209444][T11284] gfs2: Unexpected value for 'acl'
[  736.676018][T11286] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  737.156753][T11293] tipc: Started in network mode
[  737.161802][T11293] tipc: Node identity ac14140f, cluster identity 4711
[  737.169590][T11293] tipc: New replicast peer: 255.255.255.255
[  737.176354][T11293] tipc: Enabled bearer <udp:syz2>, priority 10
[  737.714248][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'.
[  737.723236][T11293] tipc: Disabling bearer <udp:syz2>
[  740.178304][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'.
[  740.528360][T11313] x_tables: duplicate underflow at hook 2
[  741.005818][T11319] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1357'.
[  744.183353][T11334] Cannot find add_set index 0 as target
[  744.927053][T11328] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1359'.
[  744.957335][T11332] libceph: resolve '4' (ret=-3): failed
[  745.337372][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'.
[  745.766286][T11348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1364'.
[  747.639859][T11367] ��: renamed from batadv_slave_1 (while UP)
[  748.422347][T11368] delete_channel: no stack
[  748.747822][T11376] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  748.757699][T11376] ref_ctr increment failed for inode: 0x6dc offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888031843200
[  748.773095][   T30] audit: type=1804 audit(1755703326.883:16): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1370" name="file0" dev="tmpfs" ino=1756 res=1 errno=0
[  749.453920][T11382] tipc: New replicast peer: 255.255.255.255
[  749.460394][T11382] tipc: Enabled bearer <udp:syz>, priority 10
[  750.324854][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'.
[  750.467597][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'.
[  750.547133][T11394] ubi: mtd0 is already attached to ubi31
[  751.398895][T11399] befs: (nbd5): No write support. Marking filesystem read-only
[  751.410019][T11399] syz.5.1375: attempt to access beyond end of device
[  751.410019][T11399] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0
[  751.460436][T11399] befs: (nbd5): unable to read superblock
[  752.029035][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  752.605985][T11403] libceph: resolve '4' (ret=-3): failed
[  753.689695][T11408] overlayfs: failed to decode file handle (len=24, type=251, flags=0, err=-22)
[  753.740888][T11408] No source specified
[  754.358413][T11412] binder: BINDER_SET_CONTEXT_MGR already set
[  754.364736][T11412] binder: 11409:11412 ioctl 4018620d 200000000040 returned -16
[  756.102922][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'.
[  756.113373][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'.
[  757.757045][T11439] libceph: resolve '4' (ret=-3): failed
[  760.791484][T11468] 9pnet_fd: Insufficient options for proto=fd
[  761.285638][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'.
[  763.252597][T11477] overlayfs: failed to decode file handle (len=24, type=251, flags=0, err=-22)
[  763.403377][ T5907] IPVS: starting estimator thread 0...
[  763.513455][T11486] IPVS: using max 35 ests per chain, 84000 per kthread
[  763.534585][T11471] No source specified
[  764.698875][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'.
[  765.413037][T11504] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1399'.
[  767.052579][T11515] libceph: resolve '4' (ret=-3): failed
[  768.304332][T11530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1408'.
[  771.010276][T11545] sctp: failed to load transform for md5: -2
[  771.776912][T11564] sp0: Synchronizing with TNC
[  772.331666][T11557] [U] �
[  772.520081][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1416'.
[  772.529818][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1416'.
[  774.979123][T11576] libceph: resolve '4' (ret=-3): failed
[  775.192744][T11578] libceph: resolve '4' (ret=-3): failed
[  775.635999][T11581] IPv6: Can't replace route, no match found
[  776.659645][T11589] netlink: 'syz.1.1423': attribute type 1 has an invalid length.
[  779.581122][T11613] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 11613 comm: syz.2.1429)
[  779.722782][T11617] libceph: resolve '4' (ret=-3): failed
[  779.826021][T11605] sctp: failed to load transform for md5: -2
[  779.882832][T11616] libceph: resolve '4' (ret=-3): failed
[  779.940266][   T30] audit: type=1800 audit(1755703357.753:17): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1429" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=28990 res=0 errno=0
[  780.499871][T11623] binfmt_misc: register: failed to install interpreter file ./file0
[  782.016163][T11634] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  782.028231][T11634] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0'
[  784.140181][T11658] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  784.726105][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'.
[  787.119304][T11676] xt_CT: You must specify a L4 protocol and not use inversions on it
[  787.820579][T11674] libceph: resolve '4' (ret=-3): failed
[  788.600889][T11685] libceph: resolve '4' (ret=-3): failed
[  789.553717][T11701] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  789.861861][T11704] netlink: 'syz.1.1451': attribute type 4 has an invalid length.
[  791.172354][T11714] xt_time: invalid argument - start or stop time greater than 23:59:59
[  791.184250][T11714] netlink: 'syz.4.1455': attribute type 1 has an invalid length.
[  791.260825][T11715] netlink: 'syz.4.1455': attribute type 1 has an invalid length.
[  794.140148][T11733] batman_adv: batadv0: Interface deactivated: dummy0
[  794.149011][T11733] batman_adv: batadv0: Removing interface: dummy0
[  794.975155][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  794.982727][T11733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  795.101180][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  795.113419][T11733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  795.305334][T11745] libceph: resolve '4' (ret=-3): failed
[  802.737602][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'.
[  802.746705][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'.
[  804.181929][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'.
[  804.599653][T11785] lo speed is unknown, defaulting to 1000
[  804.606460][T11785] lo speed is unknown, defaulting to 1000
[  804.622120][T11785] lo speed is unknown, defaulting to 1000
[  804.662917][T11785] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  804.743708][T11785] infiniband s: RDMA CMA: cma_listen_on_dev, error -98
[  804.946102][T11785] lo speed is unknown, defaulting to 1000
[  804.969685][T11785] lo speed is unknown, defaulting to 1000
[  804.990551][T11785] lo speed is unknown, defaulting to 1000
[  805.011253][T11785] lo speed is unknown, defaulting to 1000
[  805.031149][T11785] lo speed is unknown, defaulting to 1000
[  807.379744][T11803] tty tty28: ldisc open failed (-12), clearing slot 27
[  808.593110][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'.
[  808.602471][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1472'.
[  808.662085][T11797] CIFS mount error: No usable UNC path provided in device string!
[  808.662085][T11797] 
[  808.673360][T11797] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  811.420214][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'.
[  813.590339][T11842] ip6erspan0: entered promiscuous mode
[  813.600829][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  813.823626][T11842] tipc: Cannot configure node identity twice
[  814.449958][T11848] libceph: resolve '4' (ret=-3): failed
[  814.550956][T11852] libceph: resolve '4' (ret=-3): failed
[  817.360558][T11870] capability: warning: `syz.2.1491' uses 32-bit capabilities (legacy support in use)
[  819.942601][T11887] netlink: 'syz.1.1495': attribute type 1 has an invalid length.
[  821.233466][T11901] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  821.242742][T11901] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  822.873222][T11898] ubi: mtd0 is already attached to ubi31
[  822.902806][T11907] libceph: resolve '4' (ret=-3): failed
[  823.048301][T11913] libceph: resolve '4' (ret=-3): failed
[  824.922686][T11822] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  824.970994][T11822] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  825.526817][T11935] 9pnet_fd: Insufficient options for proto=fd
[  825.782256][ T5843] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  826.374391][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'.
[  826.455462][T11943] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1508'.
[  826.464653][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1508'.
[  826.476880][T11943] overlayfs: failed to clone upperpath
[  827.080720][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'.
[  827.162175][T11953] /dev/nullb0: Can't lookup blockdev
[  829.478754][T11977] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  829.488730][T11977] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  832.035429][T11986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  832.386646][T11985] libceph: resolve '4' (ret=-3): failed
[  835.184538][T12015] Cannot find add_set index 0 as target
[  837.407303][T12039] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1533'.
[  838.873292][T12050] netlink: 'syz.5.1534': attribute type 9 has an invalid length.
[  839.428124][T12047] libceph: resolve '4' (ret=-3): failed
[  844.161491][ T5845] Bluetooth: hci1: unexpected event for opcode 0x200a
[  845.098477][T12099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  846.202678][T12104] libceph: resolve '4' (ret=-3): failed
[  848.118490][T12136] comedi comedi0: Minor 4 could not be opened
[  848.267040][T12141] libceph: resolve '4' (ret=-3): failed
[  851.270431][T12147] tipc: New replicast peer: 255.255.255.255
[  851.277417][T12147] tipc: Enabled bearer <udp:syz2>, priority 10
[  851.360500][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'.
[  851.389654][T12151] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  851.413019][T12147] IPVS: stopping backup sync thread 12151 ...
[  851.626346][T12157] libceph: resolve '4' (ret=-3): failed
[  852.163233][   T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  852.535204][   T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  852.592684][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.711462][   T43] usb 6-1: config 0 descriptor??
[  852.746180][   T43] cp210x 6-1:0.0: cp210x converter detected
[  852.897487][T12170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1576'.
[  853.793357][T12171] 9pnet: Could not find request transport: fd0x0000000000000003
[  855.738100][   T43] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71
[  855.808202][   T43] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71
[  856.271485][   T43] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  856.323894][   T43] usb 6-1: cp210x converter now attached to ttyUSB0
[  856.379739][   T43] usb 6-1: USB disconnect, device number 23
[  856.415884][   T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  856.522027][   T43] cp210x 6-1:0.0: device disconnected
[  856.528151][T12199] libceph: resolve '4' (ret=-3): failed
[  857.814688][T12226] dvmrp1: entered allmulticast mode
[  861.652933][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'.
[  862.213182][ T5845] Bluetooth: Fragment is too long (len 14, expected 2)
[  862.563129][ T5907] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  862.804532][ T5907] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  862.855516][ T5907] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  862.873442][ T5907] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  863.997895][ T5907] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  864.511491][ T5907] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  864.521275][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.956661][ T5907] ath6kl: Failed to submit usb control message: -71
[  865.565509][ T5907] ath6kl: unable to send the bmi data to the device: -71
[  865.579876][ T5907] ath6kl: Unable to send get target info: -71
[  865.602703][ T5907] ath6kl: Failed to init ath6kl core: -71
[  865.634976][ T5907] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71
[  865.682992][ T5907] usb 6-1: USB disconnect, device number 24
[  865.805563][T12336] libceph: resolve '4' (ret=-3): failed
[  869.410550][   T30] audit: type=1400 audit(1755703447.544:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12371 comm="syz.2.1650" src=1 dest=20000
[  870.168286][T12385] libceph: resolve '4' (ret=-3): failed
[  871.563110][ T5907] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  871.743356][ T5907] usb 6-1: Using ep0 maxpacket: 32
[  874.208734][ T5907] usb 6-1: device descriptor read/all, error -71
[  874.876760][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  875.797480][T12444] libceph: resolve '4' (ret=-3): failed
[  876.274426][T12448] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1676'.
[  877.060526][T12450] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1678'.
[  877.404413][T12465] libceph: resolve '4' (ret=-3): failed
[  877.944722][T12468] libceph: resolve '4' (ret=-3): failed
[  878.384367][T12483] libceph: resolve '4' (ret=-3): failed
[  879.149226][T12494] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1697'.
[  879.419074][T12502] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  880.670967][T12501] libceph: resolve '4' (ret=-3): failed
[  881.170154][T12510] libceph: resolve '4' (ret=-3): failed
[  881.655017][T12512] libceph: resolve '4' (ret=-3): failed
[  881.754886][T12514] tipc: Enabled bearer <ib:geneve1>, priority 12
[  882.378469][   T30] audit: type=1326 audit(1755703460.514:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  882.570207][T12524] syz.2.1707 (12524): attempted to duplicate a private mapping with mremap.  This is not supported.
[  882.679850][   T30] audit: type=1326 audit(1755703460.554:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  882.812080][   T30] audit: type=1326 audit(1755703460.604:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  882.834424][   T30] audit: type=1326 audit(1755703460.634:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  882.861083][   T30] audit: type=1326 audit(1755703460.654:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  882.883066][ T5927] tipc: Node number set to 2880423158
[  882.888839][   T30] audit: type=1326 audit(1755703460.654:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  882.964640][   T30] audit: type=1326 audit(1755703460.674:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  883.091368][   T30] audit: type=1326 audit(1755703460.674:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  883.731160][   T30] audit: type=1326 audit(1755703460.704:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  883.856586][   T30] audit: type=1326 audit(1755703460.854:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41038ebe9 code=0x7ffc0000
[  884.186125][T12541] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  884.555454][T12546] bond0 (unregistering): Released all slaves
[  884.704962][T12532] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  885.925235][T12562] libceph: resolve '4' (ret=-3): failed
[  886.194782][T12579] libceph: resolve '4' (ret=-3): failed
[  887.941066][T12625] tipc: Enabled bearer <eth:wg1>, priority 24
[  888.133158][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  888.133178][   T30] audit: type=1326 audit(1755703466.254:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.164625][T12633] libceph: resolve '4' (ret=-3): failed
[  888.253305][   T30] audit: type=1326 audit(1755703466.254:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.323179][   T30] audit: type=1326 audit(1755703466.254:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.369919][   T30] audit: type=1326 audit(1755703466.254:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.447867][   T30] audit: type=1326 audit(1755703466.254:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.513540][   T30] audit: type=1326 audit(1755703466.254:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.553821][   T30] audit: type=1326 audit(1755703466.254:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.577069][   T30] audit: type=1326 audit(1755703466.264:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.602502][   T30] audit: type=1326 audit(1755703466.264:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  888.670866][   T30] audit: type=1326 audit(1755703466.264:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4cf8ebe9 code=0x7ffc0000
[  888.765340][T12657] netlink: 'syz.2.1764': attribute type 29 has an invalid length.
[  888.801583][T12657] netlink: 'syz.2.1764': attribute type 29 has an invalid length.
[  888.810476][T12657] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1764'.
[  888.823414][T12657] unsupported nla_type 58
[  888.834315][ T3091] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  889.373680][ T3091] usb 5-1: config 0 has an invalid interface number: 93 but max is 0
[  890.212377][ T3091] usb 5-1: config 0 has no interface number 0
[  890.228758][ T3091] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  890.238642][ T3091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.247280][ T3091] usb 5-1: Product: syz
[  890.251598][ T3091] usb 5-1: Manufacturer: syz
[  890.257391][ T3091] usb 5-1: SerialNumber: syz
[  890.265437][ T3091] usb 5-1: config 0 descriptor??
[  890.434488][T12669] libceph: resolve '4' (ret=-3): failed
[  890.483563][ T3091] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  890.520940][ T3091] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  890.566313][ T3091] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  890.589185][ T3091] usb 5-1: media controller created
[  890.617984][ T3091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  890.669231][T12674] netlink: set zone limit has 4 unknown bytes
[  890.699487][T12676] netlink: del zone limit has 4 unknown bytes
[  890.757242][ T3091] DVB: Unable to find symbol dib7000p_attach()
[  890.785688][ T3091] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  890.821582][ T3091] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  890.920946][ T3091] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  891.039166][ T3091] usb 5-1: media controller created
[  891.321528][ T3091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  891.390941][ T3091] dib0700: the master dib7090 has to be initialized first
[  891.429743][ T3091] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  891.559318][ T3091] rc_core: IR keymap rc-dib0700-rc5 not found
[  891.574801][ T3091] Registered IR keymap rc-empty
[  891.580364][ T3091] dvb-usb: could not initialize remote control.
[  891.583178][T12693] lo speed is unknown, defaulting to 1000
[  891.611522][ T3091] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  891.730369][ T5907] usb 5-1: USB disconnect, device number 19
[  891.794651][   T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  891.806769][ T5907] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  891.983394][   T10] usb 6-1: Using ep0 maxpacket: 32
[  891.990964][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  892.011914][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  892.052701][T12711] libceph: resolve '4' (ret=-3): failed
[  892.119323][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  892.156048][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.196522][   T10] usb 6-1: config 0 descriptor??
[  892.230309][   T10] hub 6-1:0.0: USB hub found
[  892.433451][   T10] hub 6-1:0.0: 1 port detected
[  893.314751][T12734] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4238712359 (4238712359 ns) > initial count (328249443 ns). Using initial count to start timer.
[  893.506552][   T10] hub 6-1:0.0: hub_hub_status failed (err = -32)
[  893.521227][   T10] hub 6-1:0.0: config failed, can't get hub status (err -32)
[  893.537580][   T10] usbhid 6-1:0.0: can't add hid device: -32
[  893.545519][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[  893.619093][   T10] usb 6-1: USB disconnect, device number 28
[  893.771288][T12750] libceph: resolve '4' (ret=-3): failed
[  895.909530][T12776] overlayfs: failed to clone upperpath
[  896.397233][T12791] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  896.549749][T12799] libceph: resolve '4' (ret=-3): failed
[  897.215303][T12810] libceph: resolve '4' (ret=-3): failed
[  898.176158][T12809] libceph: resolve '4' (ret=-3): failed
[  898.579665][T12830] syz_tun: entered allmulticast mode
[  898.620234][T12827] syz_tun: left allmulticast mode
[  898.958603][T12846] libceph: resolve '4' (ret=-3): failed
[  899.013330][ T5927] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  899.236833][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  899.299565][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  899.379851][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  899.522215][ T5927] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  899.587143][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.604911][ T5927] usb 4-1: config 0 descriptor??
[  899.830257][T12862] sctp: [Deprecated]: syz.1.1837 (pid 12862) Use of int in max_burst socket option deprecated.
[  899.830257][T12862] Use struct sctp_assoc_value instead
[  900.296401][ T5927] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  900.324713][ T5927] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  900.332291][ T5927] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  900.534301][ T5927] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  900.542949][ T5927] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  900.609385][ T5927] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  900.655704][ T5927] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  900.690951][ T5927] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  900.721495][ T5927] usb 4-1: USB disconnect, device number 23
[  901.421376][T12898] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  901.431109][T12898] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  904.133269][ T5907] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  904.317311][ T5907] usb 4-1: config 0 has an invalid interface number: 212 but max is 0
[  904.357095][ T5907] usb 4-1: config 0 has no interface number 0
[  904.378966][ T5907] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88
[  904.417155][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.471262][ T5907] usb 4-1: config 0 descriptor??
[  904.498233][ T5907] quatech2 4-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected
[  904.732946][ T5907] usb 4-1: qt2_attach - failed to power on unit: -71
[  904.771354][ T5907] quatech2 4-1:0.212: probe with driver quatech2 failed with error -71
[  904.821793][ T5907] usb 4-1: USB disconnect, device number 24
[  905.582194][T12946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1867'.
[  906.626270][T12970] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  909.979001][T12982] syz.4.1879 (12982): drop_caches: 2
[  910.704120][ T3091] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  910.873856][ T3091] usb 6-1: Using ep0 maxpacket: 16
[  910.963065][ T3091] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  911.001553][ T3091] usb 6-1: config 0 interface 0 has no altsetting 0
[  911.439295][ T3091] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  911.457720][ T3091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.468507][ T3091] usb 6-1: Product: syz
[  911.473704][ T3091] usb 6-1: Manufacturer: syz
[  911.478644][ T3091] usb 6-1: SerialNumber: syz
[  911.493014][ T3091] usb 6-1: config 0 descriptor??
[  911.730789][T13012] overlayfs: failed to clone upperpath
[  911.799863][ T3091] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input18
[  911.913906][ T3091] imon:send_packet: packet tx failed (-71)
[  911.921570][T13016] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1891'.
[  911.932148][T13016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'.
[  911.943287][ T3091] imon 6-1:0.0: panel buttons/knobs setup failed
[  913.533345][ T3091] rc_core: IR keymap rc-imon-pad not found
[  913.567833][ T3091] Registered IR keymap rc-empty
[  913.638044][ T3091] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  913.727355][ T3091] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  913.796442][ T3091] imon:send_packet: packet tx failed (-71)
[  913.823890][ T3091] imon 6-1:0.0: remote input dev register failed
[  913.875083][ T3091] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[  914.355428][ T3091] imon 6-1:0.0: unable to initialize intf0, err 0
[  914.362037][ T3091] imon:imon_probe: failed to initialize context!
[  914.368819][ T3091] imon 6-1:0.0: unable to register, err -19
[  914.384408][ T3091] usb 6-1: USB disconnect, device number 29
[  915.794787][T13033] lo speed is unknown, defaulting to 1000
[  916.737109][T13090] libceph: resolve '4' (ret=-3): failed
[  917.803060][ T5907] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  917.986720][ T5907] usb 6-1: Using ep0 maxpacket: 8
[  918.009347][ T5907] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  918.031910][ T5907] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  918.082669][ T5907] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  918.123002][ T5907] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  918.172492][ T5907] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  918.226617][ T5907] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  918.263548][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.512823][T13115] libceph: resolve '4' (ret=-3): failed
[  918.606772][ T5907] usb 6-1: usb_control_msg returned -32
[  918.612448][ T5907] usbtmc 6-1:16.0: can't read capabilities
[  919.635948][T13135] libceph: resolve '4' (ret=-3): failed
[  919.703074][   T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  919.712784][T13136] netlink: 'syz.3.1930': attribute type 1 has an invalid length.
[  919.740923][T13136] netlink: 'syz.3.1930': attribute type 4 has an invalid length.
[  919.760042][T13136] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1930'.
[  919.766109][T13138] netlink: 'syz.3.1930': attribute type 1 has an invalid length.
[  919.790763][T13138] netlink: 'syz.3.1930': attribute type 4 has an invalid length.
[  919.811769][T13138] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1930'.
[  919.873020][   T43] usb 5-1: Using ep0 maxpacket: 8
[  919.880523][   T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  919.896285][   T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  919.921132][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  919.942160][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  919.969020][   T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  919.995303][   T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  920.011590][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.245164][   T43] usb 5-1: usb_control_msg returned -32
[  920.259335][   T43] usbtmc 5-1:16.0: can't read capabilities
[  920.583907][ T3091] usb 6-1: USB disconnect, device number 30
[  920.675705][T13149] libceph: resolve '4' (ret=-3): failed
[  920.949131][T13158] libceph: resolve '4' (ret=-3): failed
[  922.210695][T13178] vxcan1: entered allmulticast mode
[  922.533610][   T43] usb 5-1: USB disconnect, device number 20
[  922.791622][T13192] libceph: resolve '4' (ret=-3): failed
[  924.679467][T13228] libceph: resolve '4' (ret=-3): failed
[  926.435869][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1968'.
[  927.854122][ T5907] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  927.913846][T13268] sctp: [Deprecated]: syz.3.1975 (pid 13268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  927.913846][T13268] Use struct sctp_sack_info instead
[  928.033188][ T5907] usb 6-1: Using ep0 maxpacket: 32
[  929.053273][ T5907] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  929.061466][ T5907] usb 6-1: config 0 has no interface number 0
[  929.108461][ T5907] usb 6-1: config 0 interface 12 has no altsetting 0
[  929.136957][ T5907] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  929.180804][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.202757][ T5907] usb 6-1: Product: syz
[  929.214860][ T5907] usb 6-1: Manufacturer: syz
[  929.237867][ T5907] usb 6-1: SerialNumber: syz
[  929.298892][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'.
[  929.310261][T13274] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  929.318726][T13274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  929.766482][ T5907] usb 6-1: config 0 descriptor??
[  929.795918][ T5907] f81534 6-1:0.12: required endpoints missing
[  930.338336][ T5907] usb 6-1: USB disconnect, device number 31
[  930.472464][T13281] overlayfs: failed to clone upperpath
[  930.824460][T13290] overlayfs: failed to clone upperpath
[  933.644516][T13335] libceph: resolve '4' (ret=-3): failed
[  936.333754][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  937.996506][T13381] libceph: resolve '4' (ret=-3): failed
[  938.842874][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2021'.
[  941.273010][   T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  941.453059][   T43] usb 4-1: Using ep0 maxpacket: 32
[  941.611419][   T43] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  941.639901][   T43] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  941.656779][   T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  941.712465][   T43] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  941.757643][   T43] usb 4-1: Product: syz
[  941.767973][   T43] usb 4-1: Manufacturer: syz
[  941.787272][T13415] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  941.813999][   T43] hub 4-1:4.0: USB hub found
[  942.052592][T13437] lo speed is unknown, defaulting to 1000
[  942.193891][   T43] hub 4-1:4.0: 2 ports detected
[  943.292528][T13455] binder_alloc: 13454: binder_alloc_buf, no vma
[  943.519647][T11822] hub 4-1:4.0: activate --> -90
[  943.612283][T13463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  943.715823][T13463] syzkaller0: entered promiscuous mode
[  943.728307][T13463] syzkaller0: entered allmulticast mode
[  943.739646][T13463] tipc: Resetting bearer <eth:syzkaller0>
[  943.799542][T13462] tipc: Resetting bearer <eth:syzkaller0>
[  943.930141][T11822] usb 4-1-port2: cannot warm reset (err = -71)
[  943.930621][ T5907] usb 4-1: USB disconnect, device number 25
[  944.077736][T13469] libceph: resolve '4' (ret=-3): failed
[  946.883126][T11822] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  947.403141][T11822] usb 6-1: Using ep0 maxpacket: 32
[  947.467652][T11822] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  947.516576][T11822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  947.554487][T11822] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  947.589759][T11822] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  947.640831][T11822] usb 6-1: Product: syz
[  947.652845][T11822] usb 6-1: Manufacturer: syz
[  947.695682][T11822] usb 6-1: SerialNumber: syz
[  947.729696][T11822] usb 6-1: config 0 descriptor??
[  947.919046][T11822] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  948.072800][T13507] libceph: resolve '4' (ret=-3): failed
[  948.502803][T13510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  948.544638][T13510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  948.968018][ T5974] usb 6-1: Failed to submit usb control message: -110
[  948.979683][ T5974] usb 6-1: unable to send the bmi data to the device: -110
[  948.987488][ T5974] usb 6-1: unable to get target info from device
[  948.996056][T12312] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  949.006524][ T5974] usb 6-1: could not get target info (-110)
[  949.024910][ T5974] usb 6-1: could not probe fw (-110)
[  949.179952][T12312] usb 4-1: Using ep0 maxpacket: 16
[  949.197482][T12312] usb 4-1: too many configurations: 123, using maximum allowed: 8
[  949.228826][T12312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.325097][T12312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.342297][T12312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.367633][T12312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.479928][T12312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.510678][T12312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.651392][T12312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.741795][T12312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.856417][T12312] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  949.920043][T12312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  949.989643][T12312] usb 4-1: SerialNumber: syz
[  950.103759][T12312] usb 4-1: config 0 descriptor??
[  950.123954][T12312] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20
[  950.348790][T13512] input: syz1 as /devices/virtual/input/input21
[  950.387725][ T5189] bcm5974 4-1:0.0: could not read from device
[  950.409483][T12312] usb 4-1: USB disconnect, device number 26
[  950.409715][ T5189] bcm5974 4-1:0.0: could not read from device
[  950.432696][ T5189] bcm5974 4-1:0.0: could not read from device
[  951.214428][T13462] tipc: Disabling bearer <eth:syzkaller0>
[  951.301142][   T43] usb 6-1: USB disconnect, device number 32
[  951.428469][T13529] 9pnet_fd: Insufficient options for proto=fd
[  955.408213][T13567] libceph: resolve '4' (ret=-3): failed
[  956.898664][T13578] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2075'.
[  957.951126][T11822] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  958.163129][T11822] usb 4-1: Using ep0 maxpacket: 8
[  958.178579][T11822] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  958.205077][T11822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.253349][T11822] usb 4-1: Product: syz
[  958.257591][T11822] usb 4-1: Manufacturer: syz
[  958.288327][T11822] usb 4-1: SerialNumber: syz
[  958.310526][T11822] usb 4-1: config 0 descriptor??
[  958.326730][T11822] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  958.524609][T13602] libceph: resolve '4' (ret=-3): failed
[  958.695538][T13606] libceph: resolve '4' (ret=-3): failed
[  961.527683][T11822] gspca_sonixj: reg_w1 err -110
[  961.553095][T11822] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  961.606015][T11822] usb 4-1: USB disconnect, device number 27
[  961.668338][T13630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  962.021084][T13637] syz.3.2095: attempt to access beyond end of device
[  962.021084][T13637] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  962.038066][T13637] syz.3.2095: attempt to access beyond end of device
[  962.038066][T13637] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  962.054727][T13637] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  962.067497][T13637] syz.3.2095: attempt to access beyond end of device
[  962.067497][T13637] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  962.092824][T13637] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  962.763227][T13637] syz.3.2095: attempt to access beyond end of device
[  962.763227][T13637] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  962.885664][T13644] libceph: resolve '4' (ret=-3): failed
[  963.282459][T13637] syz.3.2095: attempt to access beyond end of device
[  963.282459][T13637] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  963.325313][T13637] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  963.397393][T13637] syz.3.2095: attempt to access beyond end of device
[  963.397393][T13637] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  963.453094][T13637] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  963.486934][T13637] syz.3.2095: attempt to access beyond end of device
[  963.486934][T13637] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  963.514585][T13637] syz.3.2095: attempt to access beyond end of device
[  963.514585][T13637] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  963.558259][T13637] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  963.625513][T13637] syz.3.2095: attempt to access beyond end of device
[  963.625513][T13637] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  963.654247][T13655] libceph: resolve '4' (ret=-3): failed
[  963.758427][T13637] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  963.770308][T13637] syz.3.2095: attempt to access beyond end of device
[  963.770308][T13637] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  963.783924][T13637] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  963.810830][T13637] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  963.853737][T13637] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  964.716218][T13667] erspan0: entered promiscuous mode
[  964.775250][T13667] erspan0: left promiscuous mode
[  973.005770][T13734] libceph: resolve '4' (ret=-3): failed
[  979.218356][T13782] sctp: [Deprecated]: syz.1.2136 (pid 13782) Use of int in max_burst socket option deprecated.
[  979.218356][T13782] Use struct sctp_assoc_value instead
[  981.743883][T13807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2145'.
[  988.993342][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  988.993364][   T30] audit: type=1326 audit(1755703567.104:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13862 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83258ebe9 code=0x7ffc0000
[  989.766822][   T30] audit: type=1326 audit(1755703567.104:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13862 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff83258ebe9 code=0x7ffc0000
[  990.063032][   T30] audit: type=1326 audit(1755703567.104:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13862 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83258ebe9 code=0x7ffc0000
[  997.874743][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  998.538049][T13936] random: crng reseeded on system resumption
[  999.927284][T13941] Restarting kernel threads ...
[  999.993769][T13941] Done restarting kernel threads.
[ 1004.183002][T13966] libceph: resolve '4' (ret=-3): failed
[ 1004.539013][T13971] Unsupported ieee802154 address type: 0
[ 1004.683109][   T10] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[ 1005.304807][   T10] usb 6-1: config 54 has an invalid interface number: 154 but max is 0
[ 1005.319178][   T10] usb 6-1: config 54 has no interface number 0
[ 1005.342100][   T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[ 1005.528053][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.252005][   T10] usb 6-1: Product: syz
[ 1006.262230][   T10] usb 6-1: Manufacturer: syz
[ 1006.269575][   T10] usb 6-1: SerialNumber: syz
[ 1006.320955][   T10] usb 6-1: can't set config #54, error -71
[ 1006.340004][   T10] usb 6-1: USB disconnect, device number 33
[ 1016.004238][T14040] ceph: No mds server is up or the cluster is laggy
[ 1016.383873][   T10] libceph: connect (1)[c::]:6789 error -101
[ 1016.391695][   T10] libceph: mon0 (1)[c::]:6789 connect error
[ 1019.323607][T14064] hub 1-0:1.0: USB hub found
[ 1019.428443][T14064] hub 1-0:1.0: 1 port detected
[ 1019.819556][T14074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1019.843178][T14074] syzkaller0: entered promiscuous mode
[ 1019.858979][T14074] syzkaller0: entered allmulticast mode
[ 1019.941173][T14074] tipc: Resetting bearer <eth:syzkaller0>
[ 1019.980986][T14073] tipc: Resetting bearer <eth:syzkaller0>
[ 1020.020243][T14073] tipc: Disabling bearer <eth:syzkaller0>
[ 1022.454983][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'.
[ 1023.014913][T14112] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1033.287835][T14179] bond0: entered allmulticast mode
[ 1033.301334][T14179] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1033.315282][T14179] bridge0: port 3(bond0) entered blocking state
[ 1033.324079][T14179] bridge0: port 3(bond0) entered disabled state
[ 1033.341313][T14179] bond0: entered promiscuous mode
[ 1033.355696][T14179] bridge0: port 3(bond0) entered blocking state
[ 1033.362578][T14179] bridge0: port 3(bond0) entered forwarding state
[ 1033.388125][   T13] bridge0: port 3(bond0) entered disabled state
[ 1033.439152][T14180] bond2: entered allmulticast mode
[ 1033.451586][T14180] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1033.461768][T14180] bridge0: port 4(bond2) entered blocking state
[ 1033.470121][T14180] bridge0: port 4(bond2) entered disabled state
[ 1033.481618][T14180] bond2: entered promiscuous mode
[ 1033.489068][T14180] bridge0: port 4(bond2) entered blocking state
[ 1033.495563][T14180] bridge0: port 4(bond2) entered forwarding state
[ 1034.522342][ T5974] bridge0: port 4(bond2) entered disabled state
[ 1034.942861][T14192] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 1036.335808][T14202] libceph: resolve '4' (ret=-3): failed
[ 1038.271248][T14225] netlink: 'syz.1.2259': attribute type 20 has an invalid length.
[ 1038.309624][T14225] dvmrp17: entered allmulticast mode
[ 1040.638900][T14247] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2265'.
[ 1041.646490][   T30] audit: type=1326 audit(1755703619.784:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1041.698465][   T30] audit: type=1326 audit(1755703619.814:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1041.727282][   T30] audit: type=1326 audit(1755703619.814:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1041.750576][   T30] audit: type=1326 audit(1755703619.814:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1041.775722][   T30] audit: type=1326 audit(1755703619.814:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1041.869969][   T30] audit: type=1326 audit(1755703619.814:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1041.928601][   T30] audit: type=1326 audit(1755703619.814:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1041.955659][   T30] audit: type=1326 audit(1755703619.814:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1042.190739][   T30] audit: type=1326 audit(1755703619.814:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1042.341918][T14256] netlink: 'syz.4.2268': attribute type 29 has an invalid length.
[ 1043.077701][   T30] audit: type=1326 audit(1755703619.814:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14248 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6f8ebe9 code=0x7ffc0000
[ 1043.124924][T14256] netlink: 'syz.4.2268': attribute type 29 has an invalid length.
[ 1044.598074][T14266] netlink: 'syz.3.2271': attribute type 23 has an invalid length.
[ 1047.425860][T14299] libceph: resolve '4' (ret=-3): failed
[ 1047.534393][T14300] hugetlbfs: syz.1.2281 (14300): Using mlock ulimits for SHM_HUGETLB is obsolete
[ 1049.032101][T14313] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[ 1054.661635][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'.
[ 1054.670849][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'.
[ 1054.679972][T14346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2293'.
[ 1055.106987][T14350] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[ 1055.117466][T14350] overlayfs: missing 'lowerdir'
[ 1057.406621][T14378] overlayfs: failed to clone lowerpath
[ 1057.808032][T14383] libceph: resolve '4' (ret=-3): failed
[ 1058.338743][T14387] netlink: 'syz.4.2305': attribute type 2 has an invalid length.
[ 1059.190932][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.832896][T14409] loop6: detected capacity change from 0 to 63
[ 1060.909349][T14409] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1060.919004][T14409] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1060.928176][T14409] Buffer I/O error on dev loop6, logical block 2, async page read
[ 1060.938360][T14409] Buffer I/O error on dev loop6, logical block 3, async page read
[ 1060.952077][T14409] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1060.962140][T14409] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1060.973902][T14409] Buffer I/O error on dev loop6, logical block 2, async page read
[ 1060.983011][T14409] Buffer I/O error on dev loop6, logical block 3, async page read
[ 1060.994549][T14409] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1061.004909][T14409] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1065.090244][T14430] libceph: resolve '4' (ret=-3): failed
[ 1066.757070][T14440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2319'.
[ 1067.790857][T14446] sctp: [Deprecated]: syz.3.2320 (pid 14446) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1067.790857][T14446] Use struct sctp_sack_info instead
[ 1074.206399][T14494] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1076.057072][T14505] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1076.063674][T14505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1076.133732][T14511] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9)
[ 1076.140340][T14511] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1076.150712][T14505] vhci_hcd vhci_hcd.0: Device attached
[ 1076.159103][T14511] vhci_hcd vhci_hcd.0: Device attached
[ 1076.190948][T14508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1076.273238][T14505] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11)
[ 1076.281695][T14505] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1076.343068][T14505] vhci_hcd vhci_hcd.0: Device attached
[ 1076.382805][ T5907] usb 39-1: new low-speed USB device number 3 using vhci_hcd
[ 1076.396656][T14505] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16)
[ 1076.403359][T14505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1076.600010][T14505] vhci_hcd vhci_hcd.0: Device attached
[ 1077.376921][T14511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1077.504775][T14508] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19)
[ 1077.511457][T14508] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1077.679304][T14508] vhci_hcd vhci_hcd.0: Device attached
[ 1077.754276][T14524] vhci_hcd: connection closed
[ 1077.762284][T14506] vhci_hcd: connection reset by peer
[ 1077.773132][T14517] vhci_hcd: connection closed
[ 1077.773925][T14512] vhci_hcd: connection closed
[ 1077.783348][   T36] vhci_hcd: stop threads
[ 1077.829061][   T36] vhci_hcd: release socket
[ 1077.849424][   T36] vhci_hcd: disconnect device
[ 1077.873140][   T36] vhci_hcd: stop threads
[ 1077.877454][   T36] vhci_hcd: release socket
[ 1077.916515][T14528] vhci_hcd: connection closed
[ 1077.924900][   T36] vhci_hcd: disconnect device
[ 1077.948302][   T36] vhci_hcd: stop threads
[ 1077.952622][   T36] vhci_hcd: release socket
[ 1077.958658][   T36] vhci_hcd: disconnect device
[ 1077.964683][   T36] vhci_hcd: stop threads
[ 1077.970374][   T36] vhci_hcd: release socket
[ 1077.975549][   T36] vhci_hcd: disconnect device
[ 1077.980759][   T36] vhci_hcd: stop threads
[ 1077.986097][   T36] vhci_hcd: release socket
[ 1077.990899][   T36] vhci_hcd: disconnect device
[ 1078.602785][T12312] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1078.714750][T14544] delete_channel: no stack
[ 1079.325526][T12312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1079.342892][T12312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1079.369750][T12312] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1079.468701][T12312] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1079.538659][T12312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.603324][T14558] trusted_key: encrypted_key: insufficient parameters specified
[ 1080.926615][T12312] usb 6-1: config 0 descriptor??
[ 1080.933624][T12312] usb 6-1: can't set config #0, error -71
[ 1080.944083][T12312] usb 6-1: USB disconnect, device number 34
[ 1082.953485][ T5907] vhci_hcd: vhci_device speed not set
[ 1084.025512][T14566] ubi: mtd0 is already attached to ubi31
[ 1086.246653][T14567] trusted_key: encrypted_key: insufficient parameters specified
[ 1086.360479][T14572] trusted_key: encrypted_key: insufficient parameters specified
[ 1087.136864][   T43] usb usb40-port1: attempt power cycle
[ 1088.524083][   T43] usb usb40-port1: unable to enumerate USB device
[ 1090.810726][T14594] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1090.810743][T14593] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1090.810807][T14593] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1090.833993][T14594] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1091.844456][T14593] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1091.859950][T14593] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1091.860283][T14594] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1091.944294][T14609] syz.4.2358 (14609): drop_caches: 2
[ 1092.171832][T14594] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1093.147449][T14594] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1093.172550][T14593] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1093.172599][T14594] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1093.483143][T14623] overlay: Unknown parameter '/'
[ 1094.016019][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[ 1094.514411][T14593] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1094.625649][T14593] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1094.633600][T14593] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1095.300269][   T43] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1095.745081][   T43] usb 6-1: Using ep0 maxpacket: 8
[ 1099.870016][   T43] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1099.888178][   T43] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1099.896278][   T43] usb 6-1: can't read configurations, error -71
[ 1100.889044][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'.
[ 1101.383399][T14673] netlink: 'syz.5.2377': attribute type 11 has an invalid length.
[ 1102.386028][T14683] loop9: detected capacity change from 0 to 7
[ 1102.393775][T14683] buffer_io_error: 2 callbacks suppressed
[ 1102.393792][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.408190][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.416399][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.424788][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.433240][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.443772][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.451949][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.460321][T14683] ldm_validate_partition_table(): Disk read failed.
[ 1102.467419][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.475983][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.506993][T14683] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1102.516163][T14683] Dev loop9: unable to read RDB block 0
[ 1102.523077][T14683]  loop9: unable to read partition table
[ 1102.529575][T14683] loop9: partition table beyond EOD, truncated
[ 1102.536168][T14683] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 1102.536168][T14683] 
) failed (rc=-5)
[ 1107.902167][T12312] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1108.368141][T12312] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1109.626482][T14734] syz.4.2395 (14734): drop_caches: 2
[ 1110.460834][T14735] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2394'.
[ 1110.892871][T14732] libceph: resolve '4' (ret=-3): failed
[ 1113.971278][T14769] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2405'.
[ 1115.768648][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2408'.
[ 1116.319869][T14788] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0
[ 1116.635456][T14783] libceph: resolve '4' (ret=-3): failed
[ 1120.653274][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.627605][T14825] libceph: resolve '4' (ret=-3): failed
[ 1127.442793][T12312] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1128.136257][T12312] usb 4-1: device not accepting address 28, error -71
[ 1128.381955][T14876] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2430'.
[ 1128.391356][T14876] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2430'.
[ 1128.865848][T14878] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer.
[ 1130.324505][T14883] x_tables: duplicate entry at hook 1
[ 1131.720297][T14899] ubi: mtd0 is already attached to ubi31
[ 1132.581857][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'.
[ 1135.691143][T14923] netlink: 'syz.1.2444': attribute type 10 has an invalid length.
[ 1136.247127][T14923] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[ 1136.504374][T14923] team0: Port device wlan1 added
[ 1136.532836][T12312] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1136.730219][T12312] usb 6-1: Using ep0 maxpacket: 16
[ 1136.749370][T12312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1136.765132][T12312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1136.780903][T12312] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1136.794745][T12312] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1136.826170][T12312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1136.886033][T12312] usb 6-1: config 0 descriptor??
[ 1137.551593][T12312] input: HID 0955:7214 Haptics as /devices/virtual/input/input22
[ 1137.798682][T12312] shield 0003:0955:7214.0009: Registered Thunderstrike controller
[ 1137.852001][T12312] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[ 1137.974695][ T5907] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1137.988031][T12312] usb 6-1: USB disconnect, device number 37
[ 1138.017677][ T5907] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1138.491993][T14956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2452'.
[ 1139.151029][ T5907] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1139.336870][ T5907] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1140.206205][T14964] netlink: 'syz.4.2453': attribute type 2 has an invalid length.
[ 1140.262758][T14964] : entered promiscuous mode
[ 1141.088307][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'.
[ 1141.131010][T14967] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1141.140001][T14967] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1141.149786][T14967] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1141.159180][T14967] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1145.224727][T15010] libceph: resolve '4' (ret=-3): failed
[ 1147.556811][T15020] netlink: 'syz.1.2468': attribute type 7 has an invalid length.
[ 1147.569973][T15020] : entered promiscuous mode
[ 1149.687248][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'.
[ 1150.964675][T15042] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1155.766126][T15074] fuse: Unknown parameter 'f�'
[ 1157.082182][T15083] netlink: 'syz.1.2484': attribute type 2 has an invalid length.
[ 1158.485756][T15086] libceph: resolve '4' (ret=-3): failed
[ 1159.693253][T15110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2489'.
[ 1159.916343][T15103] 
[ 1159.918820][T15103] ======================================================
[ 1159.925845][T15103] WARNING: possible circular locking dependency detected
[ 1159.932880][T15103] 6.16.0-syzkaller #0 Not tainted
[ 1159.937908][T15103] ------------------------------------------------------
[ 1159.944949][T15103] syz.3.2486/15103 is trying to acquire lock:
[ 1159.951017][T15103] ffff888024e43358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[ 1159.960284][T15103] 
[ 1159.960284][T15103] but task is already holding lock:
[ 1159.967650][T15103] ffff888024e42368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[ 1159.977334][T15103] 
[ 1159.977334][T15103] which lock already depends on the new lock.
[ 1159.977334][T15103] 
[ 1159.987778][T15103] 
[ 1159.987778][T15103] the existing dependency chain (in reverse order) is:
[ 1159.996894][T15103] 
[ 1159.996894][T15103] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[ 1160.005339][T15103]        lock_acquire+0x120/0x360
[ 1160.010375][T15103]        down_write+0x96/0x1f0
[ 1160.015152][T15103]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[ 1160.021404][T15103]        nbd_start_device+0x16c/0xac0
[ 1160.026789][T15103]        nbd_ioctl+0x636/0xeb0
[ 1160.031567][T15103]        blkdev_ioctl+0x5a8/0x6d0
[ 1160.036602][T15103]        __se_sys_ioctl+0xfc/0x170
[ 1160.041770][T15103]        do_syscall_64+0xfa/0x3b0
[ 1160.046832][T15103]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.053269][T15103] 
[ 1160.053269][T15103] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[ 1160.061104][T15103]        lock_acquire+0x120/0x360
[ 1160.066135][T15103]        __mutex_lock+0x182/0xe80
[ 1160.071167][T15103]        refcount_dec_and_mutex_lock+0x30/0xa0
[ 1160.077379][T15103]        nbd_config_put+0x2c/0x790
[ 1160.082536][T15103]        nbd_release+0xfe/0x140
[ 1160.087433][T15103]        bdev_release+0x533/0x650
[ 1160.092518][T15103]        blkdev_release+0x15/0x20
[ 1160.097566][T15103]        __fput+0x449/0xa70
[ 1160.102080][T15103]        fput_close_sync+0x119/0x200
[ 1160.107371][T15103]        __x64_sys_close+0x7f/0x110
[ 1160.112588][T15103]        do_syscall_64+0xfa/0x3b0
[ 1160.117638][T15103]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.124063][T15103] 
[ 1160.124063][T15103] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[ 1160.131894][T15103]        validate_chain+0xb9b/0x2140
[ 1160.137202][T15103]        __lock_acquire+0xab9/0xd20
[ 1160.142404][T15103]        lock_acquire+0x120/0x360
[ 1160.147457][T15103]        __mutex_lock+0x182/0xe80
[ 1160.152488][T15103]        __del_gendisk+0x129/0x9e0
[ 1160.157640][T15103]        del_gendisk+0xe8/0x160
[ 1160.162499][T15103]        loop_remove+0x42/0xc0
[ 1160.167293][T15103]        loop_control_ioctl+0x4ac/0x5a0
[ 1160.172862][T15103]        __se_sys_ioctl+0xfc/0x170
[ 1160.178008][T15103]        do_syscall_64+0xfa/0x3b0
[ 1160.183072][T15103]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.189493][T15103] 
[ 1160.189493][T15103] other info that might help us debug this:
[ 1160.189493][T15103] 
[ 1160.199729][T15103] Chain exists of:
[ 1160.199729][T15103]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[ 1160.199729][T15103] 
[ 1160.214083][T15103]  Possible unsafe locking scenario:
[ 1160.214083][T15103] 
[ 1160.221532][T15103]        CPU0                    CPU1
[ 1160.226901][T15103]        ----                    ----
[ 1160.232268][T15103]   rlock(&set->update_nr_hwq_lock);
[ 1160.237561][T15103]                                lock(&nbd->config_lock);
[ 1160.244684][T15103]                                lock(&set->update_nr_hwq_lock);
[ 1160.252526][T15103]   lock(&disk->open_mutex);
[ 1160.257235][T15103] 
[ 1160.257235][T15103]  *** DEADLOCK ***
[ 1160.257235][T15103] 
[ 1160.265378][T15103] 1 lock held by syz.3.2486/15103:
[ 1160.270487][T15103]  #0: ffff888024e42368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[ 1160.280691][T15103] 
[ 1160.280691][T15103] stack backtrace:
[ 1160.286679][T15103] CPU: 1 UID: 0 PID: 15103 Comm: syz.3.2486 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1160.286703][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1160.286714][T15103] Call Trace:
[ 1160.286723][T15103]  <TASK>
[ 1160.286730][T15103]  dump_stack_lvl+0x189/0x250
[ 1160.286752][T15103]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1160.286769][T15103]  ? __pfx__printk+0x10/0x10
[ 1160.286790][T15103]  ? print_lock_name+0xde/0x100
[ 1160.286811][T15103]  print_circular_bug+0x2ee/0x310
[ 1160.286832][T15103]  check_noncircular+0x134/0x160
[ 1160.286853][T15103]  validate_chain+0xb9b/0x2140
[ 1160.286872][T15103]  ? stack_depot_save_flags+0x40/0x900
[ 1160.286895][T15103]  __lock_acquire+0xab9/0xd20
[ 1160.286912][T15103]  ? __del_gendisk+0x129/0x9e0
[ 1160.286931][T15103]  lock_acquire+0x120/0x360
[ 1160.286944][T15103]  ? __del_gendisk+0x129/0x9e0
[ 1160.286965][T15103]  ? lockdep_unlock+0x89/0x120
[ 1160.286990][T15103]  __mutex_lock+0x182/0xe80
[ 1160.287007][T15103]  ? __del_gendisk+0x129/0x9e0
[ 1160.287030][T15103]  ? __del_gendisk+0x129/0x9e0
[ 1160.287050][T15103]  ? __pfx___mutex_lock+0x10/0x10
[ 1160.287067][T15103]  ? __pfx___might_resched+0x10/0x10
[ 1160.287087][T15103]  ? __lock_acquire+0xab9/0xd20
[ 1160.287101][T15103]  ? disk_del_events+0xb5/0x210
[ 1160.287122][T15103]  ? __del_gendisk+0xc1/0x9e0
[ 1160.287142][T15103]  __del_gendisk+0x129/0x9e0
[ 1160.287162][T15103]  ? del_gendisk+0xe0/0x160
[ 1160.287184][T15103]  ? __pfx___del_gendisk+0x10/0x10
[ 1160.287205][T15103]  ? down_read+0x1ad/0x2e0
[ 1160.287224][T15103]  del_gendisk+0xe8/0x160
[ 1160.287244][T15103]  loop_remove+0x42/0xc0
[ 1160.287270][T15103]  loop_control_ioctl+0x4ac/0x5a0
[ 1160.287286][T15103]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1160.287299][T15103]  ? __fget_files+0x2a/0x420
[ 1160.287317][T15103]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1160.287335][T15103]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1160.287349][T15103]  __se_sys_ioctl+0xfc/0x170
[ 1160.287373][T15103]  do_syscall_64+0xfa/0x3b0
[ 1160.287394][T15103]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1160.287410][T15103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.287425][T15103]  ? clear_bhb_loop+0x60/0xb0
[ 1160.287443][T15103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.287458][T15103] RIP: 0033:0x7f1b4cf8ebe9
[ 1160.287473][T15103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1160.287487][T15103] RSP: 002b:00007f1b4dd3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1160.287503][T15103] RAX: ffffffffffffffda RBX: 00007f1b4d1b6090 RCX: 00007f1b4cf8ebe9
[ 1160.287515][T15103] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000009
[ 1160.287525][T15103] RBP: 00007f1b4d011e19 R08: 0000000000000000 R09: 0000000000000000
[ 1160.287535][T15103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1160.287545][T15103] R13: 00007f1b4d1b6128 R14: 00007f1b4d1b6090 R15: 00007ffc023af9e8
[ 1160.287563][T15103]  </TASK>
[ 1160.718907][T15118] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2
[ 1160.905327][   T65] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1162.703126][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1162.717676][T15116] caif:caif_disconnect_client(): nothing to disconnect